Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File:                     7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier:          vVRezAZpVveI3COr5k37I3d1lXpbZQKTha0LYeg2Sx4=
Subject key identifier:   0C:8D:6D:4D:75:B4:BA:8D:90:58:0E:38:8B:1D:3B:46:55:CF:0E:BA
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer:       /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial:       0194BBCF02CEF11EBF4F36B6291057208EAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:01:33 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:33 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:33 +0000
Files and hashes:         1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: 8VG8FdTBQkzrklMyF+S+xsnNHYeanvq8PJcLHUI3m3w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cf:02:ce:f1:1e:bf:4f:36:b6:29:10:57:20:8e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
        Validity
            Not Before: Jan 31 10:01:33 2025 GMT
            Not After : Feb  1 10:01:33 2025 GMT
        Subject: CN=0c8d6d4d75b4ba8d90580e388b1d3b4655cf0eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:99:57:4c:7d:db:0e:95:de:9a:4e:08:97:6f:
                    33:5e:29:a4:ef:03:b1:06:51:df:08:e8:7d:8e:ff:
                    ea:ac:4e:90:8c:3a:5c:5a:a0:58:95:93:cb:2c:81:
                    30:8a:d9:16:48:ac:0d:22:ab:9e:67:c0:26:34:83:
                    9c:fd:3d:9b:e4:e4:9d:ed:ab:31:6c:31:e8:0a:2f:
                    d5:d9:d4:36:6e:af:8f:7c:bf:8e:97:dc:9a:5f:a8:
                    37:66:0f:bb:dc:5e:d4:22:1a:cc:e2:95:19:d2:45:
                    bb:01:38:d5:9f:6e:d9:31:33:28:51:23:6e:84:64:
                    9f:f1:b0:f7:7b:4b:60:19:ae:0c:a6:90:36:57:71:
                    d0:18:fb:3a:ce:9c:70:df:a6:08:7f:af:d9:0a:40:
                    fd:31:76:b3:63:65:0b:4a:8e:74:ef:fe:e5:2a:b3:
                    7e:c4:ae:c9:f9:4a:b9:72:d9:35:46:dd:cf:1d:f6:
                    32:97:cd:e3:ad:d1:cb:f1:09:11:41:c7:fd:10:3b:
                    89:f6:cc:e8:36:93:51:2a:bc:3a:62:f0:f8:66:e5:
                    b1:07:66:41:9c:34:fb:92:07:75:4f:8e:5e:6f:dc:
                    1b:c8:1b:15:96:be:dd:09:ee:53:7a:08:94:46:c1:
                    c4:c0:2b:1d:b0:f3:f8:9d:31:12:c5:30:93:93:8f:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8D:6D:4D:75:B4:BA:8D:90:58:0E:38:8B:1D:3B:46:55:CF:0E:BA
            X509v3 Authority Key Identifier:
                keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ae:60:be:f2:6a:e0:07:fb:33:5e:08:0d:19:16:10:21:e4:
         2c:bd:02:e8:ba:a2:e8:98:dd:e8:74:cb:39:ce:9e:79:97:c8:
         4a:95:94:79:eb:e1:29:a8:c2:63:39:f7:59:57:18:65:0d:ef:
         64:1b:52:8e:52:f4:3b:77:45:ac:63:6e:63:25:64:82:af:34:
         59:c9:fb:3b:0d:28:eb:f0:79:55:a4:16:db:ae:22:26:9b:19:
         6d:70:73:0f:ed:8a:82:67:f6:51:df:4c:46:b1:e1:cb:30:8e:
         63:e8:0c:81:50:34:64:e8:1f:1d:e8:bc:6f:61:30:3a:43:de:
         73:00:29:5d:7a:39:a1:a7:b9:36:4f:3a:cb:06:c2:ed:b0:08:
         cc:cc:2b:dd:1b:df:5b:fe:3f:c9:41:5e:70:45:3d:dc:93:33:
         d3:39:02:7c:6b:89:d9:31:f5:cf:95:82:3a:10:7d:fd:5d:85:
         a3:26:23:de:22:fb:a3:e3:1d:5b:ba:9d:ae:42:ad:d7:78:b9:
         bc:d8:09:bd:e1:15:b1:c2:bc:1c:c1:99:99:7e:a3:4f:6d:82:
         8f:55:90:4a:f5:ea:69:40:d9:3e:4b:74:f4:7b:ca:95:f3:3e:
         f9:b5:cd:64:f1:85:6d:ad:98:f6:60:9e:49:ee:a9:d1:9b:e8:
         88:fb:0d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:32 2025 by rpki-client