Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
File:                     tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft (raw, json)
Hash identifier:          NRgYiA/FmNI9oF4OmRrL8t+Lj7sewYv9hSDQ1SBAocQ=
Subject key identifier:   3C:A8:AF:C8:2C:4C:5D:F9:66:2C:57:D9:FF:ED:62:1D:0A:6C:9D:2B
Authority key identifier: B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34
Certificate issuer:       /CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34
Certificate serial:       0194BBCE29A845A4483A32A7ACFB412045CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 10:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:37 +0000
Files and hashes:         1: tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl (hash: EO1zayTy/pwF75EqI6w+Fqdzb+OkGF9L8zJb7uL9+jQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:29:a8:45:a4:48:3a:32:a7:ac:fb:41:20:45:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34
        Validity
            Not Before: Jan 31 10:00:37 2025 GMT
            Not After : Feb  1 10:00:37 2025 GMT
        Subject: CN=3ca8afc82c4c5df9662c57d9ffed621d0a6c9d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:62:a3:3f:27:7d:61:6b:9e:71:da:7b:9d:1f:
                    80:db:2e:62:c3:c8:3f:2d:47:c7:25:2b:81:3c:30:
                    c8:7c:cf:31:99:01:16:75:0e:f7:da:11:32:e1:a0:
                    88:32:f6:3f:0c:68:db:8f:2f:98:33:5a:47:d3:8e:
                    a8:46:e0:1d:e3:e4:ae:43:26:48:0c:d6:f3:77:03:
                    43:45:b9:e7:63:35:ab:22:3a:e6:ef:34:da:8e:9f:
                    ca:49:a0:4c:e2:c6:da:0b:b6:ca:1c:bc:d2:6f:5e:
                    95:d6:6f:fd:76:b5:b9:a4:68:84:e9:a7:bc:9c:7a:
                    64:d4:ef:86:a5:24:cd:e3:d2:c9:06:74:81:f0:3d:
                    63:81:a8:24:c9:e0:e9:9d:53:15:ac:cd:62:6d:bf:
                    39:51:cd:38:c2:4a:55:9a:71:c7:b2:57:78:62:95:
                    89:10:b6:04:69:c6:9e:09:8e:d3:02:95:8d:4a:d0:
                    ae:83:5c:8a:87:d9:67:d2:a0:de:86:44:4c:36:45:
                    05:f1:ef:5e:cd:8d:53:99:dd:41:71:d6:19:98:59:
                    dd:67:44:38:24:21:62:1b:90:17:9f:68:19:f9:0a:
                    ba:dc:13:59:69:64:ae:2a:fe:e6:58:90:cd:cc:aa:
                    ea:ce:14:d0:91:d0:73:4a:ff:5d:85:57:be:71:58:
                    d0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A8:AF:C8:2C:4C:5D:F9:66:2C:57:D9:FF:ED:62:1D:0A:6C:9D:2B
            X509v3 Authority Key Identifier:
                keyid:B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:11:48:76:3b:fb:7c:4c:6b:ff:39:06:d8:b6:31:df:36:ee:
         55:1e:c3:d0:b5:4c:8d:1a:06:14:cd:8e:a8:5f:7b:38:94:15:
         8f:e1:37:cb:37:3a:58:33:7e:79:81:30:9e:cc:b6:20:01:41:
         9d:02:10:ec:ea:ed:af:8a:12:a3:98:70:e9:35:02:39:e8:8f:
         8c:ba:84:9b:b6:c2:22:7e:5c:8a:af:b2:16:b6:f6:89:ee:55:
         c2:01:5e:df:10:58:36:00:47:9d:50:f5:1b:79:9f:55:38:53:
         83:33:6b:f5:61:f7:3a:17:27:c0:1c:e5:2a:33:40:80:e5:aa:
         44:83:e8:d8:c0:3e:d9:99:a8:1e:2a:3c:d9:31:be:b4:d4:9d:
         fc:ff:d8:42:7b:67:ec:91:6e:ba:3f:a8:5e:fe:fc:93:fb:b2:
         74:89:8c:22:cf:ee:07:52:d2:54:70:0e:2b:14:5c:f9:a6:0b:
         32:41:10:22:05:80:92:20:fa:c3:d4:a5:ea:15:f5:2f:73:cb:
         c6:f2:28:8d:e6:c7:2b:dd:dd:ed:af:d4:98:e4:28:00:95:74:
         a1:f9:6f:e6:e6:ec:d1:fb:7f:cc:4f:3d:54:29:c3:14:2c:66:
         a8:2f:a8:85:92:a7:e5:22:28:98:44:d7:c4:8a:3d:94:74:4d:
         83:60:9a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:58 2025 by rpki-client