Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File:                     4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier:          SfF/7S6XKgpoj36KBk3NA6Yyd04RjPNAf6GQFYmmnbY=
Subject key identifier:   2B:D5:F2:D9:37:83:5B:57:A8:BC:CA:50:74:CA:83:65:24:A9:86:38
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer:       /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial:       0194BBCDB3AF8E48CBEA5726F3D4769407CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number:          115A
Signing time:             Fri 31 Jan 2025 10:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:07 +0000
Files and hashes:         1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: x0xJTQCVpgnTQpIAsMYx8/8WQaRgQcgrUMVtxgNY2SA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:b3:af:8e:48:cb:ea:57:26:f3:d4:76:94:07:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
        Validity
            Not Before: Jan 31 10:00:07 2025 GMT
            Not After : Feb  1 10:00:07 2025 GMT
        Subject: CN=2bd5f2d937835b57a8bcca5074ca836524a98638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:80:cb:99:89:13:a9:40:d7:87:16:50:dc:51:
                    c3:9c:f7:a1:f6:da:28:37:ea:6f:db:c6:e5:c8:c5:
                    db:d6:02:89:8d:ba:99:16:17:25:7b:7d:05:12:d6:
                    7a:47:52:73:40:ae:d6:96:bc:5c:74:e5:f2:e6:3d:
                    71:56:73:be:17:fd:db:da:91:a8:47:61:e4:e6:96:
                    99:44:7b:33:ac:d2:8c:b9:8b:9c:c3:77:14:22:66:
                    3a:aa:1f:fa:3e:8c:43:26:c7:12:13:03:d8:13:86:
                    1c:e8:96:83:ee:f9:f1:1f:e5:98:bc:25:2b:e9:43:
                    5f:02:28:f9:de:98:1d:b3:9e:3a:4f:3e:50:19:52:
                    31:87:3a:2a:7e:68:b6:6c:c8:86:a6:bf:af:db:76:
                    99:16:5f:a0:ef:9c:9c:3e:39:9b:ae:84:3d:fe:ed:
                    d3:d2:df:ec:dc:da:8f:e9:5c:15:47:98:80:25:a8:
                    a1:82:42:5b:da:c8:c5:3d:ef:ac:73:3e:60:5c:3a:
                    81:b9:27:de:a7:52:cd:33:55:69:fa:39:5e:e5:02:
                    2d:7c:fd:80:a4:a8:bb:9e:dd:4d:f5:f6:ad:76:3f:
                    b3:51:92:18:9c:d1:90:a4:67:00:7d:2b:5e:2d:d0:
                    bd:17:0a:39:ec:bf:42:9b:6d:1b:90:a9:fe:96:b4:
                    f1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D5:F2:D9:37:83:5B:57:A8:BC:CA:50:74:CA:83:65:24:A9:86:38
            X509v3 Authority Key Identifier:
                keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:df:ff:68:37:c0:2f:af:72:75:71:6d:e0:51:bb:c0:c5:2f:
         77:76:4a:91:64:60:96:00:4e:a0:11:e3:0b:c9:c9:6d:52:13:
         be:a4:2f:d0:ed:eb:1a:b3:fa:12:d9:49:f7:34:c7:ca:6c:38:
         ea:86:c7:80:8d:14:02:ce:64:bd:0a:8c:72:f7:01:33:f1:29:
         9a:31:a4:09:cc:42:63:22:5e:b6:9c:37:f9:84:4d:33:c4:20:
         c3:d0:44:a6:9c:8d:cc:77:1f:6b:a4:38:b3:42:81:e9:d9:77:
         7f:b5:a6:c1:61:81:f9:b7:ee:c8:31:f4:d4:c9:c3:53:15:47:
         7b:18:07:85:d3:31:72:c4:ae:43:ff:17:59:09:f0:88:02:f6:
         19:f6:f5:a5:21:f1:22:9c:9c:3d:c5:b5:37:a8:8e:79:03:2e:
         6b:82:d9:8e:65:fd:2a:b0:e1:9f:e3:51:70:38:2b:42:a2:29:
         8f:5e:c3:00:c0:7b:77:f6:e4:1b:33:35:47:d5:e4:14:48:06:
         e5:dc:6d:5c:01:72:e4:f4:ca:f5:49:ce:94:22:33:e4:21:d5:
         77:51:dd:d3:3c:ca:77:d5:13:b3:62:95:c8:d1:57:4a:6a:b4:
         3d:6e:f9:d8:1b:2d:c8:45:72:42:dc:11:79:93:fc:83:3c:6a:
         d0:68:4c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:14 2025 by rpki-client