Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.mft
File:                     4VW0MN7doRMQ9shzieMgj8ZSnps.mft (raw, json)
Hash identifier:          U2ZOH4cP9/+gC/LZZy46UZy1Vrb05oLyhtkgESWD4uE=
Subject key identifier:   60:3F:AF:CD:96:EF:12:D8:6E:90:F8:E4:A4:76:9D:8A:6D:BA:62:F1
Authority key identifier: E1:55:B4:30:DE:DD:A1:13:10:F6:C8:73:89:E3:20:8F:C6:52:9E:9B
Certificate issuer:       /CN=e155b430dedda11310f6c87389e3208fc6529e9b
Certificate serial:       0194BC3C06AB9C8B3E62C3D67864E5F7B83A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VW0MN7doRMQ9shzieMgj8ZSnps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.mft
Manifest number:          0D53
Signing time:             Fri 31 Jan 2025 12:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:37 +0000
Files and hashes:         1: 4VW0MN7doRMQ9shzieMgj8ZSnps.crl (hash: ZiJqziqjf32OKPNP0Ip6LUmObd2bqmNgV10LfB+CZSA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:06:ab:9c:8b:3e:62:c3:d6:78:64:e5:f7:b8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e155b430dedda11310f6c87389e3208fc6529e9b
        Validity
            Not Before: Jan 31 12:00:37 2025 GMT
            Not After : Feb  1 12:00:37 2025 GMT
        Subject: CN=603fafcd96ef12d86e90f8e4a4769d8a6dba62f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:71:34:94:b9:45:96:44:2d:59:1f:42:8f:b7:
                    39:68:db:69:f4:41:73:b8:8e:e4:ab:2d:06:d6:fb:
                    35:fb:a4:8e:4c:63:a9:8c:70:e2:8e:14:77:56:ea:
                    4b:a8:0c:59:0e:2c:bc:5f:9c:de:2e:54:93:39:ae:
                    72:5e:e4:0c:59:02:ce:16:07:d9:d4:8e:5d:6b:4e:
                    46:bb:59:76:4e:6d:4b:a8:97:93:27:49:f0:0b:bc:
                    55:76:4b:13:c9:4f:2f:d9:77:70:c0:38:33:b2:c4:
                    3d:33:91:db:d7:f8:ae:42:13:64:31:79:15:2a:b9:
                    0a:38:f7:a7:71:40:9b:25:c7:a5:95:fe:8d:f9:d8:
                    4f:59:38:88:13:09:b4:5b:81:67:96:7f:57:a1:59:
                    7c:7a:aa:4c:ba:24:c9:29:fb:2f:b3:7c:ac:ff:df:
                    4c:0b:bf:08:0e:29:45:76:f3:8f:11:a4:fd:7b:ba:
                    86:b1:b4:bf:f1:d8:e4:6f:0a:bc:72:e0:37:fb:dd:
                    ab:81:27:fc:a3:be:45:4d:85:63:db:a2:3a:93:a2:
                    40:5e:a9:92:73:58:ad:b2:c7:10:90:07:4b:cc:8e:
                    7d:68:f7:c3:d8:f7:be:9f:7c:a6:5b:25:22:85:0a:
                    53:e0:7e:e6:43:71:e9:98:67:37:74:b9:0f:58:77:
                    20:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3F:AF:CD:96:EF:12:D8:6E:90:F8:E4:A4:76:9D:8A:6D:BA:62:F1
            X509v3 Authority Key Identifier:
                keyid:E1:55:B4:30:DE:DD:A1:13:10:F6:C8:73:89:E3:20:8F:C6:52:9E:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VW0MN7doRMQ9shzieMgj8ZSnps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:37:f4:9c:d1:04:5c:c4:e8:12:60:25:92:5d:e9:05:0e:a3:
         de:09:4f:46:ab:49:b0:1d:36:e4:dd:19:90:a6:85:32:11:3e:
         de:85:1d:c5:20:e1:f4:90:69:a6:69:83:d9:45:66:08:fb:62:
         e1:8f:8d:0e:5d:76:ef:f5:e2:ef:cc:91:9c:d9:58:06:8d:13:
         16:c0:af:bc:d1:ff:41:b4:0f:6f:0a:46:1d:88:83:bf:98:67:
         d9:e2:bd:89:ed:88:2e:5e:ad:94:e7:6a:af:9c:42:26:4d:77:
         2e:68:e2:23:07:6b:51:24:b5:77:be:4f:1a:95:98:4c:cf:59:
         2b:f3:95:bc:dc:69:14:be:80:b4:e4:33:ca:52:82:33:35:e5:
         e5:17:0d:e0:66:84:50:25:51:6e:f8:3d:6f:00:d4:f1:cb:fc:
         d7:44:2d:3b:25:b0:24:a0:ee:21:15:64:d9:14:b0:fb:01:4d:
         ba:0e:4f:42:06:e5:93:64:09:a3:69:83:0b:c6:a0:a8:67:10:
         21:70:3d:02:64:f2:56:6e:8b:f9:00:37:6f:e4:fa:f7:7c:1a:
         be:d0:c2:82:c0:50:46:23:7f:25:69:f9:9a:2b:f5:ee:86:44:
         aa:8a:83:f7:33:3d:36:f1:0e:d8:bb:64:4e:24:ad:cb:ed:fc:
         fb:44:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:50 2025 by rpki-client