Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
File:                     L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft (raw, json)
Hash identifier:          scnaXKqEwBI3587TV7qQDU6MBoUReTXegRRxl/UiabY=
Subject key identifier:   8D:AF:8E:4B:00:5A:D2:9F:35:C6:05:BE:60:3A:F0:3D:E6:91:0C:70
Authority key identifier: 2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46
Certificate issuer:       /CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
Certificate serial:       0194BBCEAB38C4652E54A680669FE213192E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft
Manifest number:          1096
Signing time:             Fri 31 Jan 2025 10:01:11 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:11 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:11 +0000
Files and hashes:         1: L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl (hash: i1RpGsfwBnqma/poKHT55FE0zLUFIJBt9sllzeTnsUw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:ab:38:c4:65:2e:54:a6:80:66:9f:e2:13:19:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fec10d0088b2ddb8a4d1515bf06b4c0012ae046
        Validity
            Not Before: Jan 31 10:01:11 2025 GMT
            Not After : Feb  1 10:01:11 2025 GMT
        Subject: CN=8daf8e4b005ad29f35c605be603af03de6910c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:66:f1:a5:81:0b:de:3c:83:83:32:a7:07:f0:
                    8e:f3:97:e5:5e:97:ed:dc:d5:22:cb:06:d8:fa:c0:
                    a6:84:93:fd:91:f2:76:cb:8a:10:67:09:8b:ab:66:
                    4a:95:9c:5d:36:d3:2d:c2:58:ac:91:a7:03:94:41:
                    df:cd:ed:e6:01:8e:1a:5a:4e:b4:f5:92:01:d8:98:
                    1c:75:0e:a1:f3:5d:bf:b8:bd:1d:0f:54:6e:48:85:
                    24:b8:ac:c3:98:51:fb:c5:ce:7a:3b:d0:40:a5:87:
                    ea:9a:db:2e:55:ac:96:6c:ec:c1:c2:c8:3f:50:18:
                    aa:c0:c1:ba:f5:60:88:76:fb:57:b2:27:41:d2:11:
                    72:d6:4f:65:2c:2f:3b:01:05:7e:04:e0:f8:72:2a:
                    d6:ea:05:7f:6f:76:a4:76:35:ea:46:07:c3:3c:5e:
                    df:f8:e5:b6:02:79:a6:cc:f9:e9:4e:4b:92:92:dd:
                    bb:62:39:67:a0:f2:4e:7a:8a:cc:a7:15:9c:2c:ab:
                    6a:bb:5a:79:23:0f:51:c3:7f:de:cd:53:a6:61:b8:
                    fd:9e:9c:8b:72:5a:03:d2:af:1b:3e:a0:44:c8:10:
                    f9:1c:df:a5:00:0f:56:e8:8a:75:70:4e:93:82:8b:
                    49:6e:13:8f:98:f3:9a:9c:3b:09:85:91:12:63:bf:
                    b4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AF:8E:4B:00:5A:D2:9F:35:C6:05:BE:60:3A:F0:3D:E6:91:0C:70
            X509v3 Authority Key Identifier:
                keyid:2F:EC:10:D0:08:8B:2D:DB:8A:4D:15:15:BF:06:B4:C0:01:2A:E0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-wQ0AiLLduKTRUVvwa0wAEq4EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/51a475-6d6a-4640-92a5-573ccf59e688/1/L-wQ0AiLLduKTRUVvwa0wAEq4EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:38:b0:87:d0:29:24:e2:95:f5:af:27:ba:ff:c7:69:ec:4f:
         c1:51:b0:28:d0:35:a4:f6:5e:19:b8:16:51:d3:22:fc:e0:2b:
         8c:77:9e:8d:e5:72:b9:f5:fd:e7:d5:bc:22:a7:ae:9d:e1:2f:
         08:2b:29:09:a7:fe:e7:cf:b2:c5:fe:72:1d:b0:f5:71:5c:d0:
         48:6d:83:9e:9c:d1:e3:25:cd:4f:b0:12:8b:2f:5d:73:f3:a9:
         5f:90:45:ba:c9:23:5c:0b:5f:12:0d:eb:ac:01:65:fc:8e:57:
         f6:1a:9c:74:53:53:d1:3d:70:93:88:c8:05:ad:bc:20:a5:d9:
         77:d6:90:1e:05:b0:8b:a8:51:35:aa:f9:89:2e:eb:25:fa:54:
         2d:19:f4:b4:c1:3d:10:7f:81:5a:29:50:c6:d2:a1:fe:35:07:
         14:3d:79:eb:41:74:f7:2c:af:51:15:96:5e:09:04:7d:72:f7:
         d5:15:3e:16:aa:8e:56:03:3a:67:35:f8:17:8b:5f:15:60:66:
         30:fb:34:94:85:64:75:4b:76:dd:c4:f7:37:38:18:e2:43:f7:
         dc:c9:65:cb:30:01:82:a7:60:d8:7b:bb:04:c7:6d:69:ef:3d:
         af:73:22:49:ed:07:92:b5:60:df:d3:e7:be:c7:31:49:20:ce:
         a1:a5:dc:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zqs4xGUuVKaAZp/iExkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmZWMxMGQwMDg4YjJkZGI4YTRkMTUxNWJmMDZiNGMwMDEy
YWUwNDYwHhcNMjUwMTMxMTAwMTExWhcNMjUwMjAxMTAwMTExWjAzMTEwLwYDVQQD
Eyg4ZGFmOGU0YjAwNWFkMjlmMzVjNjA1YmU2MDNhZjAzZGU2OTEwYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GbxpYEL3jyDgzKnB/CO85flXpft
3NUiywbY+sCmhJP9kfJ2y4oQZwmLq2ZKlZxdNtMtwliskacDlEHfze3mAY4aWk60
9ZIB2JgcdQ6h812/uL0dD1RuSIUkuKzDmFH7xc56O9BApYfqmtsuVayWbOzBwsg/
UBiqwMG69WCIdvtXsidB0hFy1k9lLC87AQV+BOD4cirW6gV/b3akdjXqRgfDPF7f
+OW2AnmmzPnpTkuSkt27YjlnoPJOeorMpxWcLKtqu1p5Iw9Rw3/ezVOmYbj9npyL
cloD0q8bPqBEyBD5HN+lAA9W6Ip1cE6TgotJbhOPmPOanDsJhZESY7+01QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2vjksAWtKfNcYFvmA68D3mkQxwMB8GA1UdIwQY
MBaAFC/sENAIiy3bik0VFb8GtMABKuBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTC13UTBBaUxMZHVLVFJVVnZ3YTB3QUVxNEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC81MWE0NzUtNmQ2YS00NjQwLTkyYTUt
NTczY2NmNTllNjg4LzEvTC13UTBBaUxMZHVLVFJVVnZ3YTB3QUVxNEVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC81MWE0NzUtNmQ2YS00NjQwLTkyYTUtNTczY2NmNTllNjg4
LzEvTC13UTBBaUxMZHVLVFJVVnZ3YTB3QUVxNEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANziwh9Ap
JOKV9a8nuv/HaexPwVGwKNA1pPZeGbgWUdMi/OArjHeejeVyufX959W8IqeuneEv
CCspCaf+58+yxf5yHbD1cVzQSG2DnpzR4yXNT7ASiy9dc/OpX5BFuskjXAtfEg3r
rAFl/I5X9hqcdFNT0T1wk4jIBa28IKXZd9aQHgWwi6hRNar5iS7rJfpULRn0tME9
EH+BWilQxtKh/jUHFD1560F09yyvURWWXgkEfXL31RU+FqqOVgM6ZzX4F4tfFWBm
MPs0lIVkdUt23cT3NzgY4kP33MllyzABgqdg2Hu7BMdtae89r3MiSe0HkrVg39Pn
vscxSSDOoaXczA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:29 2025 by rpki-client