Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
File:                     baDun_CcfPx-6XYfGjyPMO-sWEg.mft (raw, json)
Hash identifier:          1k8LLQ+v8GHXFpL+mk+2QbZtl2anwrFy4uCRinwXzno=
Subject key identifier:   80:FB:45:28:1A:54:1B:7D:B3:92:DB:7A:A9:D9:36:06:7B:08:C3:8A
Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
Certificate issuer:       /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Certificate serial:       0194BD176912A1B839B451B97F372C711BAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft
Manifest number:          0867
Signing time:             Fri 31 Jan 2025 16:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:15 +0000
Files and hashes:         1: baDun_CcfPx-6XYfGjyPMO-sWEg.crl (hash: swKHtmR2CqqJiPJNroS4+dTKF5hnf3ewb4YpmNi0TiQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:69:12:a1:b8:39:b4:51:b9:7f:37:2c:71:1b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
        Validity
            Not Before: Jan 31 16:00:15 2025 GMT
            Not After : Feb  1 16:00:15 2025 GMT
        Subject: CN=80fb45281a541b7db392db7aa9d936067b08c38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:c0:72:f5:fb:cd:e1:26:2b:70:32:e5:7e:
                    c9:c0:f2:e7:bc:a6:da:6c:92:75:1b:9b:87:5b:a6:
                    97:e6:f6:2d:e3:72:8e:30:3b:26:a1:7d:c5:88:69:
                    95:20:ee:2b:e1:36:97:8b:3a:5e:08:23:9f:66:ed:
                    c1:b3:ac:bf:9a:f3:c3:6c:da:d8:8a:03:6f:f9:f6:
                    c5:25:45:c3:ba:17:9e:74:1f:23:7a:0f:d7:38:f2:
                    98:fd:d9:60:2c:c7:35:b6:e4:83:80:53:c5:8a:b4:
                    4e:b2:54:d5:a1:ef:36:76:68:b4:1c:55:a6:71:7a:
                    04:0f:8a:4e:fe:4b:82:f8:d1:3e:ee:6a:87:f1:19:
                    aa:84:27:fb:1f:70:65:7d:5b:35:bc:e3:85:d5:a7:
                    f8:21:69:39:7d:eb:a5:cf:13:78:6b:ec:40:b9:0d:
                    b3:be:f0:26:ca:39:14:cc:83:c4:76:84:be:57:31:
                    de:27:f3:1b:76:80:ec:b3:5e:f4:fd:49:6c:c8:6d:
                    b5:ed:7c:62:b3:5c:b4:91:03:a9:c5:f1:7d:1f:5b:
                    aa:16:08:79:dc:00:59:df:e3:d1:0c:43:ab:00:b8:
                    1d:1e:11:23:5b:9c:cf:16:7c:91:7a:5c:35:7d:3f:
                    04:c6:94:8d:f6:60:99:d0:64:c7:83:d1:2f:0c:d5:
                    93:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FB:45:28:1A:54:1B:7D:B3:92:DB:7A:A9:D9:36:06:7B:08:C3:8A
            X509v3 Authority Key Identifier:
                keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:15:48:0e:6f:01:aa:aa:41:f0:16:1d:ef:2d:08:ff:83:a5:
         0c:58:46:dc:ab:4e:21:c4:1c:da:09:53:be:72:a6:60:00:1b:
         17:a4:d9:de:ca:f1:79:47:d7:c3:c7:46:23:27:c0:0b:9d:fa:
         03:e6:94:ac:25:5b:e2:b1:22:37:69:cb:b6:08:7a:da:8e:28:
         51:12:74:fa:c0:4e:f0:e1:78:f6:3c:d4:6d:70:01:72:cb:08:
         f5:26:24:44:64:63:8c:9a:2d:4e:f3:31:11:b6:52:57:e9:91:
         92:f7:ec:bb:cd:f2:6f:c8:48:6d:c5:6d:3b:8b:a2:02:b0:61:
         36:34:78:73:22:17:58:54:9f:04:bb:50:13:e2:f1:71:2b:77:
         e1:f3:c8:32:2f:e6:1f:9b:2e:7d:ae:94:a9:b3:11:26:aa:2c:
         7f:9d:36:53:2f:f9:34:1d:4f:16:76:41:82:74:ad:e7:76:65:
         dc:38:2a:1d:a7:33:93:24:72:dd:8a:1a:74:55:5b:6c:d5:40:
         e7:fd:98:55:54:b1:14:75:49:da:6b:a2:9d:b4:8f:3f:83:4e:
         5f:3f:e8:a0:e4:05:8f:6a:80:59:96:9c:da:d3:dd:7a:9e:b4:
         ce:9c:d2:bf:34:61:7d:e1:5e:53:03:f7:db:28:1b:12:5a:b4:
         7f:ee:97:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:22 2025 by rpki-client