Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
File:                     LUrgdxLkhC-A-oEAnTNbxICeZB0.mft (raw, json)
Hash identifier:          8+Ch9nS3YRxyfNmvg56XV6kWffCTYFtnkO0N9uJiccM=
Subject key identifier:   04:6A:25:BE:04:85:16:A1:B6:5A:51:6E:ED:CC:BF:F1:EB:1C:62:B3
Authority key identifier: 2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D
Certificate issuer:       /CN=2d4ae07712e4842f80fa81009d335bc4809e641d
Certificate serial:       0194BD17BDF7B18CFCF2508443F50E597179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft
Manifest number:          0497
Signing time:             Fri 31 Jan 2025 16:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:37 +0000
Files and hashes:         1: LUrgdxLkhC-A-oEAnTNbxICeZB0.crl (hash: 16vcxDZ67BsfYgfBoxGcc591wNNTyHIc8h6RDvmZmeY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:bd:f7:b1:8c:fc:f2:50:84:43:f5:0e:59:71:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4ae07712e4842f80fa81009d335bc4809e641d
        Validity
            Not Before: Jan 31 16:00:37 2025 GMT
            Not After : Feb  1 16:00:37 2025 GMT
        Subject: CN=046a25be048516a1b65a516eedccbff1eb1c62b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:4f:49:5d:85:0f:66:1c:ea:ee:e9:72:c4:
                    23:82:be:47:1b:1c:a4:6a:19:aa:fe:87:3b:10:c8:
                    b9:58:0c:a4:ad:4f:c3:33:42:1c:3f:31:1b:6b:97:
                    43:cf:91:46:49:28:95:63:75:3f:b9:d2:a1:4e:8f:
                    d8:11:a7:7d:32:7b:89:b0:b7:8b:05:bd:03:3b:b9:
                    a4:96:8e:2a:93:a8:18:57:70:46:04:65:24:9f:4c:
                    9d:9d:1d:2b:4c:d9:dd:25:d6:21:98:34:13:55:0d:
                    86:6b:ef:f6:cf:0c:38:52:3a:d1:46:43:87:e3:f9:
                    af:94:fb:85:d4:8a:18:f1:5c:72:20:61:47:71:1d:
                    35:f8:01:ac:a3:d9:0f:7c:cd:34:26:55:3c:c2:fc:
                    89:c8:5f:eb:f2:ed:a7:cb:6b:0c:57:56:04:6b:0e:
                    7e:a6:31:bc:fb:59:0a:d4:39:32:5b:b2:67:21:cc:
                    86:d2:e9:e5:04:47:d7:88:7f:9b:e3:a8:20:f4:63:
                    67:2c:f8:fa:f7:8a:48:7c:64:00:45:89:27:f4:88:
                    be:82:46:ca:5c:43:bd:0f:10:25:ad:95:dd:31:95:
                    a6:33:69:46:69:89:13:b2:dd:5e:2f:a9:4a:7a:01:
                    26:a0:55:be:dc:d5:a5:cd:68:37:53:1d:02:5d:02:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6A:25:BE:04:85:16:A1:B6:5A:51:6E:ED:CC:BF:F1:EB:1C:62:B3
            X509v3 Authority Key Identifier:
                keyid:2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:8b:03:76:c9:b5:1f:2a:22:9e:b4:cf:1e:56:f7:50:e5:d9:
         53:e1:a3:a1:65:0e:d7:d6:54:74:22:e7:2a:4b:e9:14:a2:c5:
         19:b0:bc:e1:8c:78:55:e9:51:15:3d:eb:c0:7e:2d:39:0e:6b:
         51:a5:3a:fd:4b:15:df:a4:b1:bb:2d:af:f6:fe:52:dd:93:ad:
         1a:94:87:67:43:e0:a3:d1:3f:e3:92:df:6e:cd:ff:2c:40:1d:
         db:3e:70:12:6a:6b:b2:90:47:ff:cd:32:8a:82:a7:98:b8:1c:
         a5:d8:39:dc:b9:33:db:de:d8:e1:a0:df:1b:ea:5d:c5:9c:be:
         a3:20:d1:07:19:12:ad:9b:b2:5b:0c:66:f8:3a:07:31:82:b3:
         9a:b5:d0:3b:5a:58:fe:b0:51:74:d7:be:96:cf:f8:f8:1e:b3:
         51:e0:51:c0:5f:cc:d5:c8:b4:06:b8:15:58:8d:e7:28:95:08:
         cd:64:5d:8a:ad:0d:73:8c:05:8b:bc:38:63:8f:08:f9:54:f1:
         9e:9f:78:6d:de:e1:9c:ea:c6:28:96:8c:b1:46:6a:d3:5b:e1:
         b3:b8:b1:19:56:92:bd:0b:ad:b5:18:bc:d5:dd:65:fc:48:c6:
         7d:0d:6b:0c:b6:3b:56:af:69:44:52:db:83:ae:2d:29:d9:fb:
         1f:31:57:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:33 2025 by rpki-client