Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
File:                     n7jb0z1dO8T6Nknt9_kU6uejiF0.mft (raw, json)
Hash identifier:          7RJfJgg4dD/0fZIShwjrHyhcOQJ/ddilHImTzrgQfAU=
Subject key identifier:   AB:3D:50:5B:91:7F:12:0F:00:E2:4E:41:70:0D:6F:84:C4:78:E1:36
Authority key identifier: 9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D
Certificate issuer:       /CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d
Certificate serial:       0194BBCE9F96501F46CD78659E4B45DAF494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
Manifest number:          019E
Signing time:             Fri 31 Jan 2025 10:01:08 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:08 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:08 +0000
Files and hashes:         1: n7jb0z1dO8T6Nknt9_kU6uejiF0.crl (hash: iHcgcGivVLdsfFhPbECK+8cJPri3HwRS88QNafzyEsM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:9f:96:50:1f:46:cd:78:65:9e:4b:45:da:f4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d
        Validity
            Not Before: Jan 31 10:01:08 2025 GMT
            Not After : Feb  1 10:01:08 2025 GMT
        Subject: CN=ab3d505b917f120f00e24e41700d6f84c478e136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3a:32:df:df:6c:6a:30:de:0c:50:c3:75:86:
                    16:f0:b8:cd:14:58:06:30:3a:d7:ff:b5:f5:c1:c8:
                    a0:3d:ba:83:a9:4c:57:91:c9:24:09:3a:e9:0e:a3:
                    ca:0e:3c:d9:19:ac:67:0f:36:8f:81:b5:2c:59:02:
                    50:e3:30:bb:65:76:30:a6:b8:ff:0b:7e:47:bb:7b:
                    db:18:d7:6d:00:2e:c8:f1:eb:91:f0:3c:a8:eb:b7:
                    e5:95:ae:94:9c:bb:ef:58:11:89:db:b2:50:17:37:
                    94:fe:7c:64:50:5c:96:80:7c:04:c4:f0:bc:f4:10:
                    94:f0:0e:51:e2:26:7d:57:bd:d0:a9:bf:62:88:bf:
                    f7:46:b3:9a:eb:6a:04:49:9c:83:a4:8d:db:c2:b5:
                    7a:55:a6:0f:82:76:28:ac:49:89:d7:b7:e3:f3:38:
                    13:c4:5c:f0:1b:54:34:b6:85:54:66:31:79:7f:86:
                    46:ca:f3:fe:91:50:c1:2e:9a:b3:40:e6:db:c7:1a:
                    ba:7c:28:cf:f3:58:26:12:10:a3:b8:7f:73:5a:dc:
                    0c:64:5f:4d:4c:c1:71:64:a2:11:45:8f:80:52:68:
                    a4:03:d3:da:47:fc:02:e0:d9:f0:e7:5c:a5:e1:55:
                    ae:bb:9b:56:85:da:51:12:6d:be:dc:6a:de:3c:d2:
                    fb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3D:50:5B:91:7F:12:0F:00:E2:4E:41:70:0D:6F:84:C4:78:E1:36
            X509v3 Authority Key Identifier:
                keyid:9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:15:47:05:7a:8e:c3:c5:6b:24:a3:34:61:18:f5:d6:e1:c6:
         2b:57:d8:d5:f7:4f:32:66:5e:37:eb:da:ae:03:9c:cd:b8:22:
         26:0e:99:ec:13:7b:47:c7:6b:33:40:6f:3d:6b:db:8b:fe:41:
         1d:c1:29:11:24:93:08:cd:62:c8:9d:a8:4b:1a:a4:ba:4a:56:
         84:9d:a6:b4:3e:5a:6f:c6:17:f1:49:aa:a2:3a:0d:13:03:65:
         4c:5c:b2:4c:05:57:65:fb:06:52:59:d2:16:ee:d9:eb:16:d5:
         5b:21:04:b8:4b:72:66:fe:52:2d:32:48:29:f5:98:2d:c2:d7:
         23:94:5b:75:e6:24:aa:5b:a8:de:ff:b3:e3:95:ac:a0:42:39:
         41:3d:7c:43:c7:b0:ab:d0:44:92:09:11:3b:9c:44:94:b9:17:
         fb:71:ab:b8:99:ae:79:53:52:6b:83:a2:92:57:09:40:81:35:
         c3:c9:cb:97:d4:06:be:8b:e9:02:95:14:94:61:64:c5:29:a7:
         b3:1a:5c:56:c9:20:5d:33:6c:49:bf:c3:d5:4e:3c:ac:99:4b:
         35:04:1b:af:43:cc:44:3d:9d:f1:38:ce:df:ac:36:68:f9:7a:
         87:d3:58:9f:94:0c:90:7a:11:e9:3f:3f:83:af:f8:eb:c4:5e:
         0d:03:70:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:12 2025 by rpki-client