Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File:                     6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier:          sHQV2UDeZyq1LimdAQnnevWgv3aa/tQqUZfwDB0ZQOg=
Subject key identifier:   C0:14:2E:21:A2:6F:9B:28:AB:54:C1:C4:EE:1A:0E:BE:7F:74:A9:D8
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer:       /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial:       0194BCA9FE0D4AF4E7642EA32E25732693A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 14:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:44 +0000
Files and hashes:         1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: hPQlfYhWEPFnX6seQl7aVx1TSMOIlWym86X674xlYjo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:fe:0d:4a:f4:e7:64:2e:a3:2e:25:73:26:93:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
        Validity
            Not Before: Jan 31 14:00:44 2025 GMT
            Not After : Feb  1 14:00:44 2025 GMT
        Subject: CN=c0142e21a26f9b28ab54c1c4ee1a0ebe7f74a9d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:5f:cc:25:a7:f4:95:9e:bd:58:25:81:53:
                    30:4b:ef:45:d0:78:4d:a2:7a:c3:57:f4:a4:19:13:
                    0f:b8:5b:03:0b:48:7a:dc:f7:b0:cb:15:62:94:2d:
                    32:f7:79:8d:b8:65:ae:9f:63:96:28:1f:50:4b:12:
                    0d:95:ca:68:09:6e:3d:90:37:ca:8e:25:99:ed:f7:
                    90:dc:6c:a7:a6:0a:0e:66:19:db:0f:e0:e9:ef:79:
                    4e:55:d6:81:05:be:d8:b4:1a:12:11:7d:dd:ac:d7:
                    36:7a:e6:8a:70:3d:c4:29:07:fd:70:30:79:76:2d:
                    f5:05:20:04:22:b0:be:95:c2:10:32:f1:a8:7e:fd:
                    81:bf:b8:85:28:54:c3:7e:7f:bc:ec:b6:41:3b:b8:
                    4e:10:78:74:c0:bc:70:60:f5:be:2f:fb:16:2a:fe:
                    3c:bf:c3:5b:01:a5:23:0d:73:1d:b0:32:60:5d:9e:
                    4b:b3:ee:08:0e:19:36:7b:8a:0e:f5:6e:87:ff:7b:
                    9c:cc:65:b8:ca:43:07:ef:6d:09:36:b4:a0:57:1d:
                    2d:38:d0:02:07:f0:79:25:c2:c1:3a:db:91:5b:35:
                    76:91:6d:ec:d7:3f:8c:f2:99:01:e0:a7:b0:62:38:
                    f4:bb:5e:45:1f:cd:fd:ac:e0:42:7b:fc:e6:87:d0:
                    7a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:14:2E:21:A2:6F:9B:28:AB:54:C1:C4:EE:1A:0E:BE:7F:74:A9:D8
            X509v3 Authority Key Identifier:
                keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:77:f7:15:08:5b:71:38:e6:07:90:12:89:57:46:a5:71:a6:
         1f:13:3d:4f:5f:8c:6b:f7:6f:e1:9f:ed:33:03:6d:c5:ba:2b:
         bc:35:bc:f4:67:16:56:0e:2e:49:7a:1d:92:94:04:63:0c:dc:
         9c:f3:58:c8:30:fa:99:b2:1c:89:e1:b7:c0:23:1b:12:71:f0:
         36:eb:3d:0f:7c:ce:68:c8:59:8f:9d:5a:67:5b:f8:03:c0:16:
         31:63:65:3e:e1:3b:c4:08:66:2b:ab:8a:7b:0f:88:c9:14:1c:
         c8:61:50:f0:2a:9a:0a:c4:ef:cc:9a:ea:6d:41:fa:a8:d4:7b:
         bb:1a:5e:6a:cf:3b:fb:dd:0e:6f:ad:b1:d7:e3:51:59:0d:dc:
         d2:48:25:9c:c1:36:12:d0:31:8b:47:28:ac:99:d8:9b:0a:88:
         c6:4b:3e:72:4f:1e:84:e7:c0:fb:18:74:9d:23:2f:bb:27:87:
         d4:ef:d1:0a:1d:e9:02:05:e6:11:d9:2f:9c:f1:ba:02:34:8d:
         e5:58:e1:ba:a7:0b:08:de:e0:97:eb:cf:e1:94:c4:b0:42:31:
         1f:90:b9:8b:cd:b8:47:a9:87:51:cc:13:99:38:ba:00:59:a6:
         b1:41:d8:9d:af:09:a9:4c:42:38:f8:ed:e2:61:0a:47:47:21:
         98:ce:f0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:48 2025 by rpki-client