Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
File:                     vMBbyedz38ikm7QwgluXRt1BxPE.mft (raw, json)
Hash identifier:          /bDobabGKbQbEKzmCejDVxp1kOigziwelsrBpSwSecc=
Subject key identifier:   8E:A8:53:9D:B3:33:76:10:25:9B:DD:B5:F2:E1:54:83:1E:FE:72:FE
Authority key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
Certificate issuer:       /CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Certificate serial:       0194BBCEA2C26B16B357DC0965CC9EAE018D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 10:01:08 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:08 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:08 +0000
Files and hashes:         1: vMBbyedz38ikm7QwgluXRt1BxPE.crl (hash: T4XSDW9Cr6nR5OaSMyf+p2VczgfUMP8VF/4jfbw25zI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:a2:c2:6b:16:b3:57:dc:09:65:cc:9e:ae:01:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
        Validity
            Not Before: Jan 31 10:01:08 2025 GMT
            Not After : Feb  1 10:01:08 2025 GMT
        Subject: CN=8ea8539db3337610259bddb5f2e154831efe72fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e8:ba:5b:0e:49:25:ab:89:96:f1:77:3e:72:
                    b3:d1:f8:af:96:fb:b6:e6:18:e8:df:a8:ea:d4:18:
                    82:2e:a7:2e:54:27:95:34:08:62:be:fd:45:a1:2a:
                    a9:6b:88:e3:a7:c5:78:f5:ec:27:21:be:ca:a5:23:
                    c9:aa:85:c4:0f:e2:ae:a4:57:6d:0a:35:f1:76:81:
                    79:c1:a6:de:17:fb:85:c4:7b:b7:f0:b0:52:c8:84:
                    0e:2c:fa:be:ff:9d:fc:53:11:54:9b:d5:c8:31:40:
                    dc:fd:88:77:b6:27:d2:74:cd:77:5d:52:0b:f6:7a:
                    5c:50:52:3a:fb:4b:99:86:96:9c:19:2c:a3:a6:6a:
                    70:51:79:db:5a:6a:63:88:1c:65:90:73:1c:0f:9c:
                    ad:71:45:40:32:b7:b1:c6:0f:77:ef:52:8e:71:6c:
                    49:c3:94:40:b4:ea:b1:f9:b9:18:a8:71:71:40:a2:
                    4c:27:20:dd:c0:49:56:db:6c:ad:27:16:1c:a5:34:
                    fc:81:08:40:2d:2f:0e:2a:ec:ad:37:9e:57:86:51:
                    60:77:82:b6:d8:99:ba:17:94:05:2e:03:a6:f9:f4:
                    4a:23:58:ae:51:63:36:a6:cb:3c:0b:a6:2d:a2:d0:
                    03:55:b4:01:d7:cb:82:3c:fd:53:1b:5a:ea:5f:76:
                    2d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A8:53:9D:B3:33:76:10:25:9B:DD:B5:F2:E1:54:83:1E:FE:72:FE
            X509v3 Authority Key Identifier:
                keyid:BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:40:12:0b:75:29:ea:df:e6:e5:7e:9e:53:01:a1:f3:dd:40:
         62:c5:20:3e:71:1a:d9:c1:26:3e:fb:5e:14:05:25:89:fd:a0:
         a1:76:17:00:de:e1:47:27:6c:ec:2a:e5:ba:26:24:38:18:a0:
         53:88:29:38:11:46:e3:3b:03:4f:b6:ff:47:3d:63:39:f5:36:
         35:e4:48:e9:31:17:21:c4:24:f3:2f:57:9f:30:ca:0b:0c:d4:
         37:05:3b:b5:a3:a3:ba:89:d4:a5:c3:55:8c:92:79:9c:7b:f2:
         ed:55:8e:4b:29:a9:f9:3b:04:8a:85:e3:b4:21:73:7e:42:e6:
         04:a1:a8:8f:94:2f:85:7c:fb:db:ce:92:3a:68:e9:1f:f9:38:
         94:36:71:70:68:8f:a0:e4:cf:4c:74:fa:04:25:32:e4:c7:14:
         e2:8d:1e:3c:57:8a:d4:cb:48:26:92:3e:52:49:23:6b:a1:63:
         90:f5:e5:cd:b8:94:be:fa:8c:43:97:d8:c5:37:47:a4:b2:c8:
         83:f7:58:3d:5c:30:fa:07:b2:18:50:4d:6f:35:19:c0:a1:b4:
         82:a1:4f:b3:31:69:1b:80:a6:4c:2f:f9:11:9b:63:35:e2:ea:
         e6:5b:64:ee:d0:b1:ef:3d:2f:33:b8:a9:19:53:44:22:cd:fb:
         03:66:ec:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:30 2025 by rpki-client