Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
File:                     TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft (raw, json)
Hash identifier:          +EU/DsHEMJEvlm10Tw2XYAXAKR3CtidxidiA0Y08xFE=
Subject key identifier:   43:60:0B:AB:D3:35:1C:53:1C:C3:6C:E3:E5:DB:79:68:BD:4F:51:AB
Authority key identifier: 4E:91:16:2B:B0:D9:B5:51:BF:5F:7B:1C:15:EE:31:5A:51:A6:77:F4
Certificate issuer:       /CN=4e91162bb0d9b551bf5f7b1c15ee315a51a677f4
Certificate serial:       0194BCA9FAE13E43FD78E0D13E688CA0164C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft
Manifest number:          099D
Signing time:             Fri 31 Jan 2025 14:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:43 +0000
Files and hashes:         1: TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl (hash: 2jZNKdXOqIjHRfwMbGwomfSfT5xEBaLWYJXb/E1kVGc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:fa:e1:3e:43:fd:78:e0:d1:3e:68:8c:a0:16:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e91162bb0d9b551bf5f7b1c15ee315a51a677f4
        Validity
            Not Before: Jan 31 14:00:43 2025 GMT
            Not After : Feb  1 14:00:43 2025 GMT
        Subject: CN=43600babd3351c531cc36ce3e5db7968bd4f51ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e6:42:d1:47:a4:a1:6b:c0:ff:08:4e:73:ed:
                    95:ef:6b:0e:f6:68:64:05:c8:79:31:63:81:35:ee:
                    ad:94:2d:90:95:cd:30:b4:a7:25:f8:37:54:a2:9c:
                    57:ca:28:27:d0:82:85:1e:f5:d4:c1:58:90:66:92:
                    6e:df:8c:0a:61:23:3a:9c:37:8c:ab:e8:96:c3:e7:
                    cd:4a:2f:2b:e3:63:31:c4:dc:b8:1f:86:e6:70:7b:
                    c2:01:11:28:7a:9c:2d:ad:b8:77:c2:88:ac:41:28:
                    cb:11:a9:bf:b2:48:cc:c3:6f:66:95:d0:8b:bf:cb:
                    30:55:20:ea:a2:94:17:a1:c8:c5:4e:0f:d8:1f:52:
                    e4:f6:9c:4a:6e:02:be:65:23:af:80:8e:d6:9e:08:
                    bb:98:8c:16:73:eb:15:3e:c7:11:bc:5f:ae:62:a2:
                    8b:b4:a1:4f:08:c4:ee:74:a9:e4:6d:75:e9:92:8c:
                    0e:11:41:18:bf:d8:29:9e:09:96:b4:83:b8:4f:93:
                    8c:ec:6e:f3:70:7d:80:2f:39:76:78:56:6f:35:5e:
                    a7:7d:b6:11:a0:ac:1e:a0:2b:39:62:52:91:1e:ef:
                    d5:a3:d7:9b:f5:d1:05:83:1c:27:47:b6:cc:59:3e:
                    9f:50:96:53:4c:b6:be:ab:e7:d7:a3:a9:64:29:75:
                    b5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:60:0B:AB:D3:35:1C:53:1C:C3:6C:E3:E5:DB:79:68:BD:4F:51:AB
            X509v3 Authority Key Identifier:
                keyid:4E:91:16:2B:B0:D9:B5:51:BF:5F:7B:1C:15:EE:31:5A:51:A6:77:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TpEWK7DZtVG_X3scFe4xWlGmd_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/229c3f-9972-43d6-8e42-5713f1749c1d/1/TpEWK7DZtVG_X3scFe4xWlGmd_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9c:71:2f:9a:24:27:71:84:f2:c4:55:65:04:71:0a:36:c4:
         79:4b:11:6a:00:ef:f0:43:76:11:02:72:6f:7f:fa:39:12:a4:
         02:5c:f6:58:d8:46:d3:ab:fb:58:8b:a9:ed:c5:59:a2:25:b5:
         ff:d2:65:39:2a:13:a0:32:59:f8:fc:a3:ba:5b:3e:6a:86:99:
         87:33:81:b4:9f:a1:12:86:6b:eb:7a:51:02:ff:6b:98:97:19:
         ae:61:81:75:44:90:53:60:a3:0b:30:d7:9b:78:f1:f0:6b:7e:
         f8:81:0c:62:22:ac:23:ca:12:84:e8:7e:12:85:60:3d:76:f7:
         f1:e7:6e:e1:d6:0e:53:12:92:b5:a0:22:c2:96:8c:71:10:d9:
         e7:98:22:c0:94:99:5f:02:9e:6b:de:f7:74:61:d6:20:c8:ec:
         b3:91:27:4c:1d:3d:64:2e:84:1d:b4:7c:eb:65:d9:f0:b1:74:
         39:1e:ef:63:7a:fd:cc:ab:75:e7:fb:d8:f2:7f:81:3e:34:6a:
         61:74:af:71:d3:53:a2:fe:59:c8:fe:20:19:1d:9c:01:15:c1:
         c1:af:28:2e:22:41:df:20:16:3e:7d:27:b5:ec:a9:e0:7d:ea:
         1b:4f:f4:3e:14:2c:37:62:59:29:21:d0:ab:c8:30:af:44:74:
         52:91:fd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:00:41 2025 by rpki-client