Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
File:                     2JkZ-1GnBREdaZbuww_8RC3pei8.mft (raw, json)
Hash identifier:          9BSNp6HhoEK8KNfSslMLIQBw0lRYK4ISSJsRfzo5Zac=
Subject key identifier:   48:CC:AB:83:CE:95:33:3E:BC:6B:6C:41:E7:F3:F6:09:CD:E5:66:AD
Authority key identifier: D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F
Certificate issuer:       /CN=d89919fb51a705111d6996eec30ffc442de97a2f
Certificate serial:       0194BD180373DE25B15D7E8419A28EE9A3F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 16:00:55 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:55 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:55 +0000
Files and hashes:         1: 2JkZ-1GnBREdaZbuww_8RC3pei8.crl (hash: V+haBR33nzy2o0/h8cRoTmamYbkNp9VIaLXja7fJZ3s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:18:03:73:de:25:b1:5d:7e:84:19:a2:8e:e9:a3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89919fb51a705111d6996eec30ffc442de97a2f
        Validity
            Not Before: Jan 31 16:00:55 2025 GMT
            Not After : Feb  1 16:00:55 2025 GMT
        Subject: CN=48ccab83ce95333ebc6b6c41e7f3f609cde566ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:ee:81:b0:26:0e:fc:f3:c2:1d:e6:17:c8:
                    ea:86:de:95:30:d1:6c:6a:7a:76:f6:c4:fe:de:d1:
                    cb:e2:0b:6b:98:91:ad:d4:73:42:b4:e3:ad:f2:d0:
                    5f:c4:8a:0e:73:9d:83:c3:f2:db:13:df:7f:0c:63:
                    30:c6:7f:01:58:e8:8d:e6:5a:c5:94:88:85:4f:95:
                    86:19:2b:a8:24:94:8a:ba:c4:ce:b0:e9:4c:10:fb:
                    01:84:de:17:1a:1e:11:df:1d:be:94:72:c7:02:6b:
                    f6:5c:be:dc:fa:95:a7:c8:20:f5:62:85:1d:b0:19:
                    60:6d:a3:fd:f9:4b:13:f2:2b:7a:a0:47:d9:a5:03:
                    54:4e:14:75:e4:4d:c4:a3:0b:a4:54:c7:10:0c:e6:
                    54:99:ea:5e:9c:79:a7:ed:12:04:bd:dd:bb:67:35:
                    12:06:fc:56:85:cf:ba:a8:5a:50:57:05:96:cd:11:
                    73:dd:a4:a8:6a:11:e3:8d:5e:10:a7:eb:22:60:17:
                    29:e8:21:68:a7:a8:5c:d6:5c:0d:a0:55:f1:36:e5:
                    4a:56:9a:be:a2:89:aa:b0:31:39:19:10:2d:b2:7f:
                    84:4d:1f:c7:d1:4a:13:10:9d:f6:d0:ee:f8:74:ef:
                    c6:9a:d6:6b:3e:88:4d:2b:d8:1f:f6:19:f3:d9:1b:
                    cb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CC:AB:83:CE:95:33:3E:BC:6B:6C:41:E7:F3:F6:09:CD:E5:66:AD
            X509v3 Authority Key Identifier:
                keyid:D8:99:19:FB:51:A7:05:11:1D:69:96:EE:C3:0F:FC:44:2D:E9:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JkZ-1GnBREdaZbuww_8RC3pei8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01e232-4551-4ce8-8cd8-7d8b1c91ec7b/1/2JkZ-1GnBREdaZbuww_8RC3pei8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c3:68:dd:7f:5a:3c:9e:1e:44:6d:c1:52:65:d5:c8:a5:85:
         91:4b:6c:3b:67:e6:a0:da:e3:18:ba:78:f2:9b:09:34:82:70:
         5d:11:35:14:04:b5:9f:51:4d:87:a3:85:a4:cb:a8:41:7f:0d:
         61:9d:d2:c8:ba:41:ae:a1:3f:1c:e1:04:ab:e0:b3:ac:45:31:
         d9:4f:d4:1d:e2:11:94:95:69:fd:c2:e4:12:66:4a:4a:0a:fe:
         3a:59:6e:cf:8c:78:b8:9e:a0:a5:a6:2d:65:21:f8:12:5d:a6:
         35:7d:1b:b2:e5:c0:7e:11:9c:b3:5a:34:ce:fe:75:c5:1e:dc:
         39:1d:e2:cc:67:e4:6b:17:96:54:35:a8:da:85:4f:f3:b3:2e:
         05:40:6a:f8:c3:cb:95:4a:65:63:88:fb:92:ef:c4:7c:cd:05:
         27:29:0a:f5:de:be:48:04:43:bc:3a:e5:03:96:82:37:1a:73:
         0e:57:89:dc:85:6f:18:56:8a:49:90:36:ad:f5:23:03:83:16:
         ef:58:6e:20:85:37:ea:7a:5d:de:48:95:66:92:e7:6b:ef:1a:
         0f:5e:09:7a:62:24:e4:ce:f2:16:3e:b2:24:49:7f:84:9d:4c:
         2a:42:eb:ae:0d:bb:ef:3d:67:12:93:ab:4d:2c:72:20:fc:1f:
         ae:96:7b:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9GANz3iWxXX6EGaKO6aPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTkxOWZiNTFhNzA1MTExZDY5OTZlZWMzMGZmYzQ0MmRl
OTdhMmYwHhcNMjUwMTMxMTYwMDU1WhcNMjUwMjAxMTYwMDU1WjAzMTEwLwYDVQQD
Eyg0OGNjYWI4M2NlOTUzMzNlYmM2YjZjNDFlN2YzZjYwOWNkZTU2NmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCvugbAmDvzzwh3mF8jqht6VMNFs
anp29sT+3tHL4gtrmJGt1HNCtOOt8tBfxIoOc52Dw/LbE99/DGMwxn8BWOiN5lrF
lIiFT5WGGSuoJJSKusTOsOlMEPsBhN4XGh4R3x2+lHLHAmv2XL7c+pWnyCD1YoUd
sBlgbaP9+UsT8it6oEfZpQNUThR15E3EowukVMcQDOZUmepenHmn7RIEvd27ZzUS
BvxWhc+6qFpQVwWWzRFz3aSoahHjjV4Qp+siYBcp6CFop6hc1lwNoFXxNuVKVpq+
oomqsDE5GRAtsn+ETR/H0UoTEJ320O74dO/GmtZrPohNK9gf9hnz2RvLlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjMq4POlTM+vGtsQefz9gnN5WatMB8GA1UdIwQY
MBaAFNiZGftRpwURHWmW7sMP/EQt6XovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkprWi0xR25CUkVkYVpidXd3XzhSQzNwZWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8wMWUyMzItNDU1MS00Y2U4LThjZDgt
N2Q4YjFjOTFlYzdiLzEvMkprWi0xR25CUkVkYVpidXd3XzhSQzNwZWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8wMWUyMzItNDU1MS00Y2U4LThjZDgtN2Q4YjFjOTFlYzdi
LzEvMkprWi0xR25CUkVkYVpidXd3XzhSQzNwZWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMNo3X9a
PJ4eRG3BUmXVyKWFkUtsO2fmoNrjGLp48psJNIJwXRE1FAS1n1FNh6OFpMuoQX8N
YZ3SyLpBrqE/HOEEq+CzrEUx2U/UHeIRlJVp/cLkEmZKSgr+Olluz4x4uJ6gpaYt
ZSH4El2mNX0bsuXAfhGcs1o0zv51xR7cOR3izGfkaxeWVDWo2oVP87MuBUBq+MPL
lUplY4j7ku/EfM0FJykK9d6+SARDvDrlA5aCNxpzDleJ3IVvGFaKSZA2rfUjA4MW
71huIIU36npd3kiVZpLna+8aD14JemIk5M7yFj6yJEl/hJ1MKkLrrg277z1nEpOr
TSxyIPwfrpZ7+w==
-----END CERTIFICATE-----
Generated at Sun May 11 09:22:54 2025 by rpki-client