Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
File:                     i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft (raw, json)
Hash identifier:          xlHzPIqF++m82OF69sEVdgdyW+xJwpK/B92cWd5ENNQ=
Subject key identifier:   B7:DF:08:1B:DE:3F:4E:9D:97:3E:C9:94:B9:30:D3:0C:1B:26:94:79
Authority key identifier: 8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
Certificate issuer:       /CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Certificate serial:       0194BBCEF472853D6DC98C1F432537426021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
Manifest number:          0B60
Signing time:             Fri 31 Jan 2025 10:01:29 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:29 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:29 +0000
Files and hashes:         1: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl (hash: bYOHMJTt8RYlB9tSW8gxS6SjYs58RrV70neB1EkuSXE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:f4:72:85:3d:6d:c9:8c:1f:43:25:37:42:60:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
        Validity
            Not Before: Jan 31 10:01:29 2025 GMT
            Not After : Feb  1 10:01:29 2025 GMT
        Subject: CN=b7df081bde3f4e9d973ec994b930d30c1b269479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ca:87:08:1f:64:e2:34:4a:85:44:38:cf:e7:
                    16:49:4e:3f:44:ea:6e:78:52:20:aa:8e:05:6f:18:
                    a0:ea:e0:40:e9:eb:54:d2:0a:24:cc:3c:1d:04:82:
                    82:5e:26:e5:60:82:41:ec:a1:43:ee:86:85:79:db:
                    09:a2:8b:e0:9c:4d:76:10:ed:d9:f4:0e:3c:5a:c4:
                    37:e6:19:0f:04:d7:7a:02:24:7f:ea:72:05:fb:47:
                    ed:4c:a9:46:08:b4:30:fd:38:18:ab:e1:7a:f9:9b:
                    d9:fe:8e:57:9e:77:b4:55:5e:42:d6:2e:77:00:41:
                    6e:4c:81:2c:5d:c9:d1:31:ec:8c:68:84:30:5f:ae:
                    f9:3f:87:4d:7e:be:1a:52:91:e3:e3:01:bd:89:f9:
                    4e:76:15:e5:49:d2:b2:8a:cd:65:20:c6:28:58:ae:
                    73:a1:16:47:75:5c:70:5e:a5:4b:23:b6:0f:5d:4c:
                    81:38:8f:0f:14:05:dc:ed:d2:cf:fd:18:02:52:19:
                    d4:07:06:83:52:ac:18:9a:28:57:c2:1c:2c:7c:bb:
                    02:0c:05:64:9d:0d:52:ca:7c:3b:ce:8a:dc:53:51:
                    c6:2a:57:8b:75:15:d3:13:3b:ec:29:b7:51:29:4d:
                    5a:15:b2:1c:0c:e4:02:43:af:ea:89:9e:f2:e1:43:
                    3f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DF:08:1B:DE:3F:4E:9D:97:3E:C9:94:B9:30:D3:0C:1B:26:94:79
            X509v3 Authority Key Identifier:
                keyid:8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:9b:79:2e:6f:27:b8:36:e0:2e:31:fc:d2:5c:e0:fa:a9:9e:
         21:f4:32:e0:ac:75:64:ed:6b:0b:45:87:87:15:9e:fc:35:bc:
         5a:8e:3a:8b:95:51:ee:04:d7:2c:e3:eb:3c:c4:17:02:7d:6a:
         77:a3:cb:99:e0:eb:3b:63:6b:3f:d9:7c:49:99:a2:26:06:b4:
         fa:05:b4:5e:35:0d:af:99:68:56:f8:07:89:40:44:3c:52:42:
         6e:f5:75:83:98:75:c1:d9:2e:46:e6:16:49:42:40:25:2f:f3:
         19:35:e6:d3:92:1c:88:ee:be:1f:c8:1c:ac:c2:88:a7:27:0f:
         e8:55:77:1a:e1:b9:3c:85:d0:16:52:17:4d:ed:3c:ec:6c:ba:
         25:af:0d:d0:e4:ba:26:67:67:00:42:3a:4d:a6:f7:00:3f:f7:
         68:3d:e7:9c:b7:44:dd:f7:c2:16:d8:ac:e0:75:77:5b:66:47:
         a6:63:20:3f:c1:42:3a:37:c7:b3:16:9f:49:bf:b7:d9:fa:f7:
         c8:79:b8:b6:82:84:08:97:1a:ae:ec:9c:30:7a:97:6c:8c:f7:
         6e:40:df:fd:b6:0f:45:41:12:62:a2:30:31:d0:88:03:e2:ac:
         21:f9:90:7d:c5:62:fc:0f:c1:4a:f3:85:55:25:ca:99:96:4f:
         05:85:ce:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:20 2025 by rpki-client