Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft
File:                     Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft (raw, json)
Hash identifier:          Vlqb0zoOZcuMJiR9ijbJcGybFr8mhUG9BhdBddENk7s=
Subject key identifier:   74:8C:B3:23:CE:6F:55:6E:D6:5A:5B:1B:4D:B0:C0:B3:15:8F:5D:1D
Authority key identifier: 21:BE:34:0B:6A:32:09:89:19:78:83:36:FC:E1:E6:89:20:3F:C4:BE
Certificate issuer:       /CN=21be340b6a32098919788336fce1e689203fc4be
Certificate serial:       0194BD17E08951B34F3EEFABA1527CCFBF60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ib40C2oyCYkZeIM2_OHmiSA_xL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft
Manifest number:          0934
Signing time:             Fri 31 Jan 2025 16:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:46 +0000
Files and hashes:         1: Ib40C2oyCYkZeIM2_OHmiSA_xL4.crl (hash: b4tR4mK1P3wbhPlx80znMDVCngmRIwUmdQ78z0dQbAM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:e0:89:51:b3:4f:3e:ef:ab:a1:52:7c:cf:bf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21be340b6a32098919788336fce1e689203fc4be
        Validity
            Not Before: Jan 31 16:00:46 2025 GMT
            Not After : Feb  1 16:00:46 2025 GMT
        Subject: CN=748cb323ce6f556ed65a5b1b4db0c0b3158f5d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:55:5a:cc:b9:b3:6e:47:db:43:9f:c5:35:
                    c4:c9:90:23:d4:be:40:3c:c0:23:5c:2f:71:88:eb:
                    91:6f:b5:fb:c2:34:2f:b3:bf:40:57:a8:f0:a2:82:
                    bd:b7:9a:fa:6b:1a:bf:92:bf:d3:f5:ad:1f:03:e9:
                    36:09:8f:4d:2f:4a:06:1b:bb:62:34:90:be:46:37:
                    bb:ab:9f:cb:c2:dc:18:5c:64:d8:4c:1f:b2:b8:d0:
                    8a:f3:6f:33:e1:59:ba:c1:8f:cc:25:ed:d1:7a:c1:
                    e0:63:b9:e0:c9:62:cb:52:ea:02:15:56:59:aa:e2:
                    be:eb:d6:9b:20:14:03:b7:28:b7:80:3f:5c:bf:a5:
                    bb:1c:ce:47:f8:39:7b:c1:bf:83:dc:b2:bd:0e:7a:
                    c2:e8:2b:4f:70:80:6d:00:f6:a7:8c:5a:a4:ef:28:
                    95:d4:56:30:80:47:58:b0:6d:11:66:70:b1:43:2f:
                    4d:99:da:0a:bb:d6:8e:b5:7e:b1:0f:d4:21:4b:97:
                    01:1c:b8:7b:8e:c5:b8:64:00:fc:7b:41:b6:8d:2c:
                    9d:a1:eb:4f:46:78:bb:2f:05:45:1a:91:b8:2c:cf:
                    5a:10:74:3e:ab:f9:15:a2:a0:ce:c1:97:f8:00:3b:
                    e6:83:1d:c6:4a:30:86:5b:2b:8e:fc:4f:68:17:f9:
                    1d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8C:B3:23:CE:6F:55:6E:D6:5A:5B:1B:4D:B0:C0:B3:15:8F:5D:1D
            X509v3 Authority Key Identifier:
                keyid:21:BE:34:0B:6A:32:09:89:19:78:83:36:FC:E1:E6:89:20:3F:C4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib40C2oyCYkZeIM2_OHmiSA_xL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/Ib40C2oyCYkZeIM2_OHmiSA_xL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:cf:69:1c:72:34:b4:51:7b:7d:75:0e:33:87:b4:8f:94:50:
         22:f2:a8:89:1b:70:6b:dd:5c:58:97:77:c8:1f:17:84:b8:69:
         5c:c0:01:54:2c:f8:27:58:6d:5f:bd:fc:a0:1f:da:d4:40:a6:
         3f:32:99:5f:cc:22:2d:98:9b:77:4b:a7:06:60:c0:17:c7:e1:
         1a:11:2e:b2:d1:3a:cc:99:9b:08:48:20:2b:4f:d3:38:21:7b:
         87:7a:ec:9a:05:41:84:9b:0f:9a:fb:53:b3:b3:23:3f:64:b3:
         15:2c:26:a1:73:13:ca:17:67:da:fc:47:c2:e2:50:ca:56:be:
         7a:fe:e9:1d:a9:93:0a:5f:3f:8b:b6:a5:9f:25:fc:ef:cb:c4:
         be:66:5f:4d:ea:45:7d:69:35:3e:11:45:e6:5c:6c:3a:b5:b4:
         39:f5:82:54:f2:ff:eb:f9:1d:42:44:b9:95:f3:d7:f6:79:41:
         d9:3f:f0:fe:62:91:73:50:52:27:5d:4c:cc:70:47:a7:20:e3:
         f7:cd:4e:db:8d:38:62:20:69:3d:93:c5:9a:41:22:92:ef:19:
         b3:5e:87:af:a4:b1:0e:a1:00:d2:4f:20:c1:70:46:6e:04:22:
         01:40:9d:54:34:87:ce:3f:76:6f:14:0d:6d:d0:0a:ee:0e:70:
         72:e7:25:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+CJUbNPPu+roVJ8z79gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmUzNDBiNmEzMjA5ODkxOTc4ODMzNmZjZTFlNjg5MjAz
ZmM0YmUwHhcNMjUwMTMxMTYwMDQ2WhcNMjUwMjAxMTYwMDQ2WjAzMTEwLwYDVQQD
Eyg3NDhjYjMyM2NlNmY1NTZlZDY1YTViMWI0ZGIwYzBiMzE1OGY1ZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZpVWsy5s25H20OfxTXEyZAj1L5A
PMAjXC9xiOuRb7X7wjQvs79AV6jwooK9t5r6axq/kr/T9a0fA+k2CY9NL0oGG7ti
NJC+Rje7q5/LwtwYXGTYTB+yuNCK828z4Vm6wY/MJe3ResHgY7ngyWLLUuoCFVZZ
quK+69abIBQDtyi3gD9cv6W7HM5H+Dl7wb+D3LK9DnrC6CtPcIBtAPanjFqk7yiV
1FYwgEdYsG0RZnCxQy9NmdoKu9aOtX6xD9QhS5cBHLh7jsW4ZAD8e0G2jSydoetP
Rni7LwVFGpG4LM9aEHQ+q/kVoqDOwZf4ADvmgx3GSjCGWyuO/E9oF/kdXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSMsyPOb1Vu1lpbG02wwLMVj10dMB8GA1UdIwQY
MBaAFCG+NAtqMgmJGXiDNvzh5okgP8S+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWI0MEMyb3lDWWtaZUlNMl9PSG1pU0FfeEw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zYWFiMDctMTA4NS00MGMzLWI2N2Ut
ODFmZWQzYTdlNWYxLzEvSWI0MEMyb3lDWWtaZUlNMl9PSG1pU0FfeEw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zYWFiMDctMTA4NS00MGMzLWI2N2UtODFmZWQzYTdlNWYx
LzEvSWI0MEMyb3lDWWtaZUlNMl9PSG1pU0FfeEw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXs9pHHI0
tFF7fXUOM4e0j5RQIvKoiRtwa91cWJd3yB8XhLhpXMABVCz4J1htX738oB/a1ECm
PzKZX8wiLZibd0unBmDAF8fhGhEustE6zJmbCEggK0/TOCF7h3rsmgVBhJsPmvtT
s7MjP2SzFSwmoXMTyhdn2vxHwuJQyla+ev7pHamTCl8/i7alnyX878vEvmZfTepF
fWk1PhFF5lxsOrW0OfWCVPL/6/kdQkS5lfPX9nlB2T/w/mKRc1BSJ11MzHBHpyDj
981O2404YiBpPZPFmkEiku8Zs16Hr6SxDqEA0k8gwXBGbgQiAUCdVDSHzj92bxQN
bdAK7g5wcuclPA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:32 2025 by rpki-client