Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File:                     3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier:          mYa3eZsBnJpX8ZQ2J1NqUoSQprhAmMDWBVnIaSu3VF4=
Subject key identifier:   53:9F:89:95:74:59:4F:95:60:04:4B:EA:0C:C0:77:ED:95:A9:D8:A3
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer:       /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial:       0194BBCE97743E7AAC48FFA6A871A8F4C7EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number:          0564
Signing time:             Fri 31 Jan 2025 10:01:05 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:05 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:05 +0000
Files and hashes:         1: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: OXUqntd/9iiYeQut5eg5dipre5hpmc7NAq5BARk9b7U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:97:74:3e:7a:ac:48:ff:a6:a8:71:a8:f4:c7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
        Validity
            Not Before: Jan 31 10:01:05 2025 GMT
            Not After : Feb  1 10:01:05 2025 GMT
        Subject: CN=539f899574594f9560044bea0cc077ed95a9d8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ef:fc:47:08:35:72:1d:a1:49:20:6c:9d:cb:
                    dc:b2:eb:07:4c:2f:26:34:95:cf:0a:c2:cd:59:24:
                    d4:31:90:6f:40:27:cc:b5:76:a6:de:5d:76:e3:5c:
                    19:03:38:5f:76:3a:18:a4:1c:68:e9:d1:90:b4:1a:
                    75:a1:34:a5:1f:e1:4b:0d:a6:4b:6b:29:56:b3:89:
                    1a:d9:32:7b:c6:11:1b:a0:bd:f7:3d:1b:49:c7:05:
                    c1:49:56:73:78:48:95:4c:5f:5a:40:40:04:2f:32:
                    41:9d:fd:d3:eb:c4:63:e4:e3:4a:79:86:13:68:fb:
                    91:f6:ed:05:f1:ac:bd:05:be:45:e8:18:57:b0:56:
                    c3:01:46:92:db:ba:ca:cc:31:5c:3c:3a:35:67:a9:
                    84:a1:ec:d2:80:0b:40:ec:8b:1b:a7:c0:a4:4b:0c:
                    2b:4d:24:ee:ff:cb:fc:28:ca:71:2a:7e:77:2b:88:
                    e2:c9:ad:44:55:4f:81:84:81:17:df:b3:86:c6:61:
                    8d:c4:88:0c:c6:96:31:ab:5c:4d:a6:dd:a4:bb:7f:
                    86:9b:ca:6c:6a:f5:dc:6e:a6:91:72:94:b9:44:85:
                    c4:32:9b:7e:ce:e0:c7:79:26:00:e2:cc:61:13:19:
                    3f:be:47:c0:c5:11:16:fe:1d:60:7e:c2:5c:b4:d3:
                    1a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9F:89:95:74:59:4F:95:60:04:4B:EA:0C:C0:77:ED:95:A9:D8:A3
            X509v3 Authority Key Identifier:
                keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:46:40:0f:d8:73:56:b0:c0:1d:16:b8:5c:9f:2e:29:bd:48:
         11:eb:4a:c4:cf:2a:2f:ee:11:90:94:c9:c8:c3:54:75:fe:6b:
         25:fe:2d:e0:6b:78:ad:b9:0e:ec:8e:b1:93:56:6d:c1:de:73:
         1b:98:96:e5:ae:71:37:67:4d:69:cc:47:38:e0:14:2e:bd:1d:
         cd:af:45:2a:ff:ca:6f:51:7f:9f:e1:a7:f7:b6:99:f8:58:8b:
         e7:c5:90:3b:33:fd:f8:28:34:ed:47:a3:2f:a0:79:a4:26:cb:
         b9:b0:f7:df:c2:46:a4:f1:60:66:00:99:5e:26:d7:bf:c8:25:
         21:d2:1f:9e:fc:e5:79:9b:0d:79:d0:e2:18:11:87:a3:94:cb:
         57:af:20:c7:44:1c:27:b2:14:79:7a:79:a3:d9:ab:6f:19:ec:
         17:cb:46:a7:30:07:54:67:52:ca:d9:0b:34:ad:36:0e:68:77:
         f5:75:89:bc:c4:78:82:06:ed:3c:80:5f:0f:64:1f:25:1d:68:
         1a:59:55:d6:ff:58:ea:d2:b3:68:09:09:aa:d4:e9:4a:0c:37:
         a6:7e:ae:db:51:6a:13:2b:80:60:7e:eb:cf:76:83:72:19:10:
         e6:b4:0a:f2:9e:48:28:87:a4:e0:72:02:4d:fa:4e:23:a3:cc:
         fc:64:da:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:22 2025 by rpki-client