Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
File:                     _ME6qqHk6E6wwly5UOJp_z3bzuA.mft (raw, json)
Hash identifier:          n1N8zu7a8DKOzQ9XlwJk4501o1gfKt8zoZ8TNe10qBY=
Subject key identifier:   D5:14:6E:A1:97:7E:6D:6F:F6:FD:26:88:64:7B:D2:55:91:02:3A:DC
Authority key identifier: FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0
Certificate issuer:       /CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
Certificate serial:       0194BC3C134934C2A0CD7E53F8302D1BBDB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft
Manifest number:          0628
Signing time:             Fri 31 Jan 2025 12:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:41 +0000
Files and hashes:         1: _ME6qqHk6E6wwly5UOJp_z3bzuA.crl (hash: WwO+SQC2iOElhZjQQ2C9tzRTOYi5CmRnJ8xcTF+xXHw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:13:49:34:c2:a0:cd:7e:53:f8:30:2d:1b:bd:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcc13aaaa1e4e84eb0c25cb950e269ff3ddbcee0
        Validity
            Not Before: Jan 31 12:00:41 2025 GMT
            Not After : Feb  1 12:00:41 2025 GMT
        Subject: CN=d5146ea1977e6d6ff6fd2688647bd25591023adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:13:6c:1d:40:71:f8:89:31:f0:eb:c7:c5:
                    76:6d:bf:5b:12:51:a7:4a:a3:46:76:b7:cd:06:0b:
                    65:ef:1d:88:bb:90:2e:bd:6a:6d:90:f2:d6:4b:59:
                    c8:d0:d5:88:ec:c0:15:03:aa:81:7d:08:d7:08:f7:
                    27:92:a2:79:72:c0:7e:d7:70:06:30:e4:2e:46:af:
                    59:8d:12:c1:82:e0:c7:17:fb:42:e2:b1:1c:54:29:
                    c1:7e:f6:35:f9:60:ce:d0:dd:9d:9e:73:5c:1d:be:
                    cb:96:df:37:ef:c0:d9:20:ea:6d:0e:3d:e5:3d:eb:
                    bb:1b:2b:f5:e3:74:06:3f:a7:ca:3a:b6:f9:21:01:
                    87:31:7e:15:fe:f6:e5:53:71:1e:5d:61:46:2a:14:
                    0b:c6:50:32:46:42:87:68:82:4a:4b:81:c0:fb:07:
                    e0:28:cf:bb:e7:af:af:5e:44:1a:ab:4f:a3:45:e5:
                    a0:86:2d:d8:3b:69:02:13:f9:e4:cf:06:fe:2c:2b:
                    73:94:f0:20:b6:f8:98:c0:44:0e:1f:98:07:8d:5f:
                    77:05:03:1c:2f:b7:31:58:24:07:33:8b:e4:ce:7f:
                    e5:b9:fc:d7:9d:db:e1:9e:45:c4:ff:8c:af:b2:25:
                    3d:84:51:6b:b2:3e:d8:30:66:62:80:3c:4b:cf:aa:
                    fe:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:14:6E:A1:97:7E:6D:6F:F6:FD:26:88:64:7B:D2:55:91:02:3A:DC
            X509v3 Authority Key Identifier:
                keyid:FC:C1:3A:AA:A1:E4:E8:4E:B0:C2:5C:B9:50:E2:69:FF:3D:DB:CE:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ME6qqHk6E6wwly5UOJp_z3bzuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd0dfa-9193-429b-9863-3ff6952c5ee9/1/_ME6qqHk6E6wwly5UOJp_z3bzuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2b:76:f5:b9:75:49:3a:d5:1c:97:67:20:97:61:23:6f:b0:
         0a:90:89:c8:f2:8e:e2:45:8e:cb:5a:86:1d:68:b4:43:e1:c8:
         03:e8:f3:3f:ff:cf:2e:fa:10:f5:82:ed:8e:8c:a1:22:a3:f4:
         e7:fb:2e:0c:5c:ea:0b:9a:3a:19:01:2f:61:37:a1:21:8e:44:
         60:6b:20:df:11:c8:49:0d:79:8d:65:0f:65:70:1b:a4:82:da:
         2e:b4:dd:ab:7b:1e:c6:c0:09:48:2d:b8:45:54:f8:1d:2e:4a:
         b4:0b:5d:7d:96:72:a4:ea:e9:65:dc:bd:ec:67:80:b9:81:7f:
         c0:89:45:63:fe:08:ca:12:0f:13:3b:4c:28:91:46:d9:7c:67:
         7a:76:8d:df:76:93:27:31:7a:10:6d:dd:1c:3e:a6:83:b0:ba:
         b3:63:9e:b8:e1:36:32:6f:c8:29:c2:20:06:44:c1:89:e1:be:
         9e:fb:62:01:3f:eb:10:93:6a:64:d9:83:d3:50:74:c6:3a:da:
         b9:a7:05:cb:b7:90:cd:70:c7:9d:69:e5:27:39:32:37:f8:c4:
         71:42:eb:ff:a5:47:2a:1a:47:7b:40:dc:1c:89:f6:33:16:fc:
         8d:d4:d7:0f:03:e9:74:6d:b8:b8:11:77:1b:79:86:4f:60:c7:
         7e:11:cb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:52:25 2025 by rpki-client