Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
File:                     G6QV0W5y4zPyk2wcXhffJDeBCMI.mft (raw, json)
Hash identifier:          srsmGkNDEptWI3rSEZLXCj99nrAcqR0NdJ0fzrSE1tw=
Subject key identifier:   3B:A8:D1:0C:81:C7:0B:6E:B1:6D:ED:FA:ED:AF:81:C3:2B:AE:2D:F7
Authority key identifier: 1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2
Certificate issuer:       /CN=1ba415d16e72e333f2936c1c5e17df24378108c2
Certificate serial:       0194BCE096BDA1949CCCC5B933274144FC93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft
Manifest number:          02C9
Signing time:             Fri 31 Jan 2025 15:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:22 +0000
Files and hashes:         1: G6QV0W5y4zPyk2wcXhffJDeBCMI.crl (hash: d1ur+JmImTV0PLtx7e3TNlLpHJBBc8aFNpGnmgbuLdo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:96:bd:a1:94:9c:cc:c5:b9:33:27:41:44:fc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba415d16e72e333f2936c1c5e17df24378108c2
        Validity
            Not Before: Jan 31 15:00:22 2025 GMT
            Not After : Feb  1 15:00:22 2025 GMT
        Subject: CN=3ba8d10c81c70b6eb16dedfaedaf81c32bae2df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:df:80:78:42:6c:e5:40:69:58:b6:a1:96:f0:
                    6a:20:86:15:78:ff:b1:0b:93:ac:34:04:39:93:07:
                    ce:d2:8a:34:b7:5a:de:23:53:f9:6a:9a:b8:dc:d1:
                    8c:4e:49:bc:9d:f9:8c:5a:ae:25:e8:6e:9c:cd:72:
                    a6:f0:6e:c7:0c:2e:fd:5b:86:ad:a0:9a:31:fb:44:
                    e8:02:6e:04:03:05:06:2c:cf:b9:d3:e0:72:74:a9:
                    78:bc:1b:fd:35:1e:51:f0:39:5c:82:67:62:8d:9b:
                    1c:5d:52:10:ef:3b:3f:b4:ca:d3:39:ce:e6:05:58:
                    a8:49:57:4a:09:6c:22:9b:5d:bf:c1:41:f8:a0:d5:
                    2b:4f:b8:7f:85:00:b6:d6:65:71:70:f5:a1:e5:9d:
                    db:6d:64:07:1a:2f:0d:a8:fc:c3:4e:f6:11:c6:4a:
                    83:8e:06:79:79:cf:67:e2:fe:e2:16:7b:f0:a1:36:
                    cd:ab:4e:3a:f1:ae:6a:93:14:7e:69:51:03:a8:17:
                    54:0d:6b:a8:ad:0d:09:ae:ff:87:f2:42:5d:8f:e0:
                    70:2d:d9:ce:8a:1f:11:f8:1c:2d:4e:97:d3:f8:6e:
                    95:fe:ab:77:cd:26:d6:84:d1:f6:5f:ad:5b:4c:a3:
                    3a:04:0f:54:ce:4e:b9:fa:90:9e:91:80:ce:b2:01:
                    1c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A8:D1:0C:81:C7:0B:6E:B1:6D:ED:FA:ED:AF:81:C3:2B:AE:2D:F7
            X509v3 Authority Key Identifier:
                keyid:1B:A4:15:D1:6E:72:E3:33:F2:93:6C:1C:5E:17:DF:24:37:81:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6QV0W5y4zPyk2wcXhffJDeBCMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce40b9-35d7-4a6a-8307-6a0b25c5632d/1/G6QV0W5y4zPyk2wcXhffJDeBCMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:99:b2:fa:6c:47:b5:c0:55:3d:8a:dd:c1:bc:99:8a:2d:03:
         ac:ac:36:fa:0c:c3:9d:09:3c:12:f6:5b:48:a1:7e:e2:3a:19:
         56:27:4c:a2:81:ff:8a:d1:d5:3d:f8:b2:fa:b8:f9:54:da:dd:
         92:66:9d:a6:5c:ca:18:7e:45:5e:7c:cd:b8:83:4b:20:60:8e:
         63:03:58:fe:9f:71:0e:0d:25:b8:2e:7e:21:a7:e7:0f:5d:65:
         db:e5:af:d6:15:77:66:8e:2f:81:62:ff:85:05:79:3f:53:76:
         a2:2e:3d:de:79:ec:ff:52:71:e3:e7:8d:f6:25:8c:fa:17:d4:
         ac:35:bc:be:49:8b:09:1e:d6:12:07:63:a5:09:8e:c2:1e:88:
         0b:94:ef:45:76:5a:8d:54:d7:c2:b8:d1:0d:f4:c6:92:c1:3c:
         3f:69:61:a2:85:81:44:3a:79:02:f5:2d:96:96:33:ae:25:1e:
         8d:9a:9c:c6:2a:91:49:2c:fe:95:5d:5a:44:cd:35:f7:84:70:
         11:c6:36:fb:e5:e4:bf:a1:08:95:e5:28:03:26:68:75:7c:d6:
         7d:27:b5:fb:4f:de:5c:78:d8:8c:78:d8:cb:cc:2a:eb:e9:71:
         69:cf:f5:a3:cb:dd:ea:bc:21:07:76:5d:36:12:b6:f7:ca:fc:
         ba:72:6d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:26:08 2025 by rpki-client