Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
File:                     COohU1NqgjgJmupmgIAfpEW_qd8.mft (raw, json)
Hash identifier:          PPTDvwMoY16ifptCKT39Lxt3KXiWpt3RlNO8LRbWdik=
Subject key identifier:   5B:58:85:FD:0D:C4:44:C5:77:B4:E8:E9:5B:76:15:81:8C:2D:88:06
Authority key identifier: 08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF
Certificate issuer:       /CN=08ea2153536a8238099aea6680801fa445bfa9df
Certificate serial:       0194BC3C3B482C8F05C756A05E0FB065A12D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft
Manifest number:          1371
Signing time:             Fri 31 Jan 2025 12:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:51 +0000
Files and hashes:         1: COohU1NqgjgJmupmgIAfpEW_qd8.crl (hash: vPAmDig4QmFiuKiyMwLWn6IS4/LRjqJmrDSA1QKtg2I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:3b:48:2c:8f:05:c7:56:a0:5e:0f:b0:65:a1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08ea2153536a8238099aea6680801fa445bfa9df
        Validity
            Not Before: Jan 31 12:00:51 2025 GMT
            Not After : Feb  1 12:00:51 2025 GMT
        Subject: CN=5b5885fd0dc444c577b4e8e95b7615818c2d8806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:ce:7a:c1:57:c5:4a:02:a6:60:3c:2d:a1:
                    c6:57:65:09:0b:f8:a5:a0:ac:ad:08:01:6c:d0:bc:
                    8b:ee:9f:d8:ad:44:04:34:a6:fe:bf:53:68:14:cb:
                    65:2c:83:b7:14:ee:da:2e:a4:d1:c4:e9:97:aa:1e:
                    79:27:20:16:cd:a1:6c:8a:b6:87:38:2e:14:fd:93:
                    64:1f:c5:00:9d:12:1d:4f:d5:96:b0:95:ed:05:4c:
                    cd:72:28:6a:00:94:e9:f8:83:d2:a3:39:ab:bb:59:
                    60:10:48:7a:02:a0:b2:90:51:df:b5:a8:10:46:01:
                    ea:4e:8d:2b:49:03:32:2d:4f:0b:d6:a7:c1:59:d0:
                    33:9e:42:ff:bb:14:41:f7:6e:42:23:9f:08:60:f7:
                    eb:7c:2c:36:5e:fe:03:36:42:bf:83:be:89:c6:d4:
                    6a:79:3c:59:1c:5e:45:0f:12:4c:bd:8b:07:69:60:
                    6c:f0:e9:ca:06:eb:d0:c4:82:02:12:34:63:19:d7:
                    0d:43:c6:99:33:0a:c3:34:27:c3:1d:20:99:e2:7a:
                    9e:4c:b0:7f:3c:a7:89:45:48:cd:22:75:de:13:6a:
                    c1:0a:35:12:93:d4:bd:bb:a8:95:8d:ca:f3:86:72:
                    43:a9:f5:25:6f:f3:45:66:1f:e0:38:81:a6:07:17:
                    1d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:58:85:FD:0D:C4:44:C5:77:B4:E8:E9:5B:76:15:81:8C:2D:88:06
            X509v3 Authority Key Identifier:
                keyid:08:EA:21:53:53:6A:82:38:09:9A:EA:66:80:80:1F:A4:45:BF:A9:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COohU1NqgjgJmupmgIAfpEW_qd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/91f0a6-84f2-4013-b8cb-ae37ba0a1081/1/COohU1NqgjgJmupmgIAfpEW_qd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:da:6a:dd:bf:e5:de:3d:2d:77:ac:cc:97:3a:5f:e9:09:c0:
         34:29:68:8a:fa:48:46:d5:44:5f:da:28:ae:a4:e8:a0:8d:a4:
         38:8e:ad:7d:da:d7:8e:01:78:71:03:84:64:86:5c:8d:b0:71:
         51:f1:d9:70:bf:24:09:7d:85:9b:2e:2f:52:fa:66:dd:19:9b:
         f6:02:a7:d0:16:a3:d6:27:57:76:df:39:2c:59:09:de:15:c9:
         07:f3:a8:a7:cf:0e:ff:28:d2:f6:bb:c2:e1:75:a7:77:39:b7:
         a0:78:f1:e6:8f:70:97:d6:dd:75:43:52:b9:68:d9:74:d7:f0:
         ce:44:25:c7:0c:63:ab:e6:67:c3:fd:f5:bd:41:52:ef:bb:bb:
         b0:a7:b7:fa:e6:53:2d:15:a5:da:e1:2b:73:6f:ac:e3:70:d5:
         c3:0e:ac:6c:61:d2:bf:e2:ae:30:cf:17:a5:85:7d:c9:7c:dd:
         c3:ec:d8:ff:44:aa:cc:3b:d5:e4:f7:bb:32:24:ef:b9:e6:96:
         d8:85:74:41:59:84:74:5d:27:00:35:15:85:59:26:ed:5a:ea:
         9b:0e:4e:36:54:5b:36:9e:0e:cc:6d:bd:a5:f8:44:b7:dd:ce:
         37:ff:81:93:41:26:57:41:48:44:23:4b:55:36:cb:92:12:bd:
         f6:b7:33:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:40 2025 by rpki-client