Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
File:                     U1wJpqvN8dobR6tK8_-O_KWBRF0.mft (raw, json)
Hash identifier:          kEqcnDqPyeBmPL7oxSoR1v47pTgo+gCXJ73Mnv/reyw=
Subject key identifier:   01:1F:1F:0C:79:C3:6A:2A:C2:D9:E9:C7:E2:10:FD:12:14:6F:45:AC
Authority key identifier: 53:5C:09:A6:AB:CD:F1:DA:1B:47:AB:4A:F3:FF:8E:FC:A5:81:44:5D
Certificate issuer:       /CN=535c09a6abcdf1da1b47ab4af3ff8efca581445d
Certificate serial:       0194BBCEC116DC06571F9EAF3B2A917BBE82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft
Manifest number:          038E
Signing time:             Fri 31 Jan 2025 10:01:16 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:16 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:16 +0000
Files and hashes:         1: U1wJpqvN8dobR6tK8_-O_KWBRF0.crl (hash: kazYzG8E34ZGGxYzB8TVMTQtUAtxB3xyfNDQ2oSIDp8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:c1:16:dc:06:57:1f:9e:af:3b:2a:91:7b:be:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535c09a6abcdf1da1b47ab4af3ff8efca581445d
        Validity
            Not Before: Jan 31 10:01:16 2025 GMT
            Not After : Feb  1 10:01:16 2025 GMT
        Subject: CN=011f1f0c79c36a2ac2d9e9c7e210fd12146f45ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:76:4d:ac:ae:a3:a3:da:89:2e:7c:95:5c:1a:
                    04:da:e2:2e:b1:a0:f6:e9:d2:e7:bc:c1:7a:79:48:
                    4b:48:e8:8a:32:04:05:a6:14:8c:19:4b:e6:8b:45:
                    ee:11:50:54:25:7d:41:77:d5:2c:5e:79:97:53:f8:
                    a2:8f:45:d0:b4:61:af:e1:81:88:29:c0:04:92:ce:
                    9b:7d:23:50:74:f5:a3:63:78:a1:69:2d:5d:3e:4d:
                    37:76:c7:d2:b2:b6:81:cf:bc:0b:00:6a:c7:ea:d1:
                    37:8b:24:1c:6f:16:8c:f4:25:93:62:65:7d:f5:b5:
                    3b:fc:9d:41:0f:f7:b5:7c:38:ac:1b:2c:c9:f3:1e:
                    ab:13:5e:75:ed:af:e2:8d:83:34:b1:d2:1c:93:43:
                    8b:04:c7:1a:c7:14:97:01:2e:e5:8f:22:5f:c3:b7:
                    1f:4f:fc:42:a9:98:1b:0e:5f:62:c1:90:6c:69:00:
                    0e:1d:35:78:d9:72:1b:d6:45:50:77:28:b0:38:ac:
                    3a:6e:5b:ca:b8:1c:42:c5:33:15:84:93:dc:e4:a7:
                    9c:8d:9a:97:e1:ad:e1:7e:02:f4:51:8b:93:9f:bf:
                    e6:73:ef:a6:6a:0e:dd:b0:38:1b:e0:63:ec:dd:b8:
                    12:6f:b7:d0:a7:ed:e6:35:5a:3d:b0:b9:33:c6:4b:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1F:1F:0C:79:C3:6A:2A:C2:D9:E9:C7:E2:10:FD:12:14:6F:45:AC
            X509v3 Authority Key Identifier:
                keyid:53:5C:09:A6:AB:CD:F1:DA:1B:47:AB:4A:F3:FF:8E:FC:A5:81:44:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1wJpqvN8dobR6tK8_-O_KWBRF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/63622f-b464-407d-bcfd-c9491b4dfd76/1/U1wJpqvN8dobR6tK8_-O_KWBRF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c0:8a:9a:a6:dc:58:cd:ab:b8:a3:ae:c3:a5:9b:12:a0:9f:
         1a:34:e0:04:60:2d:ca:d4:e6:72:d7:86:66:bf:5e:1b:5d:c6:
         45:7a:de:5b:7c:ed:18:88:a1:23:ec:8e:49:ba:68:71:d4:8e:
         dc:45:b1:a5:0b:2e:63:c4:29:c3:71:0c:eb:33:bd:a7:ba:34:
         82:3f:e9:63:1b:d0:94:a0:40:55:a5:b4:a5:4c:7d:62:ed:95:
         27:a1:5c:ba:1e:93:a3:9a:64:01:21:da:69:ab:17:d4:97:c6:
         8d:b8:5d:4a:62:cd:31:24:ac:1e:1e:2d:46:f9:eb:33:9b:10:
         82:ba:46:15:59:34:1b:7d:bb:df:41:5c:13:5f:25:64:60:03:
         55:7a:ca:ad:0f:ac:ea:30:ba:af:f6:cb:d4:a7:a8:f7:2f:73:
         3d:5e:51:1c:49:d6:28:53:46:ff:72:1e:74:3f:55:3d:f7:91:
         63:51:2c:ce:d4:74:bf:c9:96:0e:d3:8f:22:b1:25:91:93:da:
         79:70:4c:9a:cb:24:bd:33:3d:a8:21:4e:1e:03:e4:61:d6:d3:
         2c:71:fb:30:2b:74:6e:2c:97:1c:39:fe:19:57:8a:df:4f:ff:
         0f:4a:a4:82:4e:3a:33:07:a3:85:fe:df:d6:12:90:2c:99:6d:
         fc:48:77:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:47 2025 by rpki-client