Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
File:                     moI9HNrrg3dfH7vV-frkGsXfFxk.mft (raw, json)
Hash identifier:          Y1kMMsPQa52v233lkRpHnmR85FXD2LunTU0dO+dwvhQ=
Subject key identifier:   32:0C:C9:0A:E5:7D:D7:82:41:B8:49:11:64:F7:CC:1E:2F:BF:7A:A6
Authority key identifier: 9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19
Certificate issuer:       /CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
Certificate serial:       0194BC3CADB6D45EFE017F53675F2D888967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft
Manifest number:          0462
Signing time:             Fri 31 Jan 2025 12:01:20 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:20 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:20 +0000
Files and hashes:         1: moI9HNrrg3dfH7vV-frkGsXfFxk.crl (hash: EFHuBzodE4Fw9oca4iNX2qt/WBXXpStaWByS66zxY+E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:ad:b6:d4:5e:fe:01:7f:53:67:5f:2d:88:89:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a823d1cdaeb83775f1fbbd5f9fae41ac5df1719
        Validity
            Not Before: Jan 31 12:01:20 2025 GMT
            Not After : Feb  1 12:01:20 2025 GMT
        Subject: CN=320cc90ae57dd78241b8491164f7cc1e2fbf7aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:29:f3:d4:28:f6:6f:5c:f9:87:1b:74:4e:40:
                    9c:5b:3f:f2:10:d1:1b:7d:f7:a0:a1:c6:45:74:17:
                    6e:8b:a6:fc:a2:56:81:7d:32:26:e5:7c:cb:38:16:
                    8d:f5:d0:7d:33:96:40:97:f8:85:9b:ea:95:e2:bc:
                    ca:c9:f6:6d:1c:43:0e:63:e1:6e:75:1b:3b:3e:81:
                    15:1e:3b:65:2b:88:3d:c6:af:57:a9:ed:be:ac:e5:
                    1b:d8:eb:da:90:af:5b:f9:e7:6b:2c:c8:af:9b:4c:
                    1b:64:12:41:60:e3:5d:6d:67:46:6a:93:99:1c:70:
                    18:ed:b0:03:66:fc:a1:9b:4e:42:97:5b:f9:09:4b:
                    02:f0:13:db:1f:b3:9e:61:90:bb:23:ab:17:a0:20:
                    f0:e7:f7:0b:08:44:12:16:7e:dd:e5:59:6f:61:aa:
                    aa:82:7d:5c:eb:cb:99:18:29:3a:12:16:2c:ed:47:
                    f2:58:7b:32:c1:d3:1e:18:33:f9:72:24:6c:86:0b:
                    67:a3:54:e8:e6:65:90:bb:3d:72:ef:0e:6a:60:80:
                    c6:ed:55:12:f9:22:c2:24:a8:57:72:5f:f8:d6:4c:
                    7f:6a:d7:02:70:63:42:b1:bd:ff:cb:36:d4:1a:ad:
                    b8:d9:d0:9e:8f:3f:71:db:49:04:c6:e8:d1:a5:83:
                    ee:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0C:C9:0A:E5:7D:D7:82:41:B8:49:11:64:F7:CC:1E:2F:BF:7A:A6
            X509v3 Authority Key Identifier:
                keyid:9A:82:3D:1C:DA:EB:83:77:5F:1F:BB:D5:F9:FA:E4:1A:C5:DF:17:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moI9HNrrg3dfH7vV-frkGsXfFxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0bf3b2-4dc4-4e25-9b9b-01f9a7b494da/1/moI9HNrrg3dfH7vV-frkGsXfFxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:65:2a:d0:60:4a:2c:bc:71:3d:6c:53:4e:6a:26:5f:0f:d3:
         43:1e:c9:44:82:8a:7d:29:e5:1d:ff:58:13:91:63:bb:fd:36:
         20:ce:f7:cc:c3:36:b4:f0:6e:ac:54:3b:ab:90:52:59:af:f1:
         71:c0:c5:4f:d6:ab:b2:ce:a2:24:4c:f0:4d:f3:d3:0e:40:21:
         f3:bb:f3:df:c2:d2:a3:03:14:23:d3:74:ae:f0:68:ad:23:2b:
         d2:12:0a:b9:c2:cd:4c:be:fc:16:a8:95:db:dc:b2:dc:26:c8:
         8c:c5:c2:7e:af:37:4d:70:c8:3d:bf:73:a8:74:68:9d:e4:92:
         af:a4:5b:72:00:bf:4f:6c:5f:cf:f1:16:44:b0:a9:02:4b:09:
         33:62:95:d6:21:9f:69:00:b6:c0:2d:a5:58:bb:9d:df:06:b1:
         05:f3:f4:d4:8f:c8:ee:76:9f:b2:29:9e:b1:e1:44:0c:7c:37:
         5a:48:31:df:45:23:6e:ca:e3:9b:71:38:6d:d7:ce:ea:0d:b0:
         a9:00:44:ee:64:e6:f6:17:ca:0f:f1:18:d7:6f:9e:3d:bf:f3:
         f2:6b:7c:76:36:6b:0d:77:4d:6d:d5:9a:23:5f:8d:2b:3e:bb:
         9e:df:62:a5:fa:ca:f7:6f:ab:4f:c1:59:3c:ce:1f:07:0e:c1:
         b1:04:f2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:04:58 2025 by rpki-client