Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
File:                     fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft (raw, json)
Hash identifier:          HfPW4YIb4NMIduXDz15L7SFpIjRnlcLj9TzaFHHzkCM=
Subject key identifier:   2C:EA:97:AA:69:17:DA:51:68:B8:01:CF:A4:E7:46:A6:11:9C:AB:B9
Authority key identifier: 7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
Certificate issuer:       /CN=7f0757c331981e042b7471373527d0f64a1356b4
Certificate serial:       0194BBCF0582D17191D943D54932FF0BD7F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
Manifest number:          0FCD
Signing time:             Fri 31 Jan 2025 10:01:34 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:34 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:34 +0000
Files and hashes:         1: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl (hash: l1Z3fAK+vqneyczu76kRgrgZRRQ4/ZIKRAa16sbFAPs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cf:05:82:d1:71:91:d9:43:d5:49:32:ff:0b:d7:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f0757c331981e042b7471373527d0f64a1356b4
        Validity
            Not Before: Jan 31 10:01:34 2025 GMT
            Not After : Feb  1 10:01:34 2025 GMT
        Subject: CN=2cea97aa6917da5168b801cfa4e746a6119cabb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:b1:b4:97:96:f8:3a:f8:6e:a9:26:5e:66:
                    9d:bf:26:54:b2:5a:43:cd:59:c1:e6:6e:ea:76:d0:
                    10:27:f7:a4:7b:68:fd:74:7b:43:63:b4:a9:1f:78:
                    ca:44:f5:23:d4:d8:0f:50:2c:21:3d:5d:42:0d:04:
                    81:e9:92:c4:86:c0:d0:86:44:9c:0d:96:2e:4d:ef:
                    fc:ec:ef:35:91:3e:97:1a:62:04:77:1c:97:23:4e:
                    c9:6c:53:7b:41:8c:39:4f:a1:8b:3b:af:87:cd:87:
                    12:da:d1:c2:15:4c:d4:c4:01:fd:a9:16:92:11:6f:
                    a0:1a:bb:1c:fb:7f:95:d2:4c:8a:1a:d6:80:40:9d:
                    65:a5:52:ac:9f:d8:9c:35:fb:12:ec:ee:e3:c7:49:
                    a3:d1:2d:ce:f7:fd:95:6a:5f:39:17:ec:da:63:58:
                    70:ac:9b:b2:20:6d:98:2c:6a:3a:7a:29:33:9f:4f:
                    0d:55:d4:b7:f2:32:c5:fd:fe:d5:e0:3c:91:41:f3:
                    1b:7e:9e:a8:b4:66:0f:da:df:e3:5e:36:a1:68:30:
                    5a:6b:1b:dc:c4:c5:8d:29:d6:d0:27:44:73:ff:d1:
                    53:1c:4e:07:ee:26:12:af:73:87:a1:30:50:9e:3a:
                    89:0c:a5:d1:9c:40:56:a2:e5:93:7d:c5:04:45:92:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EA:97:AA:69:17:DA:51:68:B8:01:CF:A4:E7:46:A6:11:9C:AB:B9
            X509v3 Authority Key Identifier:
                keyid:7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:52:2d:df:99:70:70:7a:1a:1f:2b:26:d6:63:73:4e:32:73:
         ea:a7:9f:57:b5:0c:4f:8d:dd:c6:97:a7:1c:11:ef:d6:cf:72:
         75:b5:fb:a7:b3:ae:cd:de:75:03:db:73:f6:2f:25:15:57:51:
         42:b0:0a:44:36:c5:6a:bd:ec:9e:74:07:db:d4:1e:a6:82:44:
         f7:da:7e:71:1a:fd:de:55:83:1f:53:53:36:56:ec:6c:4e:b0:
         a8:f1:b1:d4:c2:52:21:e1:db:0c:16:b1:49:de:30:0c:1e:10:
         b2:2f:89:65:a2:0f:d2:99:54:74:bb:ae:cb:df:36:e6:93:88:
         b8:96:36:ae:74:6a:6a:14:35:5a:b5:1b:92:e1:6f:18:29:7b:
         e1:08:59:d8:73:c4:f7:4d:28:61:26:fc:c1:6a:b7:8e:6e:bb:
         19:a0:2a:a6:15:21:e1:fb:79:18:0a:29:64:ce:dc:e3:c5:8f:
         84:02:fd:6f:9f:6c:8c:86:67:e9:ce:2f:04:3b:cd:ee:16:ea:
         4b:0d:24:8e:c8:e0:42:64:79:d6:50:3f:2a:43:35:87:d5:39:
         90:78:d9:e6:75:23:c6:83:6b:35:fc:38:28:56:ca:45:d7:cc:
         3c:08:e8:28:40:bf:bd:69:c1:f0:99:fa:5a:65:1b:0e:c1:de:
         53:f8:ca:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:20 2025 by rpki-client