Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
File:                     CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json)
Hash identifier:          Y/McAzDthJ5Wz5NZ4HR3C8rFQeo7t2YgXcmHyTuqB5I=
Subject key identifier:   DE:52:65:07:E3:B1:DE:49:BA:37:1A:BA:20:4C:0E:D0:31:BA:64:DD
Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
Certificate issuer:       /CN=0979f537b09ebeaddf9878749d1f88753c540c75
Certificate serial:       0194BCAA26F1FCA8F4FBE17FD58F6DCF1CAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 14:00:55 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:55 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:55 +0000
Files and hashes:         1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: Mjq7A9SGNcINImYB2j44+yah+QQGd1Lx4+3JX3Rvgdc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:26:f1:fc:a8:f4:fb:e1:7f:d5:8f:6d:cf:1c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75
        Validity
            Not Before: Jan 31 14:00:55 2025 GMT
            Not After : Feb  1 14:00:55 2025 GMT
        Subject: CN=de526507e3b1de49ba371aba204c0ed031ba64dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4d:0f:50:03:a3:97:fd:3d:d6:22:27:b5:55:
                    cd:d4:fc:80:b4:44:bb:23:ba:c9:24:9a:42:13:5c:
                    83:26:47:ee:83:14:df:59:94:8a:db:30:15:bc:39:
                    ae:52:ab:50:06:c1:57:38:a9:f6:40:bc:b9:22:54:
                    16:d3:45:5f:f4:29:d8:49:de:06:37:48:7a:e1:44:
                    b0:15:9b:7f:ff:9f:04:6c:81:9d:51:2f:da:f2:20:
                    52:8d:05:77:0a:9d:2a:65:21:99:e3:5b:d9:ba:cc:
                    d1:7b:63:5e:e1:65:80:8d:bf:dd:cb:28:f8:6a:8b:
                    6d:cc:3f:c9:73:ab:61:ea:69:71:f1:ed:27:da:4d:
                    ee:ac:32:50:7b:7c:f6:1c:e3:ee:fd:04:ce:ad:f0:
                    a6:7f:6a:bb:52:df:43:87:89:4c:d8:c4:ab:77:46:
                    21:f2:d8:86:4e:12:60:b3:90:78:40:cb:45:35:f4:
                    42:13:ec:c7:af:d4:f7:c8:b1:03:4f:12:98:de:3e:
                    1c:46:f5:76:e7:f9:fd:50:b9:e0:1c:73:6a:bc:de:
                    66:29:38:c9:ef:fa:1f:9a:d8:e9:3e:20:e7:4a:9c:
                    24:45:e6:c1:70:0d:4b:f2:9c:c1:ac:25:36:9e:40:
                    27:7d:7f:8d:49:2b:1d:50:f0:fd:ba:25:bf:5c:1f:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:52:65:07:E3:B1:DE:49:BA:37:1A:BA:20:4C:0E:D0:31:BA:64:DD
            X509v3 Authority Key Identifier:
                keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d3:5e:e9:55:97:5e:f8:bd:6b:e2:3f:15:50:6d:31:e6:33:
         73:ce:7d:f9:65:20:e1:51:5c:82:00:54:81:55:bb:27:b0:fa:
         3a:49:36:ed:ad:78:18:8c:24:5d:eb:67:33:9d:f8:80:89:9e:
         f2:be:a1:0c:41:9d:fd:d2:fa:42:e2:27:47:7d:c0:f8:73:8e:
         7f:4d:ee:78:36:80:7b:e2:fc:e6:31:d8:ed:15:75:6b:57:2b:
         a5:f5:5d:a9:e3:50:de:1f:46:11:4b:01:fe:3c:c5:8b:44:0f:
         7a:40:da:d8:9c:ee:43:c8:09:6d:75:25:c8:0a:cc:3f:a6:98:
         54:35:60:be:ec:cc:42:83:c0:bf:a7:36:2b:13:d8:6e:ca:70:
         fe:bc:f5:1b:86:d2:a1:3f:a3:32:59:d4:69:69:af:eb:c0:ab:
         be:16:a8:e7:58:13:f2:8a:dd:6e:51:31:63:87:da:f0:fd:71:
         52:90:cb:7c:f9:cb:2b:70:ce:5b:75:97:f6:51:9d:ce:4c:04:
         c3:07:19:93:06:43:97:71:ca:ee:56:20:64:51:1b:02:30:05:
         8d:52:a1:9b:d9:36:14:5e:f3:72:c0:f5:b6:06:8c:c3:4a:b7:
         af:ec:38:17:0f:ce:a2:63:ef:ba:a9:d0:f5:4a:b1:91:7a:3c:
         03:3a:d7:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qibx/Kj0++F/1Y9tzxyrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NzlmNTM3YjA5ZWJlYWRkZjk4Nzg3NDlkMWY4ODc1M2M1
NDBjNzUwHhcNMjUwMTMxMTQwMDU1WhcNMjUwMjAxMTQwMDU1WjAzMTEwLwYDVQQD
EyhkZTUyNjUwN2UzYjFkZTQ5YmEzNzFhYmEyMDRjMGVkMDMxYmE2NGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk0PUAOjl/091iIntVXN1PyAtES7
I7rJJJpCE1yDJkfugxTfWZSK2zAVvDmuUqtQBsFXOKn2QLy5IlQW00Vf9CnYSd4G
N0h64USwFZt//58EbIGdUS/a8iBSjQV3Cp0qZSGZ41vZuszRe2Ne4WWAjb/dyyj4
aottzD/Jc6th6mlx8e0n2k3urDJQe3z2HOPu/QTOrfCmf2q7Ut9Dh4lM2MSrd0Yh
8tiGThJgs5B4QMtFNfRCE+zHr9T3yLEDTxKY3j4cRvV25/n9ULngHHNqvN5mKTjJ
7/ofmtjpPiDnSpwkRebBcA1L8pzBrCU2nkAnfX+NSSsdUPD9uiW/XB9ZnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5SZQfjsd5JujcauiBMDtAxumTdMB8GA1UdIwQY
MBaAFAl59Tewnr6t35h4dJ0fiHU8VAx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1huMU43Q2V2cTNmbUhoMG5SLUlkVHhVREhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83ZDhhMWEtMDk1ZS00MTg2LTk1ZTAt
MDgyYjY4YjJjMDJhLzEvQ1huMU43Q2V2cTNmbUhoMG5SLUlkVHhVREhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS83ZDhhMWEtMDk1ZS00MTg2LTk1ZTAtMDgyYjY4YjJjMDJh
LzEvQ1huMU43Q2V2cTNmbUhoMG5SLUlkVHhVREhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNNe6VWX
Xvi9a+I/FVBtMeYzc859+WUg4VFcggBUgVW7J7D6Okk27a14GIwkXetnM534gIme
8r6hDEGd/dL6QuInR33A+HOOf03ueDaAe+L85jHY7RV1a1crpfVdqeNQ3h9GEUsB
/jzFi0QPekDa2JzuQ8gJbXUlyArMP6aYVDVgvuzMQoPAv6c2KxPYbspw/rz1G4bS
oT+jMlnUaWmv68Crvhao51gT8ordblExY4fa8P1xUpDLfPnLK3DOW3WX9lGdzkwE
wwcZkwZDl3HK7lYgZFEbAjAFjVKhm9k2FF7zcsD1tgaMw0q3r+w4Fw/OomPvuqnQ
9UqxkXo8AzrXXg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:24 2025 by rpki-client