Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
File:                     rsqu_IRN7K6xKV2CalKOhFurG-A.mft (raw, json)
Hash identifier:          uUHk+HcqAeKS/tPN3Tsq2qctk/4U5QaQfKkpkXAA25E=
Subject key identifier:   1D:4A:2D:3C:CF:99:B4:DD:B0:58:1E:7F:C6:9E:FB:F7:EE:52:A7:92
Authority key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
Certificate issuer:       /CN=aecaaefc844decaeb1295d826a528e845bab1be0
Certificate serial:       0194BD1795970149672DFA2F821343BA4275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
Manifest number:          0BEC
Signing time:             Fri 31 Jan 2025 16:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:26 +0000
Files and hashes:         1: rsqu_IRN7K6xKV2CalKOhFurG-A.crl (hash: 6TtjJhPuKO1lDztPTD4W3SVsFJfFZ7sVIHIoP84qmDE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:95:97:01:49:67:2d:fa:2f:82:13:43:ba:42:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecaaefc844decaeb1295d826a528e845bab1be0
        Validity
            Not Before: Jan 31 16:00:26 2025 GMT
            Not After : Feb  1 16:00:26 2025 GMT
        Subject: CN=1d4a2d3ccf99b4ddb0581e7fc69efbf7ee52a792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:08:98:5f:01:3d:c5:b5:49:49:26:57:ad:
                    70:6e:27:eb:40:0a:47:16:0f:d6:45:79:05:de:2f:
                    e2:da:5c:8e:77:cb:1c:cd:9c:08:08:f1:01:99:89:
                    23:a7:2d:67:dd:a4:a3:9d:9e:a4:74:84:d1:31:a7:
                    6c:54:16:e3:e2:72:c2:16:28:99:50:7d:86:b5:fc:
                    3a:be:a0:a4:b6:45:a3:3d:27:eb:a9:a1:15:68:35:
                    3b:89:86:56:19:32:c6:d1:1b:c8:a0:2a:dd:7b:23:
                    92:6e:7b:52:8c:fa:4e:ac:bc:d2:9a:f4:38:fa:2a:
                    26:2f:43:ff:44:8b:1b:f2:a2:f0:b9:fc:ad:d6:2a:
                    a3:6b:da:23:11:6b:35:81:66:01:91:a9:c6:3a:99:
                    33:c6:ae:fd:34:41:68:8e:0a:a4:63:09:ca:3b:02:
                    0e:b0:44:1f:94:e5:cf:e1:e8:50:27:24:3b:32:95:
                    5a:13:8e:b9:e8:76:9c:eb:46:15:92:f8:f5:cb:8c:
                    1b:a7:31:c0:42:4c:97:ac:c4:16:ca:de:db:7d:b8:
                    62:f6:ae:26:83:f0:f6:d9:af:a1:1a:5d:88:83:c1:
                    9a:46:21:dc:d2:83:f7:27:a2:18:20:b1:a8:8e:22:
                    28:81:1d:c4:3d:86:60:e2:0e:26:78:fe:11:cd:ca:
                    6d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4A:2D:3C:CF:99:B4:DD:B0:58:1E:7F:C6:9E:FB:F7:EE:52:A7:92
            X509v3 Authority Key Identifier:
                keyid:AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:08:7f:12:9f:8c:45:79:a5:d0:13:62:5e:4e:3f:eb:3a:f1:
         29:6c:87:e8:5d:85:7d:9f:f7:ae:da:d2:f2:27:41:b0:d9:06:
         4a:71:fd:1b:06:11:ce:80:5c:ea:6e:ba:71:49:d2:ef:52:eb:
         a1:32:10:61:5a:20:bf:6c:05:4a:71:9e:d9:54:25:73:f3:4a:
         9a:71:67:e3:dd:91:9d:5e:e0:bc:b0:5d:8e:ed:d4:4d:55:4e:
         f8:12:d2:0a:98:c6:bf:9a:2f:07:eb:73:22:6d:96:f4:88:37:
         c9:f4:4b:80:bc:e6:04:5b:ff:2f:0e:bf:d6:1c:e0:08:1d:a9:
         af:9e:e9:54:8c:3a:8e:a8:84:93:e8:52:71:0f:a4:86:6d:68:
         f5:32:1e:40:66:ba:8d:5b:2d:ac:f3:09:3f:bc:c5:a0:2b:ad:
         30:7a:16:cc:54:b0:1c:41:ee:fc:8c:de:73:f9:6d:dc:a8:17:
         fb:60:73:12:8b:6b:8b:63:e7:99:78:b3:70:c8:37:c6:58:21:
         de:10:02:02:82:5b:5f:cf:8c:f6:b5:a3:f5:b2:92:8e:a1:9d:
         55:04:67:32:90:9a:07:06:c0:9b:ed:5b:3a:c9:34:e7:14:dd:
         4a:06:e4:94:ff:95:9d:82:73:05:f0:d9:a8:0c:ab:a0:52:05:
         fc:2c:a9:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5WXAUlnLfovghNDukJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlY2FhZWZjODQ0ZGVjYWViMTI5NWQ4MjZhNTI4ZTg0NWJh
YjFiZTAwHhcNMjUwMTMxMTYwMDI2WhcNMjUwMjAxMTYwMDI2WjAzMTEwLwYDVQQD
EygxZDRhMmQzY2NmOTliNGRkYjA1ODFlN2ZjNjllZmJmN2VlNTJhNzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4sImF8BPcW1SUkmV61wbifrQApH
Fg/WRXkF3i/i2lyOd8sczZwICPEBmYkjpy1n3aSjnZ6kdITRMadsVBbj4nLCFiiZ
UH2Gtfw6vqCktkWjPSfrqaEVaDU7iYZWGTLG0RvIoCrdeyOSbntSjPpOrLzSmvQ4
+iomL0P/RIsb8qLwufyt1iqja9ojEWs1gWYBkanGOpkzxq79NEFojgqkYwnKOwIO
sEQflOXP4ehQJyQ7MpVaE4656Hac60YVkvj1y4wbpzHAQkyXrMQWyt7bfbhi9q4m
g/D22a+hGl2Ig8GaRiHc0oP3J6IYILGojiIogR3EPYZg4g4meP4RzcptpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1KLTzPmbTdsFgef8ae+/fuUqeSMB8GA1UdIwQY
MBaAFK7KrvyETeyusSldgmpSjoRbqxvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNzM5MDUtMzFkZC00NDAxLTlkMWIt
NmQ4ZDkxYzdmYWEwLzEvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNzM5MDUtMzFkZC00NDAxLTlkMWItNmQ4ZDkxYzdmYWEw
LzEvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQh/Ep+M
RXml0BNiXk4/6zrxKWyH6F2FfZ/3rtrS8idBsNkGSnH9GwYRzoBc6m66cUnS71Lr
oTIQYVogv2wFSnGe2VQlc/NKmnFn492RnV7gvLBdju3UTVVO+BLSCpjGv5ovB+tz
Im2W9Ig3yfRLgLzmBFv/Lw6/1hzgCB2pr57pVIw6jqiEk+hScQ+khm1o9TIeQGa6
jVstrPMJP7zFoCutMHoWzFSwHEHu/Izec/lt3KgX+2BzEotri2PnmXizcMg3xlgh
3hACAoJbX8+M9rWj9bKSjqGdVQRnMpCaBwbAm+1bOsk05xTdSgbklP+VnYJzBfDZ
qAyroFIF/Cypng==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:55 2025 by rpki-client