Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
File:                     EFkFws-IrzKqrL3Wcc08w6z_ktE.mft (raw, json)
Hash identifier:          wJB5Jy5mpG8/zcfvr1wABGMymqUC6HAEAklV+wktHT8=
Subject key identifier:   D0:51:08:BB:B2:79:31:37:76:45:7C:BE:BE:C4:F9:76:46:FB:91:7A
Authority key identifier: 10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
Certificate issuer:       /CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Certificate serial:       0194BCA9B89D049419505ED839D34995B057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
Manifest number:          0397
Signing time:             Fri 31 Jan 2025 14:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:26 +0000
Files and hashes:         1: EFkFws-IrzKqrL3Wcc08w6z_ktE.crl (hash: ZdynEa88cdVfhR5ujdfArtkSdsAj1vpZKaUgyJuZVNk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:b8:9d:04:94:19:50:5e:d8:39:d3:49:95:b0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
        Validity
            Not Before: Jan 31 14:00:26 2025 GMT
            Not After : Feb  1 14:00:26 2025 GMT
        Subject: CN=d05108bbb279313776457cbebec4f97646fb917a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:08:c0:af:0a:00:6b:20:76:23:8b:a6:94:94:
                    ce:ca:0b:fc:a0:24:e2:d4:10:d5:73:9b:2f:22:33:
                    45:38:b5:e5:af:4e:9a:89:1b:f5:69:0b:a0:74:f6:
                    e3:4b:6f:b5:6a:b6:ad:d2:e4:70:1b:22:7f:66:fe:
                    74:74:88:01:3a:bb:ca:fe:41:8e:0e:51:e4:15:ff:
                    9c:b7:b3:90:87:ea:01:a3:d5:04:64:bf:87:fb:1d:
                    1a:65:d6:e3:11:d7:ed:13:01:46:3f:68:55:e1:5c:
                    b9:cb:61:0c:86:e7:a7:c9:ab:39:76:af:72:85:3b:
                    18:4f:6a:6b:45:d8:8e:ac:6b:d9:26:67:cf:65:9d:
                    86:b8:1d:35:ef:91:41:07:b9:d8:85:0d:e9:5c:59:
                    99:2c:48:e3:85:f9:3e:b6:bc:f2:bb:fc:ce:2d:26:
                    2f:30:0c:e9:61:fe:83:63:91:33:d3:64:ca:6c:46:
                    3e:4c:0a:35:9f:cc:33:f0:19:ad:23:f7:ef:ae:76:
                    9a:0f:52:c8:a4:eb:0e:61:dc:da:85:74:58:e4:1a:
                    c5:1f:99:f4:e8:5d:c4:d6:0e:e6:5c:4e:de:5a:7b:
                    82:b1:6b:94:9d:4c:4f:2d:34:03:ec:37:ae:de:31:
                    a8:f7:69:f2:e4:45:c3:f9:a3:db:5f:2a:be:32:94:
                    14:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:51:08:BB:B2:79:31:37:76:45:7C:BE:BE:C4:F9:76:46:FB:91:7A
            X509v3 Authority Key Identifier:
                keyid:10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:73:73:5a:04:14:d8:3f:00:da:4a:5c:31:89:20:26:8a:3a:
         a7:f7:32:21:6a:bf:bc:37:57:86:da:48:2f:a3:fb:a5:ee:4b:
         03:67:ae:fa:cd:2f:95:bd:d3:27:8f:c0:ab:09:c6:fa:b4:70:
         a9:bd:42:42:06:f5:42:92:00:af:d2:5b:84:cf:c0:94:b1:bc:
         d5:58:56:a6:4f:f7:db:98:c7:57:af:f3:12:ad:f7:14:8d:b7:
         93:3c:5c:8f:91:6f:2e:6e:dc:56:b9:a9:7d:0c:78:df:2c:81:
         eb:42:bb:fb:9a:eb:12:0e:91:30:a6:aa:e5:cc:98:e0:ba:a9:
         52:b4:39:7e:79:24:75:d6:e0:2e:8d:de:ab:8b:a8:39:37:34:
         f8:34:f1:21:be:b8:49:e1:01:6f:33:2e:d0:61:8a:65:a1:7f:
         3c:61:da:0c:ee:34:35:91:a5:b2:64:39:f1:d5:2e:e9:4e:b7:
         26:2d:b4:6f:3f:a5:25:57:52:59:e5:37:a4:63:69:6e:a0:be:
         a3:a8:38:8f:7a:5b:d9:4e:ef:92:b9:98:af:dd:b1:d4:7b:82:
         fa:4d:64:af:c2:af:69:10:b8:3f:49:91:ce:ea:d9:7f:40:f1:
         c5:25:41:1b:e2:c2:18:cb:6f:0a:3f:06:3a:4e:f1:b7:37:46:
         bc:49:ba:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:50 2025 by rpki-client