Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
File:                     9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json)
Hash identifier:          DfuGVdVwSS+KPktOWX3vrJ6hUICTx+FWAzjJgG9Ewcc=
Subject key identifier:   8F:1E:FE:B0:94:16:44:9D:55:D7:69:2D:FF:4A:3A:E0:D2:7E:B8:2F
Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55
Certificate issuer:       /CN=f653b4c31511b5482eb8425a391379d43fd6d455
Certificate serial:       0194BC3C57C5166FD6D8291D1FB8F1CDFEE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 12:00:58 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:58 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:58 +0000
Files and hashes:         1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: YyTFVIBhJInGR36GaPCJueEiHDtaW4QCvqIHJJWfYBE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:57:c5:16:6f:d6:d8:29:1d:1f:b8:f1:cd:fe:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455
        Validity
            Not Before: Jan 31 12:00:58 2025 GMT
            Not After : Feb  1 12:00:58 2025 GMT
        Subject: CN=8f1efeb09416449d55d7692dff4a3ae0d27eb82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:2a:07:b7:7c:40:2f:4b:67:30:c2:f5:b4:
                    14:4b:49:25:58:e4:23:2c:b7:32:54:0e:ef:87:1f:
                    c5:5f:4e:d3:af:b9:e7:84:d6:46:fe:b1:73:63:c4:
                    7a:27:79:b0:64:eb:ab:67:63:70:d1:d0:e1:ae:bd:
                    92:43:42:8d:77:68:34:b9:21:13:e0:cc:af:75:a1:
                    d3:27:b4:2b:8a:fd:f4:97:15:64:b1:3d:8b:c4:1c:
                    2c:02:29:85:a5:0f:68:96:e0:43:74:4c:1d:e3:05:
                    42:40:15:5d:ff:a7:ac:7c:90:0a:cc:ff:10:4d:a7:
                    99:bb:83:9a:36:95:8f:02:d2:d2:02:d8:2d:b3:03:
                    04:70:b0:2c:93:ac:c0:ab:b2:27:a2:f1:87:ff:07:
                    c3:eb:ce:95:af:33:4f:9f:b5:b9:f3:48:22:7c:31:
                    df:f1:c3:ee:42:4c:d0:e1:7d:d0:d5:e1:14:cc:96:
                    cf:79:f7:12:61:c4:83:91:7e:7f:a3:0b:d9:38:24:
                    e5:ee:f9:ee:ff:5e:5a:2f:43:e0:64:23:ff:18:b6:
                    42:00:38:e6:df:16:52:08:1b:da:fa:61:8e:5e:95:
                    50:ba:70:fa:81:fb:f1:bb:86:f2:d6:7d:48:17:0d:
                    a5:71:05:13:fc:93:98:13:5d:2f:17:35:ca:19:4d:
                    6d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1E:FE:B0:94:16:44:9D:55:D7:69:2D:FF:4A:3A:E0:D2:7E:B8:2F
            X509v3 Authority Key Identifier:
                keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fa:f8:51:cc:3f:cd:cc:48:9a:75:59:d1:1e:5b:e6:30:71:
         5f:50:6c:ff:6b:ee:65:0d:7d:04:52:ef:1f:3a:3a:e7:32:32:
         b0:cc:ea:4b:2b:0a:67:87:37:cc:0c:29:24:7c:35:9d:9f:37:
         06:16:8f:3d:7b:87:e1:5b:4a:75:52:b4:35:b3:90:85:fc:dc:
         c9:0e:e5:ed:af:1b:1c:49:8f:9a:7c:0b:ff:53:29:b2:39:97:
         dd:da:e9:40:3a:5e:55:c9:83:a9:5c:f5:cf:2d:2a:d0:8e:a1:
         42:33:5c:22:8f:3a:e5:d6:d0:b3:37:bb:fb:d6:16:f1:72:2a:
         f4:7f:4a:5c:c2:a5:58:fe:67:fc:40:d1:a8:92:83:1d:64:0c:
         e8:c3:d3:78:26:1c:f0:8a:c2:a2:75:78:99:a4:6e:2f:ba:48:
         8e:31:3c:98:2e:32:4a:24:85:b9:6c:fa:cc:a9:9b:d0:4c:44:
         9f:4f:35:fd:01:b8:b1:50:08:98:93:d8:0f:bf:86:43:07:6d:
         41:21:e6:e8:2f:ff:52:ee:7f:cd:d0:ba:c8:5a:13:ad:48:60:
         d3:6c:a7:44:5e:69:05:f8:4e:56:fd:10:8a:27:7a:ea:de:e0:
         25:56:1a:06:5f:b6:2a:c3:31:10:96:98:5a:34:98:8b:bf:f1:
         92:53:de:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFfFFm/W2CkdH7jxzf7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTNiNGMzMTUxMWI1NDgyZWI4NDI1YTM5MTM3OWQ0M2Zk
NmQ0NTUwHhcNMjUwMTMxMTIwMDU4WhcNMjUwMjAxMTIwMDU4WjAzMTEwLwYDVQQD
Eyg4ZjFlZmViMDk0MTY0NDlkNTVkNzY5MmRmZjRhM2FlMGQyN2ViODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49oqB7d8QC9LZzDC9bQUS0klWOQj
LLcyVA7vhx/FX07Tr7nnhNZG/rFzY8R6J3mwZOurZ2Nw0dDhrr2SQ0KNd2g0uSET
4MyvdaHTJ7Qriv30lxVksT2LxBwsAimFpQ9oluBDdEwd4wVCQBVd/6esfJAKzP8Q
TaeZu4OaNpWPAtLSAtgtswMEcLAsk6zAq7InovGH/wfD686VrzNPn7W580gifDHf
8cPuQkzQ4X3Q1eEUzJbPefcSYcSDkX5/owvZOCTl7vnu/15aL0PgZCP/GLZCADjm
3xZSCBva+mGOXpVQunD6gfvxu4by1n1IFw2lcQUT/JOYE10vFzXKGU1tgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8e/rCUFkSdVddpLf9KOuDSfrgvMB8GA1UdIwQY
MBaAFPZTtMMVEbVILrhCWjkTedQ/1tRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAt
MzE5MzY4ZDkxZmMzLzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAtMzE5MzY4ZDkxZmMz
LzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfr4Ucw/
zcxImnVZ0R5b5jBxX1Bs/2vuZQ19BFLvHzo65zIysMzqSysKZ4c3zAwpJHw1nZ83
BhaPPXuH4VtKdVK0NbOQhfzcyQ7l7a8bHEmPmnwL/1MpsjmX3drpQDpeVcmDqVz1
zy0q0I6hQjNcIo865dbQsze7+9YW8XIq9H9KXMKlWP5n/EDRqJKDHWQM6MPTeCYc
8IrConV4maRuL7pIjjE8mC4ySiSFuWz6zKmb0ExEn081/QG4sVAImJPYD7+GQwdt
QSHm6C//Uu5/zdC6yFoTrUhg02ynRF5pBfhOVv0Qiid66t7gJVYaBl+2KsMxEJaY
WjSYi7/xklPecg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:57 2025 by rpki-client