Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
File:                     a4T-xJBquJAgoRa2hEbM6vbMUA8.mft (raw, json)
Hash identifier:          2g9sA8/aQEzcSXQIInJvxs4vrQLBQEc3r8FB+lD6uFQ=
Subject key identifier:   83:CA:05:AE:DE:49:04:89:16:FC:98:8B:98:AF:71:3F:E6:E7:C8:46
Authority key identifier: 6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
Certificate issuer:       /CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Certificate serial:       0194BC3C299DAABCAC2C24DD6B8DB0C2E15F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
Manifest number:          09B2
Signing time:             Fri 31 Jan 2025 12:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:46 +0000
Files and hashes:         1: a4T-xJBquJAgoRa2hEbM6vbMUA8.crl (hash: 9nCxxqb1BvPDakVT1rGaeuOjS3JASUzH2SB9UtSPkuA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:29:9d:aa:bc:ac:2c:24:dd:6b:8d:b0:c2:e1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b84fec4906ab89020a116b68446cceaf6cc500f
        Validity
            Not Before: Jan 31 12:00:46 2025 GMT
            Not After : Feb  1 12:00:46 2025 GMT
        Subject: CN=83ca05aede49048916fc988b98af713fe6e7c846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:35:53:35:bc:f2:06:0e:11:4f:ca:30:73:08:
                    f6:58:68:44:bf:a9:ce:2a:55:2c:be:1c:1d:fd:aa:
                    83:e3:f0:a2:7d:d2:34:ba:46:47:75:7b:60:c5:12:
                    09:f1:fe:17:77:b0:82:33:37:af:c0:4e:07:3e:05:
                    8a:85:f5:47:fb:30:4b:f3:d5:f4:aa:f0:6b:e4:4f:
                    41:e5:b1:96:90:61:a7:9c:6a:eb:d7:3c:89:b7:cf:
                    88:e0:8b:1a:38:7e:10:2a:65:a0:1c:b2:f5:95:be:
                    0a:0f:4d:d3:b1:d9:f5:3e:7a:09:78:10:6b:14:76:
                    04:21:eb:ea:6b:e1:7d:67:07:9c:85:f1:88:1b:e9:
                    da:01:53:de:a9:2e:37:28:48:d1:f2:15:da:35:f3:
                    7e:7f:8c:db:ed:de:c3:3f:62:d2:07:30:bd:93:51:
                    86:9e:b7:e9:62:d7:6a:5c:36:81:70:ea:3f:2e:b8:
                    d8:1b:2b:90:4f:e0:a0:96:6d:cb:2d:63:ad:3e:63:
                    8f:bf:04:af:03:9c:e0:d9:3c:79:b3:2e:49:29:b9:
                    97:30:65:02:84:36:65:bb:d8:f4:dc:70:66:a4:19:
                    5b:92:1e:a7:ee:2b:6a:7f:26:3f:a1:d8:aa:4b:ed:
                    1a:95:42:88:62:46:dd:1c:e7:f6:bb:b8:29:f4:e4:
                    a2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CA:05:AE:DE:49:04:89:16:FC:98:8B:98:AF:71:3F:E6:E7:C8:46
            X509v3 Authority Key Identifier:
                keyid:6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:52:60:99:62:9c:aa:71:8d:88:58:82:4d:b7:c0:6d:f4:dd:
         75:5c:1f:d4:8a:1a:a4:12:bb:56:d5:17:45:fc:cd:e4:ac:77:
         ea:05:6b:dc:b3:ac:5e:ed:21:f9:b5:a2:dc:63:cf:27:11:ab:
         1b:e2:66:02:3f:8d:70:68:58:8b:b4:f3:11:7f:fb:c1:27:a8:
         ba:aa:c0:a0:c4:f3:1e:a0:99:ee:66:77:dd:e8:47:6a:d0:10:
         5e:26:2a:16:81:ce:dc:7a:b0:a5:bb:78:9e:a8:55:d7:a0:79:
         3d:50:03:2a:8d:36:a2:1a:70:86:e7:08:6b:77:f5:03:40:c2:
         83:08:52:fb:77:87:09:ff:64:88:bf:f0:5a:26:f1:0b:ea:58:
         59:25:b1:e7:9f:cf:4f:72:7f:3f:9d:cf:4c:08:e0:37:5b:66:
         6d:64:c0:68:31:f2:41:14:b4:7f:29:9a:99:df:8a:b1:f2:85:
         d4:ce:1b:9f:f2:d8:6f:d2:c1:b9:85:d0:b4:ad:57:c4:1e:d5:
         9f:5b:96:67:7d:78:4c:18:b4:6f:fb:46:f6:9b:f7:b6:72:6d:
         d9:48:23:f7:56:ff:50:ee:b8:79:14:71:8a:83:e5:e3:92:d5:
         ca:fa:71:76:a4:c9:78:8a:f7:a5:70:7c:36:20:0d:9e:1c:3c:
         df:2a:fb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:17:10 2025 by rpki-client