Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
File:                     x0oNp1cJLW7M99lO3idYdToc14Q.mft (raw, json)
Hash identifier:          wPHAAiixd1g9eYoyfD8QigNlK6uvSPkQcqtd/hVuIW4=
Subject key identifier:   A4:38:8E:FB:D2:C6:15:E1:FC:C0:6A:02:97:DB:98:39:C4:C8:5F:04
Authority key identifier: C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84
Certificate issuer:       /CN=c74a0da757092d6eccf7d94ede2758753a1cd784
Certificate serial:       0194BC3C9E3DD3B9131722FE62F997E4B661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
Manifest number:          1322
Signing time:             Fri 31 Jan 2025 12:01:16 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:16 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:16 +0000
Files and hashes:         1: x0oNp1cJLW7M99lO3idYdToc14Q.crl (hash: cgDRLKY3FNYeyHy7xb+3xIoRq2poSWNQk7NygT4E/yk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:9e:3d:d3:b9:13:17:22:fe:62:f9:97:e4:b6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74a0da757092d6eccf7d94ede2758753a1cd784
        Validity
            Not Before: Jan 31 12:01:16 2025 GMT
            Not After : Feb  1 12:01:16 2025 GMT
        Subject: CN=a4388efbd2c615e1fcc06a0297db9839c4c85f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ea:1b:c3:83:8a:1a:7c:20:bb:15:f5:e9:eb:
                    94:6a:78:e2:2c:0e:d2:f7:7d:09:69:b8:a6:d8:86:
                    2b:79:5a:db:34:6c:99:71:fb:2f:29:6c:0a:7d:ed:
                    f6:fa:fc:e0:e9:2c:d5:d7:bc:59:a0:43:75:fc:69:
                    72:93:25:a7:05:44:33:5e:28:da:4f:f4:73:e8:fb:
                    53:b0:0b:1b:bc:e6:bc:8f:4f:8e:58:08:14:c7:4d:
                    a7:07:5c:91:b1:7d:34:9b:c4:25:6d:fd:13:a1:71:
                    5a:f1:48:e4:08:de:cf:3e:7f:bc:0d:c5:0b:46:36:
                    7b:25:56:c8:d7:29:ec:ba:aa:fb:5a:1b:3b:45:9c:
                    d6:1a:e6:2d:b7:4f:2e:71:ad:51:d8:27:be:cd:8b:
                    bd:73:f5:15:26:9f:67:1c:14:2b:61:28:cd:1b:cb:
                    b8:86:8c:e8:22:19:c5:d3:de:ce:4b:a3:da:f8:34:
                    b2:5a:30:b3:69:38:22:81:cc:e0:e9:79:28:57:e0:
                    af:4e:87:64:5c:df:d9:f6:44:9d:a4:09:46:2c:19:
                    fd:16:9f:c2:2b:42:a1:d8:36:62:c6:5b:54:6c:bb:
                    de:54:57:f6:31:4f:83:98:03:7d:51:3c:30:ce:42:
                    7b:9c:7c:cf:9b:e7:24:a4:f3:e3:ff:5e:5c:be:74:
                    8d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:38:8E:FB:D2:C6:15:E1:FC:C0:6A:02:97:DB:98:39:C4:C8:5F:04
            X509v3 Authority Key Identifier:
                keyid:C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:43:2d:79:6c:9a:72:8c:d4:3c:a1:aa:42:24:d5:f8:a2:b6:
         6d:be:cf:0e:ca:f3:44:d2:f6:4f:41:4f:45:b4:dd:f8:2d:08:
         0e:d1:72:79:53:ee:fa:61:98:ab:65:97:c9:a0:71:0d:b7:d9:
         c6:22:ea:fd:fe:d7:01:7c:6f:b6:d9:84:f6:a8:ca:35:a5:a7:
         65:a1:57:6a:53:a1:2e:ca:3c:80:52:44:8e:74:dd:2a:53:32:
         57:99:34:1b:48:6a:ec:2c:fb:81:f5:4f:1d:e8:c3:44:13:92:
         de:60:99:a2:77:d0:27:09:5d:e8:1c:d7:b6:60:23:d2:42:4d:
         6c:75:81:aa:fa:17:26:bf:51:0c:a7:d0:38:b6:f3:6e:df:3a:
         44:d5:87:be:e7:1c:d0:d0:27:2b:a5:41:22:f1:5b:71:ec:72:
         88:04:34:14:b4:c5:fb:5e:37:01:f1:81:49:6f:b6:3b:82:96:
         00:a9:73:64:70:9f:b9:c7:88:b2:df:93:7f:71:d2:af:50:29:
         1d:d9:c7:fe:cf:9a:e5:ea:91:b3:9c:f1:00:c1:4a:56:a1:90:
         4e:18:d8:6f:ce:7b:0e:9f:ff:de:22:fe:31:af:e6:ee:83:ca:
         33:72:ea:f6:3a:84:d5:19:83:96:ef:ce:d6:d7:c7:c4:0a:86:
         ba:c6:5f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:15 2025 by rpki-client