Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
File:                     f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft (raw, json)
Hash identifier:          eoUxik8DAojgJutBpeI/gAml0TRmcChYqZM8lDSQenw=
Subject key identifier:   39:E5:FC:FB:48:63:CF:6C:27:93:1F:51:03:55:96:04:14:07:CC:07
Authority key identifier: 7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20
Certificate issuer:       /CN=7fefebd15fbc651487acaf67424f4783d43eb420
Certificate serial:       0194BBCEB85FE0E5014CF3BBFE03F70C1F4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft
Manifest number:          1425
Signing time:             Fri 31 Jan 2025 10:01:14 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:14 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:14 +0000
Files and hashes:         1: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl (hash: F+llSdstO5uPYHl3dwxcf5lGJ1GiQGXC489Ytny2SYE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:b8:5f:e0:e5:01:4c:f3:bb:fe:03:f7:0c:1f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fefebd15fbc651487acaf67424f4783d43eb420
        Validity
            Not Before: Jan 31 10:01:14 2025 GMT
            Not After : Feb  1 10:01:14 2025 GMT
        Subject: CN=39e5fcfb4863cf6c27931f51035596041407cc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c2:4a:38:d1:68:b9:f8:3f:00:c1:73:9a:08:
                    85:3d:c6:b7:27:02:2e:ca:25:7e:d2:7d:52:23:e6:
                    ee:06:dd:87:25:81:6d:20:7b:48:01:c1:1b:89:e0:
                    31:92:30:5d:5c:00:39:16:95:5b:ca:98:17:dc:9e:
                    35:c5:40:90:b2:42:e6:ad:d8:26:b8:a1:61:a5:25:
                    50:ad:4d:e6:e6:b9:8d:b5:c3:e5:99:56:cc:45:37:
                    ef:1d:1d:2d:37:f9:4d:8d:d7:ea:02:1d:62:d4:6c:
                    37:92:e5:85:e9:c4:f0:9d:f2:9b:57:b9:a7:52:88:
                    8d:d9:d7:fe:6f:ca:a8:32:45:77:1a:de:13:9d:60:
                    92:c1:ba:bb:c6:9c:64:c3:12:06:61:20:05:e7:3a:
                    24:fd:b5:a1:46:cf:fd:bd:2c:df:dc:0a:97:b3:d1:
                    5d:93:d0:39:34:a7:c7:49:27:9e:b9:57:5d:59:56:
                    2f:b3:39:38:0a:dd:24:b7:b3:c1:0b:dd:71:0b:0f:
                    f4:8e:a1:10:5f:33:b9:08:76:0e:74:23:d9:7b:d8:
                    81:c4:3a:1a:5e:c2:9c:93:65:5f:55:9d:0e:54:af:
                    f7:69:1e:63:a1:82:77:ba:de:98:01:70:84:46:47:
                    a6:6d:bf:24:97:bb:a9:17:21:64:4c:b5:46:21:de:
                    d3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E5:FC:FB:48:63:CF:6C:27:93:1F:51:03:55:96:04:14:07:CC:07
            X509v3 Authority Key Identifier:
                keyid:7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:00:f8:f7:bb:92:53:42:e5:bd:0c:a4:b2:39:ad:f8:79:5d:
         cf:98:b5:2f:77:be:28:f3:ae:08:76:9d:2f:03:67:cf:48:a4:
         4a:64:d6:e6:8f:cf:0d:4a:9a:8d:ae:6f:23:d4:9f:9d:00:48:
         c2:f7:f3:99:3d:e2:1e:52:e8:0a:a0:33:b5:31:9d:09:eb:a8:
         26:b2:80:d3:7a:28:c5:ad:9b:24:a4:e7:dc:87:5e:7c:cd:7f:
         02:3a:10:45:c6:9e:1f:e8:15:1a:62:b2:db:1f:c4:10:b1:88:
         cd:e3:8a:64:ad:57:52:58:1a:4e:59:5a:63:79:53:3e:04:51:
         99:9b:6c:34:6a:42:f6:1b:a4:12:59:73:93:6c:ee:a3:92:31:
         f6:0a:3c:0f:2d:8e:dd:ff:c4:b9:2d:93:e9:70:ed:ff:ea:24:
         9a:d0:f1:62:39:db:a6:8b:1c:da:7f:b6:00:26:e9:f5:d3:61:
         13:58:40:e6:d7:da:9e:f9:ea:33:d9:8b:8a:8c:6e:ee:0c:dd:
         2d:c3:2a:d8:34:24:fc:ac:be:f9:03:80:63:ad:0a:10:06:5a:
         f8:44:69:b7:05:44:03:4d:28:4e:52:ea:e7:f7:92:58:02:b2:
         05:6b:71:3b:da:b7:81:4e:74:d5:86:18:4b:02:61:c4:b4:77:
         ca:38:d3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:28 2025 by rpki-client