Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
File:                     PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json)
Hash identifier:          1DlmDuXmI7jdkmykjgAkzLaGBIRCTxdLh7k5vfzW60g=
Subject key identifier:   9A:5E:A5:B3:FE:6D:D7:BC:6F:AF:26:72:97:F9:BB:37:5B:4B:ED:E5
Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
Certificate issuer:       /CN=3db441cb569a7c799a1059ff57323b837caaa54e
Certificate serial:       0194BD17D561A4E24FDD5943D16A2ECEA793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
Manifest number:          0187
Signing time:             Fri 31 Jan 2025 16:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:43 +0000
Files and hashes:         1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: J45GYesQn3JpuY2azUa6t7r18xwIJuYHMV0ZILtFWXw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:d5:61:a4:e2:4f:dd:59:43:d1:6a:2e:ce:a7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e
        Validity
            Not Before: Jan 31 16:00:43 2025 GMT
            Not After : Feb  1 16:00:43 2025 GMT
        Subject: CN=9a5ea5b3fe6dd7bc6faf267297f9bb375b4bede5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:2f:e5:f9:df:c4:b4:7b:e1:2e:bd:c3:a5:
                    e6:e8:00:ba:72:5b:72:e8:18:be:c8:fb:99:1d:52:
                    7f:7b:02:62:5a:f5:07:62:b4:bc:4a:ee:4f:be:a9:
                    f6:bf:c7:e9:66:d5:5d:98:99:8e:d2:17:8b:a0:02:
                    a1:ac:6a:0e:1d:c4:b9:91:b0:39:f1:5e:cd:3c:bb:
                    ad:c3:5e:8e:24:e0:7e:06:f3:e7:1d:89:d3:29:61:
                    4b:af:27:83:36:9f:fe:81:7c:32:21:14:89:c7:71:
                    75:9e:88:e6:80:07:6d:d4:d4:b4:09:e4:81:9b:9c:
                    47:ec:a7:94:03:59:3f:ac:39:dc:73:67:ca:76:24:
                    55:2b:ce:4c:a1:98:3b:e8:91:c0:13:43:63:f1:1e:
                    46:f5:d7:e9:53:2a:d8:d6:c4:d3:29:ba:d4:ad:07:
                    de:4e:f6:45:b5:a0:51:0b:00:31:c9:93:31:45:78:
                    80:ad:ee:1a:57:79:f7:34:47:71:55:30:cd:d7:68:
                    a4:57:bb:83:ea:d2:ba:89:d5:9b:55:7f:7a:f1:81:
                    14:e6:80:50:9b:b2:57:79:8a:97:ef:c4:5e:b1:eb:
                    c0:d7:21:3b:54:12:96:88:1f:d2:b4:ae:58:5e:61:
                    80:f3:59:af:b6:96:b7:43:fb:6a:fd:60:c8:ab:9c:
                    83:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5E:A5:B3:FE:6D:D7:BC:6F:AF:26:72:97:F9:BB:37:5B:4B:ED:E5
            X509v3 Authority Key Identifier:
                keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:77:14:3a:54:c5:14:0b:6f:6c:9e:96:2a:16:53:b8:fe:25:
         ab:dd:f7:f6:9c:c1:73:ae:c3:4b:38:5f:4f:3f:64:da:2a:e4:
         1b:30:3d:7d:7a:19:5f:dd:92:91:f4:d9:c2:0e:88:65:9d:6f:
         aa:dc:b3:d1:44:cb:72:63:cb:c0:46:01:97:bd:9b:90:69:64:
         a3:0a:ef:8c:a5:4b:0a:90:67:71:a8:ac:dd:40:7f:55:73:2e:
         8e:f0:05:94:5d:a0:7b:01:0f:06:5c:b2:55:5c:60:d7:bf:a5:
         21:6a:4d:ff:3c:20:13:49:da:e1:ee:1c:0c:3f:63:83:31:a1:
         86:e3:a3:10:cd:31:63:30:03:c6:9a:9d:5e:63:3d:e4:53:58:
         1d:6b:c1:db:3a:f6:45:69:0a:b1:c0:90:a0:90:eb:14:6b:76:
         16:67:e4:9e:f9:fd:a1:b5:52:79:d0:6f:10:ed:22:53:db:05:
         08:47:d2:43:57:fd:b2:a6:34:ae:41:cc:1d:1b:15:c7:76:93:
         31:74:fe:65:4d:c3:9f:96:33:61:5a:58:65:f6:57:67:cc:da:
         fb:03:85:01:62:72:2d:aa:f6:21:2c:12:ab:40:8c:bb:fe:d5:
         17:24:72:ba:23:53:42:c8:97:e9:cc:97:ab:af:be:2b:01:a9:
         22:4a:02:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:37 2025 by rpki-client