Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
File:                     q06x4MU6aA6qQLjHzT8hzJYEPoo.mft (raw, json)
Hash identifier:          HbNi24idzy0zF3350CcP71XWq2Ob+TWeRsuBgK3lCmE=
Subject key identifier:   1C:5D:E2:6E:2D:D0:85:A2:24:71:32:6F:A8:D6:2A:C6:B2:49:C6:87
Authority key identifier: AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
Certificate issuer:       /CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Certificate serial:       0194BC72F059E66178DF7F10C07B178F0FD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 13:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:36 +0000
Files and hashes:         1: q06x4MU6aA6qQLjHzT8hzJYEPoo.crl (hash: uSGLFEluKayWw2GMYOHHpwjepqGW4P+jBvqEDp0t41g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:f0:59:e6:61:78:df:7f:10:c0:7b:17:8f:0f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
        Validity
            Not Before: Jan 31 13:00:36 2025 GMT
            Not After : Feb  1 13:00:36 2025 GMT
        Subject: CN=1c5de26e2dd085a22471326fa8d62ac6b249c687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:0a:3c:fb:ff:36:2c:8c:94:57:08:56:86:
                    c3:cd:23:88:54:e0:3b:7b:06:b5:f0:8f:a0:5b:d2:
                    e3:5e:b1:81:ad:23:5d:30:8e:c0:f9:26:47:a5:ac:
                    b8:43:07:c1:2d:6d:76:46:9c:ec:fa:5c:97:de:d7:
                    a6:0d:6c:5c:8f:f7:52:92:1a:68:93:01:55:05:14:
                    e1:19:d3:02:f4:8e:04:a4:c0:1b:b9:bc:02:a6:eb:
                    b9:95:42:1c:34:62:bf:b6:b9:41:39:ea:07:b4:de:
                    62:de:e4:4b:ea:be:a0:eb:a1:19:b9:0a:de:74:de:
                    9c:4d:77:3c:80:d4:2e:0f:58:d6:e1:d0:82:74:f7:
                    8b:69:c2:9b:8e:e4:38:ae:bd:59:71:e1:1c:ee:4f:
                    a0:8b:f9:47:a3:d2:8e:d9:f9:86:4c:6a:85:a7:a6:
                    6b:f6:ee:0d:48:b4:b1:37:2d:56:f4:98:91:87:32:
                    49:62:7d:a6:04:f1:63:fb:4e:0b:f3:d1:89:f1:00:
                    9f:ff:ed:c3:3a:7d:90:61:de:45:54:cb:b9:bd:65:
                    af:e9:94:92:5e:51:c0:00:cf:5a:2e:a1:b5:c6:a5:
                    f0:0c:8c:e5:08:c8:d1:32:80:2c:68:f8:a5:e3:c9:
                    0d:60:4d:d3:d7:0c:e5:21:0c:6e:bb:61:14:05:42:
                    36:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5D:E2:6E:2D:D0:85:A2:24:71:32:6F:A8:D6:2A:C6:B2:49:C6:87
            X509v3 Authority Key Identifier:
                keyid:AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d8:03:d3:23:00:92:c5:26:b4:55:17:84:e4:9c:ec:c6:e0:
         f2:29:47:a8:45:61:67:9e:47:f2:6c:c6:b5:17:1e:fb:5a:a4:
         2a:87:76:cf:3c:43:f2:c1:af:77:42:b1:73:be:7d:a4:38:fb:
         eb:d9:61:8c:89:f1:0a:1c:9e:f4:aa:ad:15:60:17:2a:1b:cc:
         73:ac:91:cc:50:2c:45:28:a8:8b:7b:48:ba:b5:c0:60:86:dd:
         fa:08:d8:48:0f:99:83:31:10:dd:ca:13:25:8b:bb:45:eb:d4:
         f6:ba:21:f9:45:35:fa:74:64:91:83:73:c2:f2:a2:78:d0:53:
         9c:77:01:dd:64:8e:35:5a:64:66:f8:bb:08:2b:75:01:ad:6e:
         e8:3a:0c:a7:1d:bc:b7:ad:2b:02:c6:a9:79:bf:66:e4:c4:d2:
         45:4e:15:65:dc:0d:ab:d9:a0:e1:b9:4e:7e:b8:9b:3f:bb:9e:
         75:25:58:7d:1e:b1:d1:7b:20:38:f2:2d:64:da:ac:02:3d:3e:
         9c:30:85:0f:fb:e1:36:23:11:e2:63:be:f1:5e:3c:35:8e:c0:
         e9:7a:16:83:19:69:fc:39:15:8d:3c:1d:02:96:1c:b2:19:c3:
         e4:5a:ee:ce:59:39:9b:b8:37:ae:f3:12:ad:41:d7:72:46:4e:
         e4:ea:d6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:29:41 2025 by rpki-client