Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
File:                     15dPQ3RodlWDV_H7kcOFKlg6FFM.mft (raw, json)
Hash identifier:          oqHhuGIYZwnBRnZVLf8MBGMrZwRzomnBz6d7pSQJws0=
Subject key identifier:   51:12:4C:C8:6E:23:1E:76:B2:60:A4:2E:41:BC:58:25:15:78:C1:0D
Authority key identifier: D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53
Certificate issuer:       /CN=d7974f43746876558357f1fb91c3852a583a1453
Certificate serial:       0194BBCEC9B6B5EB6738A3343B8A3684E280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
Manifest number:          07DB
Signing time:             Fri 31 Jan 2025 10:01:18 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:18 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:18 +0000
Files and hashes:         1: 15dPQ3RodlWDV_H7kcOFKlg6FFM.crl (hash: ReqppOut9VlhEB+Z3iEEj1qzQoL2nzKqQk89dbYLTls=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:c9:b6:b5:eb:67:38:a3:34:3b:8a:36:84:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7974f43746876558357f1fb91c3852a583a1453
        Validity
            Not Before: Jan 31 10:01:18 2025 GMT
            Not After : Feb  1 10:01:18 2025 GMT
        Subject: CN=51124cc86e231e76b260a42e41bc58251578c10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:c0:cf:24:78:44:d4:69:9d:8a:4d:86:50:
                    16:e6:0a:48:4a:35:c3:d2:b2:0c:32:5a:6d:7e:c7:
                    4f:3e:64:ec:58:52:7b:19:27:d0:92:b4:c8:58:77:
                    2f:a2:24:66:80:ad:c9:b6:7c:2f:39:f4:60:62:fe:
                    94:22:72:54:17:6b:52:80:e6:c0:3c:b6:5a:80:e3:
                    c6:d2:4b:db:92:8e:3b:36:9c:01:c9:c4:18:f4:70:
                    1b:e2:ac:f6:c6:93:3b:3b:c2:70:b7:06:33:ad:66:
                    71:b3:16:51:c5:05:65:25:04:ab:a8:12:14:8e:4b:
                    24:2b:b0:e9:4c:3a:e0:15:4e:6f:10:5a:8c:41:5c:
                    5f:e1:74:88:84:5b:b1:c6:d6:fc:c1:56:e4:c9:e2:
                    01:bc:b3:dd:57:1c:40:30:d3:fc:63:d7:ea:b0:26:
                    d7:42:9f:ef:4c:0d:dc:a5:b9:ac:ab:a4:15:46:14:
                    6e:ac:9a:06:9f:e6:a1:b7:d6:fc:92:7d:b2:cf:c2:
                    df:42:65:99:8b:a9:99:42:56:9f:af:a8:d7:94:ef:
                    af:4b:5b:b1:60:17:f0:5a:99:1f:a9:d2:9a:53:0b:
                    d4:f9:7b:e6:ac:97:4d:97:e3:51:d9:f8:39:80:93:
                    a7:ec:9f:30:4e:d7:21:db:36:34:5b:98:7d:a2:2a:
                    4b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:12:4C:C8:6E:23:1E:76:B2:60:A4:2E:41:BC:58:25:15:78:C1:0D
            X509v3 Authority Key Identifier:
                keyid:D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d4:af:d3:1f:80:3f:50:45:45:a2:e7:9c:43:7a:47:99:11:
         1a:bb:f9:27:f3:10:47:c8:c8:68:a6:21:32:73:f4:f1:7c:8b:
         5c:ae:07:78:5d:ff:77:58:b2:7e:37:ee:56:d0:d2:44:b1:c8:
         c4:1b:3c:a1:2b:4b:b5:28:e6:1d:68:bf:e9:db:45:a6:31:19:
         e7:36:85:10:72:3d:77:ce:a9:5a:1b:44:97:69:3d:09:63:fb:
         1d:e9:cd:f9:25:6e:41:42:c2:2b:db:bb:13:d1:ba:c9:20:47:
         a3:69:12:1e:16:ec:bd:c2:cc:99:b0:ff:42:e8:c3:f1:79:64:
         87:c9:6d:8e:b0:b5:ee:8b:28:e5:ee:67:b2:5c:1b:eb:a5:77:
         82:0b:2d:23:79:04:c5:9e:ee:95:8a:6a:70:13:3d:c9:54:6a:
         74:44:27:6d:10:82:37:8c:d9:e0:07:b7:fc:15:68:0a:88:3e:
         36:a8:73:c4:1b:b2:70:87:1e:13:34:14:f5:62:3e:25:5b:2b:
         93:7c:1c:3f:93:30:4c:84:e8:f3:29:3d:02:3f:25:0a:f5:ce:
         f6:9c:74:2f:a3:03:af:74:ce:c9:b0:99:ea:af:87:91:32:e0:
         a7:3e:b7:51:cf:fa:cb:d4:3b:a7:53:e0:75:ef:0c:cb:57:bb:
         ff:73:1c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:33 2025 by rpki-client