Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/987c09-bd70-4c61-ac90-beb8dbe0a442/1/9twfThiB7UwA6fyUYYP4lAg914M.mft
File:                     9twfThiB7UwA6fyUYYP4lAg914M.mft (raw, json)
Hash identifier:          cuiprew9vRgsyn5MW0qXEMTssNZhHAu5S/TDuPLy57M=
Subject key identifier:   95:10:F4:23:59:68:60:39:2C:81:4B:F7:99:37:C2:DF:40:14:F8:0F
Authority key identifier: F6:DC:1F:4E:18:81:ED:4C:00:E9:FC:94:61:83:F8:94:08:3D:D7:83
Certificate issuer:       /CN=f6dc1f4e1881ed4c00e9fc946183f894083dd783
Certificate serial:       0194BBCE76E19399CAB785D02A687EC199CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9twfThiB7UwA6fyUYYP4lAg914M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/987c09-bd70-4c61-ac90-beb8dbe0a442/1/9twfThiB7UwA6fyUYYP4lAg914M.mft
Manifest number:          05C1
Signing time:             Fri 31 Jan 2025 10:00:57 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:57 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:57 +0000
Files and hashes:         1: 9twfThiB7UwA6fyUYYP4lAg914M.crl (hash: colp/c/eRAvSK5q+mRd77dGAQTuM468pPOeo+Io6MSI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:76:e1:93:99:ca:b7:85:d0:2a:68:7e:c1:99:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6dc1f4e1881ed4c00e9fc946183f894083dd783
        Validity
            Not Before: Jan 31 10:00:57 2025 GMT
            Not After : Feb  1 10:00:57 2025 GMT
        Subject: CN=9510f423596860392c814bf79937c2df4014f80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:06:66:af:e5:d9:27:de:f2:22:b6:d6:47:
                    64:d6:57:74:1f:79:41:7d:23:5a:f5:a5:ff:b2:da:
                    b9:f7:eb:17:e6:47:c2:01:ab:48:56:f0:42:6c:1e:
                    b1:04:53:d9:02:83:f9:d1:b6:51:a6:d3:e4:3b:7d:
                    2b:04:03:eb:42:2a:bc:f3:b4:f1:33:18:13:8e:0b:
                    33:df:4c:70:b4:1f:ec:d0:52:59:65:b5:76:12:d5:
                    12:28:1b:b7:52:5d:3f:9a:de:e3:d5:fa:7f:16:fc:
                    a5:df:51:70:77:62:b4:4c:76:30:57:17:3f:f3:9a:
                    c7:87:9a:d0:73:83:45:d3:e1:c5:b3:ea:17:9f:26:
                    16:cf:16:32:7d:16:42:31:2b:00:3d:7e:88:ad:73:
                    1f:b5:10:19:dd:fb:88:0e:01:e9:ac:16:d8:fb:48:
                    5c:4f:30:38:0a:19:b3:52:eb:27:58:b6:90:b0:89:
                    53:68:91:ac:a9:bb:7d:8c:24:9c:17:1b:af:45:3e:
                    83:4f:f1:c7:83:dd:ba:93:b1:d8:04:9f:eb:33:6f:
                    46:b0:0e:37:c4:da:7f:b1:7d:6d:3e:83:88:9c:39:
                    53:97:0a:55:04:a5:35:4f:9b:78:27:48:3b:42:de:
                    50:46:87:16:65:e0:38:e1:1b:13:26:2c:91:09:eb:
                    60:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:10:F4:23:59:68:60:39:2C:81:4B:F7:99:37:C2:DF:40:14:F8:0F
            X509v3 Authority Key Identifier:
                keyid:F6:DC:1F:4E:18:81:ED:4C:00:E9:FC:94:61:83:F8:94:08:3D:D7:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9twfThiB7UwA6fyUYYP4lAg914M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/987c09-bd70-4c61-ac90-beb8dbe0a442/1/9twfThiB7UwA6fyUYYP4lAg914M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/987c09-bd70-4c61-ac90-beb8dbe0a442/1/9twfThiB7UwA6fyUYYP4lAg914M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0a:b6:23:09:94:91:cb:11:42:ff:f8:d2:0d:ad:bd:5f:dc:
         4f:4d:92:fe:8c:1c:14:19:f6:4f:1e:a5:78:fd:7d:0a:0e:9a:
         2e:f0:8b:e0:29:09:c8:8e:a0:99:62:13:08:b3:41:95:ea:d0:
         88:06:af:d9:ac:f1:e1:6f:f6:7d:c1:15:99:c2:b8:47:0c:b8:
         2c:4b:b2:5d:74:61:01:1f:75:73:45:71:09:ea:d1:dc:97:ae:
         51:b1:76:bf:84:79:c7:68:a6:26:40:7c:e2:ee:96:fa:fb:d3:
         ee:9f:b8:e1:78:34:88:74:5a:73:cd:60:91:02:19:3f:6a:35:
         f5:09:e3:86:c4:82:52:36:88:97:4c:93:ca:0a:aa:4a:ef:7c:
         0c:5b:dd:f2:13:a5:ee:c3:07:9c:ae:be:3c:90:a3:07:01:52:
         ec:82:9f:28:05:af:fe:3e:c5:14:07:5b:95:c7:31:bd:38:32:
         32:dc:84:02:01:4a:56:54:20:c4:44:0d:c2:64:7f:da:6c:2e:
         90:54:3c:b5:b5:9f:55:d8:c3:c5:23:9b:24:02:b9:10:02:19:
         3b:cd:83:53:02:a7:0e:0d:2d:71:76:c3:ea:e0:dc:e5:0b:70:
         7e:9d:31:28:1f:0f:22:b8:28:2a:04:9e:2f:bb:8e:65:f4:fd:
         70:8b:e2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:01 2025 by rpki-client