Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
File:                     K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft (raw, json)
Hash identifier:          WeZZVufu/Ta+dyXsyu3DfWazrAtNTAv2xVRjriwFEYM=
Subject key identifier:   63:76:99:9A:33:8D:E4:63:B3:6D:37:9F:FD:27:E9:36:A8:8F:ED:38
Authority key identifier: 2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
Certificate issuer:       /CN=2b4989fe3caca3f30443c54a902f6912110d9195
Certificate serial:       0194BC72F8C575763135D873B0E25AF64C5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
Manifest number:          0653
Signing time:             Fri 31 Jan 2025 13:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:38 +0000
Files and hashes:         1: K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl (hash: B1f/2GqDZ+u8tVyS9XcMoMzkrhuubuAH+5y97vOFzQ8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:f8:c5:75:76:31:35:d8:73:b0:e2:5a:f6:4c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4989fe3caca3f30443c54a902f6912110d9195
        Validity
            Not Before: Jan 31 13:00:38 2025 GMT
            Not After : Feb  1 13:00:38 2025 GMT
        Subject: CN=6376999a338de463b36d379ffd27e936a88fed38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:12:a1:94:52:ca:d6:88:6e:68:a8:43:27:
                    8a:4a:ef:67:84:ed:94:0f:db:99:4c:99:2a:54:ca:
                    df:b7:dd:e7:e9:be:3b:c8:7a:d5:cb:bb:d9:05:f9:
                    a4:8e:87:08:70:76:92:20:13:51:00:9f:8c:70:63:
                    c1:ee:ca:99:9a:41:4c:f8:e5:37:bb:9f:a2:5f:be:
                    1f:db:bd:31:b9:c5:3f:3f:52:3b:e0:08:77:3a:15:
                    18:c8:fb:08:aa:4e:dd:c8:91:1f:b0:e0:11:14:a5:
                    9e:68:26:e5:de:65:28:80:2b:c1:94:0e:5e:4b:90:
                    57:c9:e8:73:7f:af:5c:aa:5a:4e:0d:61:e4:98:86:
                    49:76:ea:b6:56:56:d1:bc:9f:f2:df:1f:20:f4:f1:
                    30:eb:b5:5f:84:4c:dd:b4:68:25:15:07:9d:d6:a5:
                    5f:68:ea:a6:ee:d8:47:67:0c:d0:6c:3d:ae:95:3f:
                    9c:11:10:7c:86:a9:c3:ab:05:92:de:f5:38:88:7d:
                    7a:80:70:73:f2:2b:e0:63:ae:10:6b:eb:9c:6b:5b:
                    df:70:53:22:c9:b7:0d:63:d7:a5:35:1e:d3:8d:d0:
                    07:b0:52:6f:e6:c4:d4:6b:93:f8:3e:03:59:27:79:
                    0c:32:4f:5b:28:39:ad:9a:e7:c0:bf:90:05:1c:cd:
                    dc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:76:99:9A:33:8D:E4:63:B3:6D:37:9F:FD:27:E9:36:A8:8F:ED:38
            X509v3 Authority Key Identifier:
                keyid:2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:5e:19:79:85:e0:5a:ce:55:1e:86:73:c8:99:ef:1b:4b:d2:
         67:3f:58:b4:65:c8:34:17:cb:42:62:a8:e6:b3:50:55:ab:bd:
         81:b5:43:89:56:19:96:b5:49:7e:14:8d:b3:80:7d:10:0a:58:
         6e:63:0a:6c:1a:bb:ca:8c:5b:e2:00:6a:67:4a:fc:8b:e4:5a:
         49:84:87:a7:23:e7:78:34:66:d2:3f:d0:0b:2b:39:da:60:4d:
         5e:4c:f3:c5:bc:d1:c6:cc:c4:3e:7f:c7:2a:ab:9a:93:36:92:
         03:29:f4:6f:8d:87:b2:26:17:10:a6:97:1e:3e:39:06:8e:f0:
         3b:d4:43:6f:25:80:5f:fb:15:ef:68:d0:dc:b0:1b:c6:a9:29:
         7c:92:e5:cb:23:dc:03:91:bc:3f:4d:1e:b3:a3:76:3d:46:b8:
         48:50:97:ac:2e:58:37:a6:6b:66:29:26:e8:1e:1e:ef:4a:9c:
         78:83:1d:07:7c:7f:66:48:01:75:42:ef:20:36:1a:93:df:f0:
         f0:90:e0:90:5f:ac:1b:29:b1:c5:57:cb:af:b7:99:c1:4b:e8:
         3e:b7:9e:78:3d:16:df:77:d4:51:84:e2:9b:b3:06:0a:66:48:
         02:81:af:52:05:19:bd:4c:d5:17:2b:eb:8d:01:a5:3e:fc:f1:
         a8:8b:f6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:47 2025 by rpki-client