Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
File:                     2qM7UIN5nEnPntwAhit8nCGMZhM.mft (raw, json)
Hash identifier:          FHSBf7UuJ8XXP/4Bu4OtXdQ4YQq1XGu3l5h5rlzUa1U=
Subject key identifier:   1D:96:93:4F:B6:38:48:38:BE:6F:64:8D:35:55:01:90:38:F7:AF:C5
Authority key identifier: DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13
Certificate issuer:       /CN=daa33b5083799c49cf9edc00862b7c9c218c6613
Certificate serial:       0194BD4E98654ED8A2F6E9DA7B68F8FE0559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft
Manifest number:          01B2
Signing time:             Fri 31 Jan 2025 17:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:32 +0000
Files and hashes:         1: 2qM7UIN5nEnPntwAhit8nCGMZhM.crl (hash: aJpqUP1sfzz7BDjfUgwEE+Ue0RzQVkntirW/YCHFakA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:98:65:4e:d8:a2:f6:e9:da:7b:68:f8:fe:05:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa33b5083799c49cf9edc00862b7c9c218c6613
        Validity
            Not Before: Jan 31 17:00:32 2025 GMT
            Not After : Feb  1 17:00:32 2025 GMT
        Subject: CN=1d96934fb6384838be6f648d3555019038f7afc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:69:20:2b:e5:f3:0a:93:7a:45:6e:ca:d9:
                    e5:43:24:7e:0d:00:30:fe:4c:10:9a:db:55:f6:05:
                    df:b9:f1:15:b8:ea:e9:d1:c3:c1:0a:19:31:f0:d5:
                    13:54:b1:2f:5a:35:c1:49:79:86:d9:fd:33:5d:02:
                    79:9d:28:ce:fe:4c:4c:b2:7d:4e:46:27:b4:91:d2:
                    87:df:dc:ef:fe:62:14:e4:46:cd:2a:1c:52:02:37:
                    8b:26:7e:ec:bc:36:2d:a9:75:8e:9d:9b:0b:c2:e0:
                    9e:79:ad:cf:c4:9f:f3:c6:77:7d:40:7c:9f:06:09:
                    c7:6e:98:9a:88:e4:c9:d5:e5:aa:eb:24:fb:b7:29:
                    0a:a6:d5:6f:c3:6a:4a:f1:ef:3a:24:a5:bb:a3:6d:
                    13:4f:96:0a:f4:75:74:a2:98:18:6b:ab:3e:09:51:
                    96:57:18:16:0d:f2:2c:9b:62:2e:c0:40:06:d3:cf:
                    bd:37:c0:02:c0:5e:1b:4a:b5:6f:4e:6f:ec:86:cb:
                    f5:e0:7f:1a:21:91:13:6d:42:2b:6e:71:23:b1:73:
                    ed:9f:b8:30:d8:ba:97:bc:16:74:be:d2:f4:e2:7d:
                    5f:84:fa:c8:ae:5d:56:ea:ba:a3:30:a4:32:fe:d2:
                    67:df:ae:66:c6:fb:78:55:7d:c8:45:d5:96:07:8f:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:96:93:4F:B6:38:48:38:BE:6F:64:8D:35:55:01:90:38:F7:AF:C5
            X509v3 Authority Key Identifier:
                keyid:DA:A3:3B:50:83:79:9C:49:CF:9E:DC:00:86:2B:7C:9C:21:8C:66:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qM7UIN5nEnPntwAhit8nCGMZhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cf318e-8951-4e1e-bbe3-16f43dba2abc/1/2qM7UIN5nEnPntwAhit8nCGMZhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9d:c3:a7:14:a8:19:6f:e9:95:f9:88:82:39:86:54:62:15:
         bb:ce:04:7e:c1:84:da:91:aa:6a:64:25:62:98:e7:93:4a:ef:
         df:0c:d1:af:2a:d3:85:1b:e2:aa:70:17:2c:c6:8a:0e:ff:bc:
         4c:f4:2f:b7:1a:cf:73:66:16:b7:47:39:81:13:e1:88:1f:ac:
         d9:3d:a7:cb:b0:24:32:64:44:63:34:92:a6:3a:6a:4d:a9:d9:
         45:be:98:33:73:78:4d:b4:7f:de:de:1a:d6:d1:1d:0e:e5:69:
         28:e2:a9:f6:ca:86:37:05:8d:84:83:34:18:ff:57:5e:ca:89:
         e9:c3:54:5e:e5:ad:40:75:5a:51:2b:fd:db:08:b1:19:c2:1e:
         85:05:f8:fc:60:c6:97:df:2b:27:75:28:d2:df:40:8e:bb:34:
         c1:a5:3b:b2:a8:20:11:d0:e6:cd:80:46:13:21:7b:6d:9e:7a:
         f2:00:72:6a:cb:96:a1:25:a4:0b:29:f5:19:8b:9f:71:23:9b:
         2f:8d:fe:97:4d:ec:64:35:af:81:15:0d:33:62:a7:10:c8:10:
         b2:21:77:8f:15:34:fc:f2:e2:0e:cf:cf:5b:ce:4f:bb:dc:cc:
         a5:c1:82:23:2a:7d:77:17:51:79:bc:e0:bf:1a:62:1b:79:10:
         00:ae:75:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:49 2025 by rpki-client