Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
File:                     ORvm1CiPvt6_hkKmoeOXeupfHzU.mft (raw, json)
Hash identifier:          uU7uvXRz93O3K7c8uBa1rUrOMEyXu9YstXmci7TXOSw=
Subject key identifier:   5C:05:7E:5A:61:AD:99:22:0D:B4:69:48:16:2D:C4:9C:3F:B3:8D:BB
Authority key identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35
Certificate issuer:       /CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
Certificate serial:       0194BD179A76C6E2B7875A8143AEB813FB14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft
Manifest number:          0BA6
Signing time:             Fri 31 Jan 2025 16:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:28 +0000
Files and hashes:         1: ORvm1CiPvt6_hkKmoeOXeupfHzU.crl (hash: ShGsWloil1ejkDrI1HhKJ2sfCx02xFbgHdLd3HIHd8Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:9a:76:c6:e2:b7:87:5a:81:43:ae:b8:13:fb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35
        Validity
            Not Before: Jan 31 16:00:28 2025 GMT
            Not After : Feb  1 16:00:28 2025 GMT
        Subject: CN=5c057e5a61ad99220db46948162dc49c3fb38dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:0b:6a:43:f9:b3:c1:7e:99:d5:91:7a:ca:
                    3c:db:c1:04:fb:7a:8a:29:7f:20:23:08:47:89:9a:
                    8b:6e:b6:57:f7:da:25:76:12:88:48:58:6f:38:bf:
                    24:9f:6e:f2:a9:70:de:41:68:59:90:f4:c1:c4:d3:
                    00:fe:d7:c3:9c:e3:84:34:39:78:72:05:b1:d9:fc:
                    03:7f:02:d9:30:68:2c:54:50:8d:a4:e2:6c:8c:53:
                    b9:ba:8f:3a:d4:b8:f7:21:7f:5a:b7:af:af:f0:6f:
                    e0:0b:ba:ad:f1:9d:bb:a0:d9:8c:62:6e:ef:e8:bb:
                    3c:71:39:7b:a5:db:eb:f7:15:d1:93:6e:b5:f0:15:
                    13:46:0d:2e:7e:60:f3:3f:68:5b:39:0d:0b:f1:c7:
                    ea:12:55:14:29:38:57:a0:4b:b7:46:cf:2a:90:80:
                    5a:e6:68:67:3e:92:cf:73:51:c5:04:5a:6d:22:10:
                    20:f0:e3:29:aa:7d:e7:8d:da:4b:7d:18:97:24:f2:
                    dc:46:ac:a3:71:08:3a:5e:1f:16:70:7b:df:0c:51:
                    a8:28:a1:af:11:55:e4:55:8c:08:af:d8:cd:38:35:
                    2d:7e:e0:a2:87:29:2c:56:fc:1b:51:ac:a1:8b:29:
                    db:bd:c7:42:a2:a5:d8:b8:a0:03:96:a4:df:ca:78:
                    e2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:05:7E:5A:61:AD:99:22:0D:B4:69:48:16:2D:C4:9C:3F:B3:8D:BB
            X509v3 Authority Key Identifier:
                keyid:39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:72:dc:c9:88:9d:55:8a:ac:d5:ec:15:fb:af:ac:ef:89:68:
         54:85:09:2e:96:b5:49:2f:63:44:2b:50:e2:3b:b8:76:62:00:
         c1:68:a5:be:17:5e:39:6c:f5:57:b7:65:9d:1e:0b:af:68:d7:
         91:46:b8:b8:fd:af:d4:fa:ba:3d:89:1c:3e:22:77:d3:a1:36:
         6d:81:69:99:e6:35:16:06:79:7f:19:e0:80:79:e5:12:97:35:
         c6:d3:14:17:68:fb:1e:8b:51:23:10:d7:eb:75:13:53:12:7d:
         06:2b:e1:f9:bd:d0:f0:f2:63:6a:cb:84:4e:2f:b8:fd:f7:ad:
         29:f6:54:86:c4:5d:17:2f:7e:99:68:11:e3:61:82:e5:9e:3d:
         e4:f1:b9:3a:b8:b0:2c:4c:aa:df:e4:b8:25:91:c3:b6:d3:c3:
         3b:8d:0a:ab:88:a3:16:8d:c0:a1:f7:ac:69:ab:1b:82:5b:9d:
         9c:40:54:35:4a:0a:dd:20:4a:d0:77:e4:75:6b:7a:69:af:7b:
         e2:5d:d2:54:dd:e6:1a:12:73:a3:4d:cf:93:13:1d:02:1b:68:
         a9:62:17:a2:44:55:5d:03:48:a2:f3:e2:01:40:53:44:17:70:
         5d:6b:3f:41:0d:14:a5:e3:2e:2d:da:e5:0b:93:97:08:b8:cf:
         8f:61:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:22 2025 by rpki-client