Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
File:                     mL_nROPS3UIxYU5-S61E1FUvCRs.mft (raw, json)
Hash identifier:          C9RplpOkQLXNnbvN7mtE8toZtp7zdajziy69f0YxobE=
Subject key identifier:   2C:78:3D:1D:52:C4:19:E8:7B:D3:25:ED:0D:30:33:98:D3:41:70:8E
Authority key identifier: 98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
Certificate issuer:       /CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Certificate serial:       0194BC04D18E600F31573EE5C99B6DADF830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
Manifest number:          02FE
Signing time:             Fri 31 Jan 2025 11:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:19 +0000
Files and hashes:         1: mL_nROPS3UIxYU5-S61E1FUvCRs.crl (hash: XCDCfTkyvA4ZjVsWRacCMAq0BG9k1VS2i6l4U0oosC4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:d1:8e:60:0f:31:57:3e:e5:c9:9b:6d:ad:f8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
        Validity
            Not Before: Jan 31 11:00:19 2025 GMT
            Not After : Feb  1 11:00:19 2025 GMT
        Subject: CN=2c783d1d52c419e87bd325ed0d303398d341708e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:a5:80:36:9d:43:b5:d9:34:0e:1a:55:59:
                    d0:77:bc:bc:67:1f:6a:68:09:07:fb:3d:eb:f6:da:
                    e5:9f:21:aa:f3:34:fc:73:d0:fc:e0:78:de:4d:da:
                    d7:bc:c5:98:3b:6e:d3:f7:7f:d0:79:23:6a:44:54:
                    5c:d0:f7:9d:85:7b:78:23:60:e8:5c:aa:41:9c:ba:
                    bc:b2:6e:ab:1a:28:d7:48:2a:d0:a6:7f:2e:7d:28:
                    0e:d3:5e:b2:e7:66:1a:b9:e4:eb:d7:d3:ba:75:73:
                    33:46:d4:5a:7f:b3:fb:16:e7:c6:b9:0a:07:b0:29:
                    4c:e4:aa:41:ed:cd:63:c2:70:d2:9b:9b:99:56:cd:
                    01:22:3d:58:3b:e6:86:31:5c:b7:5e:8e:a4:be:41:
                    92:20:90:28:07:3c:17:af:82:ab:c7:da:1f:07:9c:
                    64:2b:bd:53:20:30:a8:3f:40:bd:23:df:d2:15:6f:
                    d6:86:8a:a3:5c:61:40:9b:cd:a5:a8:6c:ea:44:ab:
                    bb:cd:fa:e2:c2:a0:2d:f0:e8:ac:0d:99:75:52:21:
                    b8:c7:f7:f2:bf:70:b2:7a:5e:e9:24:52:f4:ed:cf:
                    a0:0a:a6:9e:ee:55:8e:92:85:40:0a:1c:dd:dc:d0:
                    f3:13:eb:df:71:5b:93:1e:18:e8:e5:46:6e:f8:9d:
                    8d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:78:3D:1D:52:C4:19:E8:7B:D3:25:ED:0D:30:33:98:D3:41:70:8E
            X509v3 Authority Key Identifier:
                keyid:98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:01:d4:48:36:c5:5a:1d:a9:86:24:33:82:90:20:b1:41:d1:
         0a:1b:ff:34:0e:86:19:f8:79:a3:4e:7e:ed:88:b1:80:d8:f3:
         d0:9b:7a:ee:64:88:79:17:91:6e:37:b3:18:d3:89:e7:54:f8:
         01:e3:20:35:2d:84:cd:7b:29:f6:81:45:b9:4f:26:55:d1:7c:
         e5:36:cd:0d:c0:ac:84:1b:89:45:ab:91:4a:17:61:ed:d1:c3:
         69:2a:ff:93:fa:8f:78:73:be:2a:fa:b7:95:ef:e1:23:36:71:
         49:9e:92:86:50:02:a7:d6:b4:f6:3e:c4:4e:29:db:a6:c3:a2:
         e3:fa:fa:8c:8a:26:31:18:83:43:e3:70:df:bc:00:8e:fd:a2:
         9c:4e:48:5b:d7:cd:21:e6:fb:bf:07:ea:1f:24:0b:6a:a1:16:
         c2:b2:ec:1d:b6:7c:e2:fc:03:9b:8c:17:41:07:23:32:dd:7e:
         4f:2c:62:01:65:9f:a4:f5:7d:ce:ea:2f:5c:ed:d4:0d:3a:74:
         8d:6a:67:9f:f7:f9:4c:fb:53:dd:3f:11:c0:dc:25:ea:00:d2:
         5d:94:b1:f7:7a:57:e2:3b:54:ae:2e:05:bd:1d:63:d2:df:11:
         fa:06:93:90:69:70:5a:bb:76:05:a2:1b:02:5c:99:14:55:bb:
         b8:6c:d0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:36 2025 by rpki-client