Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
File:                     P9WU69efjdhbR5LpUzvkaBaohgY.mft (raw, json)
Hash identifier:          yuJK471Xq/rDTADr/3d1T7RH1Xa3/W52k5ReAhXXGI0=
Subject key identifier:   BD:CF:D3:7E:6C:0F:DB:E5:43:D2:ED:67:C6:85:CF:06:B4:B4:30:64
Authority key identifier: 3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06
Certificate issuer:       /CN=3fd594ebd79f8dd85b4792e9533be46816a88606
Certificate serial:       0194BD1754ABF9451EB2480775019167CC37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft
Manifest number:          0FA9
Signing time:             Fri 31 Jan 2025 16:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:10 +0000
Files and hashes:         1: P9WU69efjdhbR5LpUzvkaBaohgY.crl (hash: +m9cvZi/qcf7dTJF42ULhPoGJtj/tt+KMvji7Wn3nKI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:54:ab:f9:45:1e:b2:48:07:75:01:91:67:cc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd594ebd79f8dd85b4792e9533be46816a88606
        Validity
            Not Before: Jan 31 16:00:10 2025 GMT
            Not After : Feb  1 16:00:10 2025 GMT
        Subject: CN=bdcfd37e6c0fdbe543d2ed67c685cf06b4b43064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:62:6f:f2:33:93:dc:ff:07:77:f4:6d:45:
                    bb:ce:3a:b0:4c:6e:87:ad:3e:09:e3:b7:7c:7d:97:
                    0c:af:b4:a9:65:9c:fe:0a:b2:e8:be:fe:79:85:23:
                    df:c9:f7:06:00:b7:61:f1:0c:28:68:d8:b0:c5:ff:
                    94:16:3b:bc:e1:86:0d:b0:28:71:ec:2a:9f:c3:70:
                    70:e3:f5:f4:e6:86:79:fd:e0:b4:86:83:2f:db:3d:
                    7f:8d:27:1f:b6:3b:bb:01:2d:48:dd:b1:0f:b2:fe:
                    77:38:34:92:c0:b8:2b:fc:6c:3a:b9:40:51:72:ca:
                    7d:69:5a:93:63:62:b2:01:16:3b:cf:39:32:87:e8:
                    28:02:56:e6:ac:cd:1e:07:d7:1d:2f:84:06:73:bb:
                    a7:4f:a4:61:c1:9a:39:e7:fd:96:0c:3c:ab:d1:e9:
                    1e:b1:a9:ea:f5:e0:6d:db:59:43:e9:ea:8d:ee:19:
                    45:e5:84:c2:d1:67:06:11:41:59:24:b9:2c:24:a5:
                    a6:96:7e:f6:fa:24:0c:39:5d:14:a3:c6:68:d1:51:
                    7e:ab:0c:90:bf:44:28:11:0e:7c:8f:23:88:2a:b4:
                    55:b9:f6:30:13:d3:56:44:dd:fc:e0:12:59:3e:e0:
                    f6:e8:63:ad:dc:8e:35:ff:5c:d0:b7:ad:b8:a3:d8:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CF:D3:7E:6C:0F:DB:E5:43:D2:ED:67:C6:85:CF:06:B4:B4:30:64
            X509v3 Authority Key Identifier:
                keyid:3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3e:3c:39:5b:90:d5:29:d9:86:a7:48:c5:b9:05:84:65:44:
         47:9a:aa:9c:a4:2a:2d:94:6a:9e:70:04:a1:c0:ba:c0:1b:be:
         93:97:c2:d9:13:d9:e0:ce:58:c8:9c:4d:7b:14:c3:c9:1d:dc:
         29:ce:e9:e7:df:1a:98:f0:b4:e0:f0:4a:6b:f8:b4:b5:93:d9:
         d1:ee:f8:83:ae:37:32:97:59:e3:4e:b7:8d:40:98:d8:aa:a9:
         0d:7b:43:d2:d7:f5:1c:2a:e0:17:c4:1c:55:b8:25:f0:6b:1d:
         5c:02:a5:69:1e:1c:ab:65:09:9b:7a:d0:9a:51:04:a4:b8:da:
         f8:4f:0a:b6:e2:75:23:56:dd:99:d2:19:3e:5c:cf:b0:de:7e:
         11:5e:d2:7f:f9:1a:1f:5e:fd:bb:75:f3:6b:a4:41:3f:39:76:
         f7:a3:d1:1f:38:d5:d6:9e:15:a2:02:27:6f:23:38:8e:0c:ba:
         d7:cb:a2:8b:7b:c0:c4:88:48:1a:9d:51:80:06:2a:86:ed:39:
         12:5c:09:f2:02:d8:fb:6d:fa:2a:33:44:11:ee:0f:95:54:57:
         15:e1:c8:99:69:d7:06:23:6b:08:af:31:94:b3:78:76:cc:08:
         71:69:5e:81:aa:b9:72:cf:a0:3a:f2:53:7f:ca:df:e0:66:ca:
         3e:dd:2c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:04 2025 by rpki-client