Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File:                     1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier:          R6rAYLPn4frvoENDh1orYG23TCfSS0nykDP1a1TJ0qo=
Subject key identifier:   C9:E7:91:3B:BD:AC:19:2C:85:8B:15:1C:FC:98:5A:B5:88:DD:75:B3
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer:       /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial:       0194BBCDBD1F2415F0BE7A552BDF2814334B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number:          0FA8
Signing time:             Fri 31 Jan 2025 10:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:10 +0000
Files and hashes:         1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: TKgkvX3Xz6jxs79lohYFNF9OpF68uLxvwqoccnUlAac=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:bd:1f:24:15:f0:be:7a:55:2b:df:28:14:33:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
        Validity
            Not Before: Jan 31 10:00:10 2025 GMT
            Not After : Feb  1 10:00:10 2025 GMT
        Subject: CN=c9e7913bbdac192c858b151cfc985ab588dd75b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:b8:57:86:69:f2:48:39:09:67:b6:5a:f5:
                    e5:a5:aa:3d:e5:05:49:a8:8a:50:f5:73:81:93:da:
                    aa:39:58:3a:71:82:3e:61:5e:bb:04:d3:5a:39:f7:
                    c2:46:66:0e:ae:98:91:fc:0b:1b:39:c5:9c:89:2e:
                    0f:48:08:f8:ab:84:63:f7:45:0b:bc:ff:24:40:ac:
                    07:89:b4:0d:ad:d2:fc:1b:87:25:14:e5:ab:7d:fb:
                    e3:bd:e1:fb:fa:a9:25:29:8a:17:43:47:94:eb:82:
                    b4:b1:69:eb:61:86:41:a8:38:4a:77:c4:7d:3d:9d:
                    15:a7:55:12:67:3c:48:a0:aa:55:03:60:98:c3:cd:
                    84:74:70:f8:79:53:c9:9b:36:cb:0c:ed:5e:a6:5c:
                    12:8b:7e:72:3f:bc:5f:86:ca:17:20:3a:ba:f1:24:
                    cb:d6:22:b0:77:81:46:10:97:e8:e7:b6:c5:92:b0:
                    b5:2b:c9:f3:43:62:d9:bb:28:88:3d:c1:d2:d6:3a:
                    07:5e:57:e5:6d:f9:ae:f4:e7:fb:fd:0a:ed:a4:2f:
                    3f:79:62:a9:03:8a:7b:9c:bc:67:49:e3:b1:8c:a6:
                    d2:66:a2:25:e6:a2:57:29:a2:ca:7e:54:c6:3e:d1:
                    b9:e6:0a:53:5d:4f:12:dd:3e:8d:3a:00:92:ec:bd:
                    53:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E7:91:3B:BD:AC:19:2C:85:8B:15:1C:FC:98:5A:B5:88:DD:75:B3
            X509v3 Authority Key Identifier:
                keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:f8:3e:15:69:5d:6c:82:1a:98:c3:02:6e:1d:b2:31:ba:11:
         40:78:c0:0a:0a:ab:b0:f1:ae:d8:a0:b8:26:89:b9:5d:a1:3b:
         04:2c:44:16:27:ab:6e:25:30:2d:23:b8:e0:ae:2f:7d:b2:fc:
         43:b7:87:4d:98:a2:49:96:54:01:91:12:eb:3d:52:a6:62:cc:
         d2:b6:a6:4a:8a:f5:1a:f4:eb:89:50:1d:16:c3:d7:72:2a:04:
         41:c5:96:1c:86:9b:e0:a8:56:6e:9d:f3:40:44:ee:6a:63:cb:
         d9:ae:99:ad:79:a5:93:a7:53:c5:08:2e:4b:34:dd:65:29:51:
         40:bd:6d:50:6d:23:05:18:7a:55:fb:eb:ba:f1:9b:fc:fb:ff:
         57:ab:18:42:17:b5:9f:91:57:3e:ef:a4:50:f0:d1:e7:ed:9c:
         c6:26:28:4b:60:31:aa:8d:c4:30:e1:63:3c:99:47:84:f7:85:
         27:99:19:ad:40:17:66:c4:20:8b:dc:8a:fc:74:ee:0d:fd:ed:
         b4:0e:e0:23:09:c2:30:cf:16:e7:f6:31:99:75:6a:b4:f9:55:
         e2:68:0f:67:e5:6c:03:e3:a0:fa:4c:2a:44:e9:44:d9:fb:b3:
         fd:ea:b6:c5:12:39:4a:7e:6b:0f:9b:9b:66:b1:ab:38:ed:11:
         36:10:1f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:51 2025 by rpki-client