Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.mft
File:                     i90UJnygnMoHmH6ySP91hWkRpHQ.mft (raw, json)
Hash identifier:          yo2tNtFDP2AQazSTQ8dNa0w9Ti+YFw0QOqndAl6lUYo=
Subject key identifier:   69:E5:A4:12:EE:DF:CE:17:06:D5:32:50:E4:93:20:0E:AB:AF:AF:F8
Authority key identifier: 8B:DD:14:26:7C:A0:9C:CA:07:98:7E:B2:48:FF:75:85:69:11:A4:74
Certificate issuer:       /CN=8bdd14267ca09cca07987eb248ff75856911a474
Certificate serial:       0194BCAA07D5185A01753F315409AFF466F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i90UJnygnMoHmH6ySP91hWkRpHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.mft
Manifest number:          07FE
Signing time:             Fri 31 Jan 2025 14:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:47 +0000
Files and hashes:         1: i90UJnygnMoHmH6ySP91hWkRpHQ.crl (hash: mdFaBT5ppHMe7+Cvib0Kn4hjn6Yu7eT21wETOF7J3c8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:07:d5:18:5a:01:75:3f:31:54:09:af:f4:66:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdd14267ca09cca07987eb248ff75856911a474
        Validity
            Not Before: Jan 31 14:00:47 2025 GMT
            Not After : Feb  1 14:00:47 2025 GMT
        Subject: CN=69e5a412eedfce1706d53250e493200eabafaff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b2:62:1c:f3:69:e7:be:57:71:7b:3d:65:f7:
                    a4:d1:ea:01:a4:c2:d9:57:9e:0b:30:ca:83:6c:77:
                    8a:ec:d6:7d:10:d7:27:0f:aa:7e:4f:99:70:79:c4:
                    a4:ac:be:a4:ee:26:23:cd:07:31:1c:00:ce:64:35:
                    0a:8d:8e:0c:04:68:8d:5f:76:bd:8b:15:73:3f:51:
                    d7:e2:8f:1d:ef:7f:25:69:48:8c:77:f1:db:3a:a6:
                    f7:69:e7:5e:bc:b2:18:7c:7c:e5:cf:69:d6:86:b6:
                    b1:37:8c:51:14:bd:cd:b9:cc:65:56:44:59:a6:78:
                    4d:c7:a0:70:ad:ab:ab:f5:fc:36:fc:0b:98:f3:bd:
                    3a:3c:8c:39:6e:0c:82:60:25:05:bc:b8:b6:d1:a6:
                    6c:61:81:2d:3b:d0:60:29:57:87:1c:50:06:3c:ed:
                    06:15:f4:13:da:52:94:d0:37:9c:ab:e2:2b:b6:36:
                    0a:a9:9e:7b:9d:15:22:36:81:96:7e:df:f4:ad:5f:
                    12:77:94:4d:fb:3e:b0:a8:e2:6c:52:ce:c1:24:06:
                    1d:14:ec:a6:9b:9a:14:c2:9e:a6:cf:0b:07:9e:1e:
                    16:0a:36:ea:d4:18:e8:87:b7:ba:07:15:11:2c:b0:
                    1a:45:7c:f5:02:21:f3:6a:5d:68:a6:21:e8:8f:71:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E5:A4:12:EE:DF:CE:17:06:D5:32:50:E4:93:20:0E:AB:AF:AF:F8
            X509v3 Authority Key Identifier:
                keyid:8B:DD:14:26:7C:A0:9C:CA:07:98:7E:B2:48:FF:75:85:69:11:A4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90UJnygnMoHmH6ySP91hWkRpHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/3c1fed-4546-4bff-80d1-99c741a3a312/1/i90UJnygnMoHmH6ySP91hWkRpHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:73:69:1b:fb:c9:22:80:6e:46:99:59:5b:9d:de:99:be:4e:
         e5:9c:39:0f:b9:e3:08:ee:af:46:04:5f:23:e0:f8:f0:2d:17:
         b2:d1:17:d0:f0:62:18:4c:7a:53:cf:21:e2:1c:cc:20:4e:36:
         f7:23:5a:e6:1b:e0:2c:5d:dd:e0:91:8a:84:0b:2a:02:4c:e4:
         fc:9d:cd:5d:3b:f9:85:75:f8:56:33:03:3e:46:42:1d:2e:c2:
         5e:8d:74:12:ae:a8:5e:db:74:de:52:80:8d:b0:72:e8:9c:ae:
         60:15:49:30:21:81:25:e5:94:63:04:95:b7:f2:7f:c0:97:9e:
         05:9d:df:44:7c:23:a6:56:ec:4c:f9:15:87:57:cc:de:13:d6:
         f3:b7:d0:e5:a8:2a:55:0a:f7:b3:ee:7c:58:42:14:29:88:86:
         29:ba:ec:55:ce:46:13:7e:cf:0a:89:09:ab:b3:b1:84:8d:87:
         7e:9b:77:0d:d5:b8:16:80:bf:87:d1:26:b7:8b:06:4c:d4:3b:
         a4:e8:48:23:8b:b8:7e:58:1a:72:c3:50:69:91:3d:06:a5:ba:
         0a:75:b5:65:d8:43:ac:16:f3:26:21:e7:97:2b:81:8e:a2:63:
         f1:72:d0:83:bc:19:7e:16:53:30:f0:26:20:7a:88:cd:e1:d8:
         c0:2e:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:29 2025 by rpki-client