Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
File:                     Fc09GKyTtW_SsxgAAWXc1swwE4I.mft (raw, json)
Hash identifier:          70EhPR7nZpAj8vVRPUYyNrJgJgLt9fZnTeTatSd3JvI=
Subject key identifier:   EA:97:8C:63:02:8F:4A:1A:B8:EC:A6:E4:A8:F9:75:59:08:28:45:6D
Authority key identifier: 15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
Certificate issuer:       /CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Certificate serial:       0194BBCF0652C71B56329E15AF5A82AE5205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 10:01:34 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:34 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:34 +0000
Files and hashes:         1: Fc09GKyTtW_SsxgAAWXc1swwE4I.crl (hash: k5U/aR+07s4jAo180KMQXkXarRHg4L6VRVIsFr+ni2I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cf:06:52:c7:1b:56:32:9e:15:af:5a:82:ae:52:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
        Validity
            Not Before: Jan 31 10:01:34 2025 GMT
            Not After : Feb  1 10:01:34 2025 GMT
        Subject: CN=ea978c63028f4a1ab8eca6e4a8f975590828456d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7d:18:73:1c:94:1b:60:49:3c:32:1e:ee:24:
                    cd:e5:f8:d2:c1:be:86:8a:0b:4e:a4:1b:db:52:5a:
                    bb:e5:d0:ce:7a:5e:2f:c0:7e:aa:61:5b:a5:d7:b0:
                    12:ec:3d:41:1e:9f:f0:d3:9d:05:33:84:2b:2c:aa:
                    93:9e:df:7b:b1:15:40:d9:a3:c2:ca:1a:94:52:c4:
                    8b:9d:81:b6:db:af:16:ad:c0:67:ef:5a:74:1f:1c:
                    f7:df:02:45:5c:ee:70:0c:aa:ee:4a:7a:ab:a0:f1:
                    7f:92:fb:72:69:39:87:fd:59:a4:f4:ba:9a:f1:d8:
                    49:09:f5:1f:a3:7c:c5:14:ed:08:ca:76:94:82:35:
                    43:a7:e4:1a:08:43:54:be:e5:42:c5:e1:09:a3:37:
                    d4:ea:09:27:ff:2d:36:aa:ab:c3:6f:6f:d0:55:7f:
                    59:30:2a:eb:9b:1c:30:c0:55:6d:59:37:cb:75:d3:
                    94:26:8b:0c:9b:b4:2d:35:04:c1:1d:6a:1f:21:0d:
                    65:c6:86:59:64:22:38:9e:06:f0:d5:5e:41:00:d5:
                    e5:91:ed:c7:9f:ae:5f:19:1c:0c:3c:19:b8:04:4f:
                    69:86:f3:6b:b6:71:b4:e2:fb:2e:26:7f:23:78:a5:
                    03:b6:d0:fe:42:6a:33:f8:ac:e2:e8:40:58:5d:ec:
                    83:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:97:8C:63:02:8F:4A:1A:B8:EC:A6:E4:A8:F9:75:59:08:28:45:6D
            X509v3 Authority Key Identifier:
                keyid:15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:b3:fd:08:e7:c9:08:f8:7c:51:a8:b2:1a:8d:78:c3:1c:56:
         4b:2a:7f:9b:60:97:73:16:c9:22:64:1d:5c:27:44:5b:ee:75:
         13:08:29:50:1c:98:a6:da:47:5f:4b:c4:04:c5:00:94:9e:78:
         fe:50:58:73:9c:5b:d2:73:cc:f8:10:f9:6e:ec:39:a2:53:7c:
         f6:1a:01:c6:a8:12:92:01:72:1e:bc:87:5a:dd:53:ad:58:dd:
         93:d5:fc:a2:81:b4:d6:2f:4c:71:18:a1:4d:33:3c:05:57:b9:
         7f:42:2f:c2:98:3b:25:67:d8:73:4b:cc:63:fc:2e:2a:51:f8:
         1f:2c:67:bf:ad:75:45:ff:dc:fd:c3:26:33:c9:bb:7f:96:92:
         4b:56:f5:c4:fd:a4:2f:1e:88:64:3d:a4:07:0a:a0:1a:ce:49:
         7a:02:e7:fb:0b:b3:66:73:43:bb:68:ea:f1:69:51:b0:23:e2:
         76:5b:d9:11:2d:eb:ae:1c:e4:8d:d0:3c:46:56:35:8c:67:45:
         52:8d:e8:af:f9:b4:b1:3d:6c:2a:da:41:57:3b:7a:96:0b:5f:
         57:f9:3c:44:e7:ae:fa:2b:9e:a9:75:af:4d:9c:01:51:6f:f2:
         57:30:04:69:e1:d1:56:eb:8c:e9:b0:ba:ac:8d:2e:21:73:8a:
         e5:75:92:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:59 2025 by rpki-client