Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
File:                     Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft (raw, json)
Hash identifier:          SKVg8yFNUbwDeA3DFvfFs3tp4biTnsZZuqfKBAU74J0=
Subject key identifier:   C0:E4:F2:55:DB:FA:3D:B1:70:65:D8:AC:42:C2:1E:88:19:15:6C:17
Authority key identifier: 12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50
Certificate issuer:       /CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50
Certificate serial:       0194BBCDF399A2A3E9A0CF903FC63C0742A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
Manifest number:          29
Signing time:             Fri 31 Jan 2025 10:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:24 +0000
Files and hashes:         1: Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl (hash: ORaTPV3VTE4BG7b81cfW8J5v99g4iQR1UC8JsBzaJrU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:f3:99:a2:a3:e9:a0:cf:90:3f:c6:3c:07:42:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50
        Validity
            Not Before: Jan 31 10:00:24 2025 GMT
            Not After : Feb  1 10:00:24 2025 GMT
        Subject: CN=c0e4f255dbfa3db17065d8ac42c21e8819156c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:cd:f2:41:86:31:82:f9:ad:e9:6c:7c:58:
                    d8:35:64:2f:d6:e8:a9:e7:03:a4:87:46:f6:9c:db:
                    24:ee:69:e9:19:aa:a8:04:ec:63:55:0c:6e:c2:e7:
                    68:30:0c:8e:4d:d8:96:36:a3:3a:6b:22:b9:ab:74:
                    8b:15:ab:b9:c9:c4:c9:6d:f1:14:b2:f5:d1:23:47:
                    45:ea:2b:db:68:83:4c:b6:6e:9f:78:f3:ac:cc:92:
                    38:4d:4f:3c:c7:8b:b1:51:f1:7d:15:3c:59:98:fa:
                    ed:c9:2d:19:96:82:92:0f:50:bf:c7:2a:15:69:88:
                    fb:a0:e4:0e:5a:4c:9b:b0:1f:37:b3:ff:88:af:4b:
                    e5:83:ce:5c:b2:78:1c:26:a8:72:97:28:f2:c7:bb:
                    03:78:25:dc:45:83:3e:0f:cb:e3:8b:0d:fb:98:04:
                    2d:2f:9f:ab:a5:e1:6b:a0:16:96:f7:0a:54:3d:45:
                    99:c3:12:e9:5c:4f:3a:2b:83:5f:b9:ee:08:44:d5:
                    a3:88:9e:56:8c:23:4e:94:c7:44:03:c2:78:6c:b9:
                    ca:95:4d:3d:54:85:50:be:d8:83:ae:84:23:d8:62:
                    65:a3:cd:ac:58:bc:30:a2:7b:c6:d6:b6:c6:91:b9:
                    6c:48:c7:f2:5f:45:df:4d:d7:0d:a1:3c:24:32:76:
                    d2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E4:F2:55:DB:FA:3D:B1:70:65:D8:AC:42:C2:1E:88:19:15:6C:17
            X509v3 Authority Key Identifier:
                keyid:12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:f4:d8:dd:aa:30:ad:89:79:e3:37:5b:c2:37:80:7a:f4:
         83:83:0d:64:ab:bc:3c:60:ce:ed:ae:39:22:5f:32:94:be:ce:
         25:f0:c7:65:48:b0:32:c7:44:5e:52:e4:87:8c:1f:62:e8:2c:
         85:e3:2f:27:41:5a:6b:18:25:f5:31:38:39:63:fc:c2:12:21:
         29:49:ba:1e:62:8c:84:7b:1f:38:02:0e:38:2b:36:58:86:88:
         5c:15:71:28:a1:93:7a:db:7a:46:06:0d:98:c4:83:42:eb:9e:
         82:07:cc:de:00:8a:c0:70:c4:9a:3c:6f:51:6d:82:39:22:88:
         74:6e:d5:7f:30:9b:99:bb:67:b8:a5:c0:51:b5:af:f8:e2:e4:
         59:aa:d1:24:5e:ee:b2:9f:81:19:e7:a2:8e:66:37:e5:92:0e:
         77:1a:f2:35:68:ed:4d:be:14:ab:c2:db:74:2f:85:0c:93:c6:
         74:e2:5f:74:69:40:fc:d5:59:b1:9f:b5:56:8a:ef:fd:e4:99:
         f9:0d:58:c0:69:04:9f:13:b1:86:24:12:8f:5a:c6:ce:2f:ad:
         3d:fe:61:a4:e0:f1:38:e5:cf:11:19:cb:70:6b:b6:2f:a3:06:
         4d:46:3f:55:db:0e:bf:c4:7f:ff:5e:c5:80:12:e5:e7:c2:57:
         45:96:a0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:46 2025 by rpki-client