Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
File:                     rARWSrE5dm8d7mSLNaChi702IQk.mft (raw, json)
Hash identifier:          RW/29jS6KwX+Wef8JxTMXgY0SBU0iX8fjy1mS9+qRuQ=
Subject key identifier:   CD:6E:7E:D8:DE:B4:A2:4D:82:D1:E0:59:30:D2:AC:69:CB:C3:2B:45
Authority key identifier: AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09
Certificate issuer:       /CN=ac04564ab139766f1dee648b35a0a18bbd362109
Certificate serial:       0194BC3C2FFF36B51324FEE6817D8F0C8142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 12:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:48 +0000
Files and hashes:         1: rARWSrE5dm8d7mSLNaChi702IQk.crl (hash: jxGv3Hf0pFB4iK8PCY0TciL38CnX62I/eyZfVX4lObg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:2f:ff:36:b5:13:24:fe:e6:81:7d:8f:0c:81:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac04564ab139766f1dee648b35a0a18bbd362109
        Validity
            Not Before: Jan 31 12:00:48 2025 GMT
            Not After : Feb  1 12:00:48 2025 GMT
        Subject: CN=cd6e7ed8deb4a24d82d1e05930d2ac69cbc32b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ce:97:b2:40:00:ad:20:56:fa:ab:d0:2e:18:
                    2f:e2:86:de:f8:5e:2e:5b:98:ca:c0:07:86:44:19:
                    83:af:47:e9:4c:76:19:82:e7:22:92:a6:49:e1:23:
                    ab:b5:1d:00:b5:6c:38:f4:32:6c:49:4a:52:b0:10:
                    5a:89:fc:41:1e:8c:4f:d8:dc:ad:55:49:56:ac:82:
                    9a:b2:54:f2:40:88:01:c2:1e:31:0e:b8:b7:ea:11:
                    c5:85:e5:69:04:e2:a8:33:b6:1f:94:fd:f9:b0:8b:
                    e5:5f:ec:ff:57:33:9d:b5:9b:20:6b:69:54:af:82:
                    7e:a8:98:5b:56:fa:ac:a9:c6:61:5f:e5:94:17:32:
                    4d:8d:ff:52:ea:ce:30:d2:c1:f5:4f:7a:6b:41:99:
                    86:55:6a:89:76:f6:dc:47:97:7c:62:18:e2:d6:b8:
                    ea:90:18:04:32:d6:d1:77:0b:1d:a2:27:44:95:92:
                    7c:86:20:dc:67:cb:d2:5a:8d:ab:d2:55:ce:70:c7:
                    8e:d8:c7:52:5f:5d:a9:8d:85:28:03:a6:f5:f4:0b:
                    2d:92:0d:7c:f9:b0:45:8e:32:74:ea:9d:49:0e:4c:
                    ea:fc:74:75:5e:65:ce:35:76:5b:96:a5:91:ac:95:
                    9c:a9:fc:58:1e:54:a7:92:6f:d9:78:4a:a1:8a:c5:
                    86:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6E:7E:D8:DE:B4:A2:4D:82:D1:E0:59:30:D2:AC:69:CB:C3:2B:45
            X509v3 Authority Key Identifier:
                keyid:AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:2e:ec:73:9b:71:14:16:c6:cf:bd:89:f9:20:d7:1f:78:31:
         8e:58:dd:01:6f:15:53:52:a2:1e:58:30:ce:7f:27:71:df:ca:
         22:fc:44:63:ac:d2:13:46:79:5d:4d:ac:ee:3c:7b:9b:66:94:
         3a:fd:e1:cd:e5:29:73:ce:33:17:1d:d0:41:25:62:2f:b4:c0:
         02:c8:81:1b:03:84:e6:50:6a:40:f8:f7:5c:88:4a:54:6e:c7:
         0d:d3:a4:6f:e4:3d:45:02:c6:d9:56:8f:1a:8e:c7:b9:06:49:
         9d:92:18:0a:01:e9:cb:fc:b3:21:96:b1:2b:c2:f5:cc:5c:53:
         ad:7a:81:9b:eb:f4:e6:a2:62:8d:12:a8:f5:84:a7:60:2d:a5:
         26:3d:76:fd:23:25:05:d6:57:e5:fd:b1:2d:40:da:d8:49:e1:
         1a:30:f0:85:0a:d0:0f:75:44:b6:0b:2d:d6:23:10:f9:59:2f:
         bd:8c:d7:de:75:60:f2:ca:e9:d5:73:71:5e:51:be:de:20:3e:
         bc:63:76:be:94:c5:fe:a2:e9:33:a9:73:17:03:8c:04:fd:e8:
         d5:be:11:e2:9c:cf:de:11:35:a7:03:12:7c:fa:dc:bb:13:50:
         a9:6e:ed:70:ba:9d:22:d2:8b:3e:2d:83:e2:1b:1c:73:3a:71:
         88:15:50:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:42 2025 by rpki-client