Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
File:                     FAyGl-PS6UuFRiU9zyZJymAGKmg.mft (raw, json)
Hash identifier:          lvKLc5872UY47c24gfZGqoj98tsabo3FbacQYTpyWEk=
Subject key identifier:   EE:F9:D7:8E:E3:67:96:E4:41:65:AA:03:AE:A5:51:A0:FD:80:2E:41
Authority key identifier: 14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
Certificate issuer:       /CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Certificate serial:       0194BD17BF36E04765031851EEDA0D2C5863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 16:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:37 +0000
Files and hashes:         1: FAyGl-PS6UuFRiU9zyZJymAGKmg.crl (hash: o+IWBtumbnAn4LMHuOVe9umX9CMMcXxyINbeiJM65GE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:bf:36:e0:47:65:03:18:51:ee:da:0d:2c:58:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140c8697e3d2e94b8546253dcf2649ca60062a68
        Validity
            Not Before: Jan 31 16:00:37 2025 GMT
            Not After : Feb  1 16:00:37 2025 GMT
        Subject: CN=eef9d78ee36796e44165aa03aea551a0fd802e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:61:06:29:29:d6:79:30:ef:67:9c:07:4c:
                    38:f7:54:c9:8b:fb:1e:ba:e0:88:18:ef:28:41:bb:
                    fe:b0:27:35:eb:5d:c4:29:97:41:95:e7:3c:e6:f3:
                    03:07:a3:a0:0a:49:18:a0:e3:f6:dc:fd:ba:0e:39:
                    77:11:60:00:76:5d:3f:32:23:71:ea:b8:cc:53:d6:
                    05:75:42:cf:24:49:89:9f:8f:2f:82:35:81:0a:40:
                    c4:a7:7b:6f:17:eb:ec:43:1a:ff:28:d4:0e:86:c4:
                    b2:52:90:81:d3:35:a6:ec:e0:9b:5a:40:d7:cb:76:
                    04:55:aa:06:e2:79:f4:23:10:37:62:2c:b6:4c:1f:
                    30:e5:11:8c:9a:7d:60:bf:16:aa:9a:25:4f:1c:9e:
                    ce:8e:e3:d0:81:d6:d8:a1:e1:1e:0f:14:4a:d9:a4:
                    06:96:d2:8e:b4:13:7d:d2:49:3e:a5:42:a7:11:75:
                    72:0d:6c:82:d8:84:a8:03:a6:ed:02:72:47:39:df:
                    5f:cf:eb:3e:f5:b5:3a:fb:c9:d0:6f:3b:96:41:9f:
                    4a:85:c2:29:7a:5d:3e:19:67:af:48:22:33:c7:5f:
                    90:0d:f9:57:10:e9:07:55:b8:5a:4c:1d:11:54:af:
                    d7:8f:06:1a:81:e1:c2:14:cd:cd:f5:62:c5:74:fe:
                    1d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F9:D7:8E:E3:67:96:E4:41:65:AA:03:AE:A5:51:A0:FD:80:2E:41
            X509v3 Authority Key Identifier:
                keyid:14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a1:23:b1:e9:c4:e2:be:72:0c:a1:c8:24:ad:89:c8:59:df:
         7c:eb:34:55:27:a1:07:85:37:07:cc:67:bf:63:0f:b1:6b:ec:
         77:7f:4b:fb:9b:eb:8e:20:9c:c8:15:11:62:ae:aa:b8:e6:15:
         6e:7b:de:c1:be:75:4c:d5:08:f7:be:1c:c4:5c:5f:0e:3b:85:
         74:08:0b:22:b9:c6:d6:0e:e3:62:40:2e:3f:99:de:94:b5:14:
         e2:b7:92:77:52:7b:c0:f0:4d:ad:f1:83:1a:82:86:01:53:67:
         c1:56:d8:14:92:98:92:76:ac:ec:3c:0e:a2:8c:28:2b:51:4c:
         54:c7:71:75:a7:d1:c3:f6:6c:15:ea:b4:df:bf:69:40:4b:38:
         1a:6b:49:c2:96:6e:67:46:4c:76:16:ce:d8:39:42:c1:63:b2:
         4a:9a:c0:1c:30:cf:ba:c6:38:fd:2a:26:8e:a4:89:d8:2c:e9:
         18:58:d0:92:4d:94:ee:a6:a4:ef:b9:28:29:2e:e8:37:30:e2:
         d9:6c:0f:1e:01:23:5d:98:43:97:1a:95:2d:de:a1:7c:f5:e8:
         d4:77:13:6b:29:64:ef:d1:ab:2c:63:69:87:a0:e0:5c:90:76:
         20:e5:a4:95:14:93:c9:29:f5:40:08:6d:77:48:1c:3a:10:60:
         92:42:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:27 2025 by rpki-client