Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
File:                     Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json)
Hash identifier:          cGSUo0h2mAnYQuI8QSBedwdfLYhX8dhNwlcG6VeIfR8=
Subject key identifier:   24:66:28:A3:50:1C:28:B7:D7:46:C3:40:4D:19:C2:88:8C:91:AC:82
Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
Certificate issuer:       /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Certificate serial:       0194BCA99A4E66F0158AC2042473E85C1770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
Manifest number:          08D0
Signing time:             Fri 31 Jan 2025 14:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:19 +0000
Files and hashes:         1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: syqlrDvl+RkuwWueT5RVLRY5wE+IwLOtFV2VklkYcgo=)
                          2: Zv3Kf7_a7bi1ycJZnLN86MJoQ6Q.roa (hash: opNzDV4dKyFm82stIdxe2eWVlw9lr6MHF0M+Y7Sxna4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:9a:4e:66:f0:15:8a:c2:04:24:73:e8:5c:17:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
        Validity
            Not Before: Jan 31 14:00:19 2025 GMT
            Not After : Feb  1 14:00:19 2025 GMT
        Subject: CN=246628a3501c28b7d746c3404d19c2888c91ac82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:16:a2:ae:6d:3b:36:56:46:83:60:30:a8:
                    50:b7:1f:27:a4:be:ae:e1:0a:12:2a:33:0e:45:74:
                    5d:ad:de:a7:d5:e2:33:0d:2c:26:f4:ba:08:6d:62:
                    98:5d:9c:ed:cc:da:34:25:89:40:36:f6:e3:aa:8f:
                    d7:66:a8:da:b9:99:7a:ea:09:29:bd:1d:1a:f2:b7:
                    fc:36:28:aa:79:76:4a:84:d8:e0:96:e4:26:f6:73:
                    41:6b:e8:5c:85:75:2f:31:6a:d5:d1:36:91:2e:1f:
                    31:b9:a9:4e:21:bc:f6:67:ed:61:56:2a:8c:6e:34:
                    c5:cd:11:c1:48:90:63:b2:4a:5e:86:9c:8a:45:56:
                    c3:e7:33:cc:b3:52:bd:80:ca:88:b8:81:69:84:57:
                    64:6d:79:35:46:61:0f:9c:1e:3a:57:5f:b1:35:f3:
                    c8:67:6c:2d:ff:84:cb:88:de:c2:63:27:27:9b:65:
                    ef:e4:de:5b:c1:79:fb:68:99:39:68:48:ee:65:f6:
                    4a:2c:60:44:a8:73:32:42:b3:9a:b1:eb:11:db:3c:
                    ed:db:35:a9:23:27:d3:f1:6f:a2:09:c9:d0:12:b8:
                    04:e0:c5:e6:04:d4:2e:26:0c:d6:c3:47:f8:df:81:
                    52:bb:55:64:c9:0b:f2:f4:41:06:b1:63:d3:34:59:
                    1d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:66:28:A3:50:1C:28:B7:D7:46:C3:40:4D:19:C2:88:8C:91:AC:82
            X509v3 Authority Key Identifier:
                keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:1b:b0:41:07:2a:33:df:48:39:58:1b:18:6e:25:45:75:6b:
         e5:1d:2e:91:e4:bc:21:8e:04:aa:a7:28:6d:50:a7:30:8a:0c:
         5a:4b:2b:5e:3a:22:af:23:78:e3:76:da:f7:ff:18:25:7b:44:
         af:a7:48:90:43:ad:ce:69:79:53:28:f2:af:cf:62:2c:c6:0d:
         77:d4:71:74:f1:56:9b:f7:7b:a2:d0:41:12:f9:03:37:d8:a9:
         83:52:4f:f6:0a:a9:1c:0b:a0:ca:c3:c0:29:71:5f:fb:1f:bb:
         a7:53:32:43:2f:61:cf:92:13:8b:d8:5d:ed:91:a5:3f:5d:b8:
         9a:16:bb:df:4e:e5:df:c6:fb:3a:8d:77:10:77:23:f2:17:56:
         3d:bc:d7:a9:69:c6:86:ab:7a:e0:e4:5a:d1:bf:eb:ff:f1:c9:
         09:bb:99:8e:df:d3:34:9f:44:96:da:3e:64:89:5a:83:33:12:
         b2:f0:d7:d4:10:97:29:bc:8a:98:bf:17:66:79:62:f3:95:81:
         d6:6d:45:82:1a:b7:4c:52:b7:b8:b3:36:6d:8c:30:50:9c:f8:
         e0:a6:17:91:39:06:d9:3f:cd:91:f8:75:d8:ab:11:22:75:f2:
         02:dc:05:76:ff:51:71:7c:0f:78:98:b0:00:98:32:f2:1b:32:
         cd:6d:52:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:48 2025 by rpki-client