Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
File:                     ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft (raw, json)
Hash identifier:          6G3zTeE5LpIAt9Sfb5C7e78QoqDolxIn6uaD3h9LssY=
Subject key identifier:   6E:6A:BE:C5:0D:5E:16:40:9D:25:D5:3D:66:10:BC:27:C2:F5:3F:BB
Authority key identifier: 72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2
Certificate issuer:       /CN=724f14189ab7105620375daf9baa814d6dd937a2
Certificate serial:       0194BBCEA65FF399892CB610000AB6B262DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft
Manifest number:          0598
Signing time:             Fri 31 Jan 2025 10:01:09 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:09 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:09 +0000
Files and hashes:         1: ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl (hash: MC7ds4PFq+kGYAxIc6Nn0awMRRhJJh8zcr2jSGgvO0A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:a6:5f:f3:99:89:2c:b6:10:00:0a:b6:b2:62:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724f14189ab7105620375daf9baa814d6dd937a2
        Validity
            Not Before: Jan 31 10:01:09 2025 GMT
            Not After : Feb  1 10:01:09 2025 GMT
        Subject: CN=6e6abec50d5e16409d25d53d6610bc27c2f53fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:60:72:35:fb:a8:c3:fb:5c:f9:bd:1f:4b:
                    7c:d6:78:9d:d0:70:de:25:7b:38:aa:00:fd:30:de:
                    13:49:a4:fb:20:25:ac:0f:b1:ba:8b:bb:ed:7f:69:
                    47:0c:31:e2:3d:67:71:0e:69:b1:a9:2a:54:36:58:
                    df:64:5f:a2:e7:63:c8:5c:4d:81:7e:b3:36:3d:a4:
                    52:6d:bb:2b:0e:17:7f:3c:91:6b:bf:4d:09:7e:68:
                    53:62:e4:e6:db:61:f0:a4:5b:77:55:a6:4e:6a:6c:
                    c1:41:86:9f:44:03:49:f8:dd:3c:7d:66:fe:67:7d:
                    f0:c6:ae:0c:85:d4:08:20:2e:fb:2c:16:d0:4b:5f:
                    46:05:dd:af:42:32:3b:bf:9d:3c:65:5d:f1:ea:bc:
                    22:f6:76:0e:28:37:0a:5e:de:fa:d6:c1:88:46:2d:
                    8d:e3:3a:6d:ed:2f:fc:0f:50:74:94:c0:e2:ea:35:
                    51:1e:24:77:ae:dc:dd:c5:0e:b1:c5:3c:7f:4b:81:
                    13:d7:26:d7:e3:ee:72:a1:44:5a:e4:22:02:76:0b:
                    95:b4:23:42:e5:8f:f2:b0:fc:c2:9f:06:4a:48:bd:
                    49:92:26:96:4b:9b:4c:40:4e:d8:f8:e4:b7:ca:8b:
                    0f:30:bf:05:54:a1:bc:32:08:c3:4f:14:4f:a6:de:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6A:BE:C5:0D:5E:16:40:9D:25:D5:3D:66:10:BC:27:C2:F5:3F:BB
            X509v3 Authority Key Identifier:
                keyid:72:4F:14:18:9A:B7:10:56:20:37:5D:AF:9B:AA:81:4D:6D:D9:37:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ck8UGJq3EFYgN12vm6qBTW3ZN6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cbd72b-f64b-454e-b58c-2715eb710e80/1/ck8UGJq3EFYgN12vm6qBTW3ZN6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a2:f8:aa:c6:32:b8:d1:07:c0:85:7e:71:08:b6:8b:1f:29:
         4e:bc:6c:4e:5b:8f:96:95:ed:a7:68:30:ac:fe:17:3d:c6:e3:
         f7:9c:57:55:3a:a6:6f:e0:12:62:43:d1:2e:47:2e:c4:e3:3e:
         5f:25:06:04:9b:cd:ac:57:11:d8:66:d1:c0:07:5a:aa:f1:6d:
         16:8c:7d:62:40:5e:c0:6b:f0:0d:32:ea:c5:47:e3:b4:de:69:
         40:96:2c:4a:4b:98:e4:51:af:03:a5:17:d1:0c:d7:b9:52:38:
         8f:c9:fa:a1:fe:ee:76:e2:e2:93:f1:e8:e6:59:3c:87:c7:2e:
         13:e6:32:4a:e3:15:3b:d4:8a:40:fe:ac:ef:57:6c:c3:3f:16:
         09:d1:f3:de:49:ae:90:a3:99:7a:f5:b8:5c:61:a6:1f:27:77:
         7a:9a:b2:3b:1d:bc:88:e7:1c:0d:0a:93:cf:be:fd:4c:12:d1:
         6d:30:9c:60:cc:d8:0b:c9:89:29:3f:14:39:2b:65:36:62:00:
         8e:11:a2:cd:8e:c8:51:6d:c9:50:32:d7:69:19:3a:a4:9a:eb:
         c2:de:d9:b6:30:9c:13:ed:bc:37:a1:0f:d4:6f:c9:34:3c:41:
         1c:ca:47:04:2f:95:5f:78:d6:6b:44:a1:52:5b:f5:df:1b:1e:
         99:fb:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 17:54:16 2025 by rpki-client