Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
File:                     JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft (raw, json)
Hash identifier:          WM9+1/cvvzJXFqofbuirx6vgmOLF8rIdJORKryQ5gAo=
Subject key identifier:   81:D3:E3:38:64:CC:5F:E7:3B:47:66:38:B9:5B:01:DA:7D:E3:B7:6C
Authority key identifier: 26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B
Certificate issuer:       /CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
Certificate serial:       0194BCA99936F0EDF393520412CE60ED51B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
Manifest number:          0B0A
Signing time:             Fri 31 Jan 2025 14:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:18 +0000
Files and hashes:         1: JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl (hash: IjzPKWFp8qXa5AHwqNLE+cVeFbqNvpn0QjQG/IfAeN8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:99:36:f0:ed:f3:93:52:04:12:ce:60:ed:51:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
        Validity
            Not Before: Jan 31 14:00:18 2025 GMT
            Not After : Feb  1 14:00:18 2025 GMT
        Subject: CN=81d3e33864cc5fe73b476638b95b01da7de3b76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:75:2f:ad:b3:12:99:36:ef:d1:7a:1a:61:80:
                    b6:e7:4f:a1:7a:bd:27:41:70:c1:c9:c8:bf:e3:a7:
                    f7:25:b7:b0:16:ff:bb:25:43:69:70:d3:fe:4c:b1:
                    31:14:6d:58:a4:f0:80:04:8b:2a:fc:17:42:81:e5:
                    ef:d3:d8:b6:c8:ba:b1:06:9e:8e:d6:75:e4:f0:6f:
                    43:2a:6a:83:c3:d8:46:9c:a9:a5:18:09:96:d9:06:
                    b9:6d:00:b3:8b:d1:0a:92:62:01:dd:9c:2d:d9:f0:
                    64:f0:4b:2d:31:b7:8c:53:72:4a:a3:b0:07:85:46:
                    86:59:9b:df:c2:38:d2:e7:25:ac:2b:7c:ec:90:c1:
                    ca:4a:5b:07:60:1e:5b:54:8c:dc:96:7b:06:82:bd:
                    70:65:2e:81:3f:e3:c6:69:fd:0b:35:64:55:2f:3d:
                    71:44:38:ae:26:fa:06:ff:6a:b8:f0:c2:2d:2a:93:
                    a5:dc:c7:00:a8:e4:0a:6e:f5:c5:78:50:76:6a:cd:
                    7f:28:ff:40:ea:e7:25:2a:55:d3:7f:df:5e:6b:ba:
                    c7:a1:67:b5:74:08:43:9b:46:c0:28:b9:83:23:dd:
                    13:55:d7:40:cf:00:43:1d:93:e0:fe:28:ed:b9:e1:
                    9a:ed:9f:be:08:e0:f2:1e:36:d3:57:68:69:6f:6f:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D3:E3:38:64:CC:5F:E7:3B:47:66:38:B9:5B:01:DA:7D:E3:B7:6C
            X509v3 Authority Key Identifier:
                keyid:26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d0:6a:11:86:a0:79:bd:6d:8f:55:4c:93:59:6c:a6:0a:40:
         7d:df:5d:7c:bd:67:9a:48:dc:6d:96:33:12:b4:1d:46:e1:ac:
         c7:57:e7:e8:05:92:f2:68:41:14:6b:18:a3:3c:ee:96:ea:0d:
         bf:de:36:ea:71:eb:66:ca:cb:19:4b:2f:44:26:4e:0d:45:de:
         e8:dc:93:83:a1:5b:d0:25:70:ac:0b:28:32:f4:83:1b:f3:cd:
         8a:a6:b4:48:63:02:ab:1f:26:38:cc:0d:1a:2d:4d:72:40:2c:
         28:32:be:65:07:ec:eb:a5:18:0a:74:55:64:20:f8:6d:88:2b:
         dd:4b:ca:ab:3a:24:bf:05:b8:b1:58:50:43:7c:de:ea:75:19:
         b2:f8:2b:46:da:8c:86:2e:e3:7a:05:ee:3b:a3:41:1a:7a:be:
         0c:db:6b:05:01:05:54:30:93:38:5a:b3:70:80:df:6e:05:9b:
         1e:de:dc:f3:38:84:fb:e2:10:09:a4:d1:1e:c3:24:5b:dc:9d:
         a4:f8:4b:ed:26:ea:4a:82:b0:65:1e:45:59:d4:2d:9b:aa:ab:
         a9:23:03:cc:14:6d:58:1b:4b:d2:eb:e0:a6:ba:8d:fd:24:4d:
         4f:d4:51:b6:e8:09:bc:4f:31:0a:6c:36:f0:e3:55:f6:10:27:
         ef:c3:17:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:33:02 2025 by rpki-client