Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
File:                     pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft (raw, json)
Hash identifier:          d4VH0LuGdGBp6dv7edyrCDsDPf30BluEl9hOpX2vSAQ=
Subject key identifier:   D8:31:17:EE:FB:CF:98:61:F7:E9:CE:D0:2D:28:62:BE:E6:CC:A1:FB
Authority key identifier: A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
Certificate issuer:       /CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Certificate serial:       0194BC72FF917DC59207C07D82FD624AA3E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
Manifest number:          82
Signing time:             Fri 31 Jan 2025 13:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:40 +0000
Files and hashes:         1: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl (hash: WsMvB1d5OJYXW7ekK3wVWrQPOECOwqQ5DVyNWk1c0Cc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:ff:91:7d:c5:92:07:c0:7d:82:fd:62:4a:a3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
        Validity
            Not Before: Jan 31 13:00:40 2025 GMT
            Not After : Feb  1 13:00:40 2025 GMT
        Subject: CN=d83117eefbcf9861f7e9ced02d2862bee6cca1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3d:56:2a:0b:19:b0:12:dc:e6:6d:c1:d9:b2:
                    f5:90:38:53:98:c5:0c:cc:f1:c1:b2:2e:4d:ef:1f:
                    77:7e:6d:01:6c:ad:d4:7d:38:fe:5f:02:4e:8d:0c:
                    eb:45:d2:9d:b1:55:e3:4a:d4:ee:9d:e5:56:ad:d5:
                    7f:77:7a:41:de:65:7b:66:66:66:6d:35:86:c9:cb:
                    70:ea:55:fb:da:43:ea:97:7e:d4:cd:1c:f1:f7:da:
                    c7:bf:65:df:89:f4:c1:97:1c:21:01:0a:0f:72:5b:
                    0b:54:44:7c:de:53:0e:ea:34:a2:65:b1:28:1c:60:
                    e8:1e:76:17:3d:03:ca:87:30:31:32:e3:64:16:b4:
                    a9:61:59:c0:7e:fe:7f:5f:0a:8c:5c:a5:27:f8:0e:
                    54:6a:dc:90:85:13:2c:dd:73:bd:58:cb:6c:f4:30:
                    57:c3:07:a2:b7:eb:52:17:8f:32:33:cc:d2:11:c4:
                    ce:fa:22:19:a4:a4:d7:30:5a:e8:b8:0c:2b:89:cb:
                    7c:dd:a5:8a:10:1e:2f:d3:a1:32:cd:3d:bc:1e:30:
                    c1:fb:0e:ca:45:6a:3f:04:03:63:bc:50:97:b6:45:
                    2e:c2:07:f5:39:cf:27:f6:7a:90:57:2f:7e:bb:0d:
                    9a:57:30:e8:04:06:b6:6c:30:4a:c5:bd:68:f7:50:
                    eb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:31:17:EE:FB:CF:98:61:F7:E9:CE:D0:2D:28:62:BE:E6:CC:A1:FB
            X509v3 Authority Key Identifier:
                keyid:A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fb:62:10:d6:d1:cc:8c:fb:9a:ea:d0:c2:ea:cc:8f:14:fe:
         ad:1b:41:04:ae:62:2a:2c:e1:2b:93:c1:1a:0b:63:6b:5b:b8:
         f7:ec:aa:69:e3:87:7a:03:41:8f:16:53:1b:e8:95:a5:bb:c5:
         92:37:fc:b6:de:77:8f:6e:13:58:7b:34:8b:83:75:dd:07:1d:
         de:88:1e:06:ac:5f:aa:1b:fc:fc:24:86:16:10:c8:d2:60:15:
         de:5a:6c:8a:bc:5b:2a:fa:94:3f:f4:3b:14:f1:30:76:f5:3e:
         38:f4:f0:ad:a8:33:03:54:f9:f5:44:c9:b1:08:5f:1e:dd:13:
         71:3c:00:09:58:0b:f3:7c:9c:77:74:67:c1:ea:b8:77:b2:b6:
         74:3e:49:c7:87:c4:8a:59:93:21:45:f1:ea:2d:8e:e6:52:58:
         09:15:63:98:85:85:e1:f5:a3:2f:d7:52:4f:f1:4f:fd:13:46:
         f0:cb:14:83:be:e4:ab:5b:50:17:08:68:39:bf:ca:42:31:50:
         4c:41:4c:92:98:11:43:b8:81:ad:60:35:05:9f:b3:8f:ba:b5:
         aa:b0:9a:c7:0b:3d:d3:59:f2:71:89:14:c0:91:f2:cb:85:30:
         9e:86:83:2b:22:61:96:9b:d6:3c:12:33:ed:05:97:2e:c3:92:
         58:ce:79:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:32 2025 by rpki-client