Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
File:                     EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft (raw, json)
Hash identifier:          2GpCNjPmbIYxENBlM/r+xZ43taEsDYng0qQKn3uLwJs=
Subject key identifier:   A6:D9:7C:98:56:AC:EE:6E:58:EE:63:B7:7B:FF:BA:D7:C9:31:BE:4B
Authority key identifier: 12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9
Certificate issuer:       /CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
Certificate serial:       0194BBCE091DB5310E895C07A0AB2C5F882A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 10:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:29 +0000
Files and hashes:         1: EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl (hash: VqQ1fzlwuyKA0b4X2KHFNoK2qBS6SqSqtDNji9vrWDw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:09:1d:b5:31:0e:89:5c:07:a0:ab:2c:5f:88:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12a628501af65cf5ff3970f3123414c6b80cc0a9
        Validity
            Not Before: Jan 31 10:00:29 2025 GMT
            Not After : Feb  1 10:00:29 2025 GMT
        Subject: CN=a6d97c9856acee6e58ee63b77bffbad7c931be4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:80:94:b6:e6:ac:90:32:c3:f3:6a:4b:1e:6a:
                    76:74:3d:0a:45:87:c3:73:06:73:56:d6:f8:14:e4:
                    85:6b:3f:fc:15:1f:f4:c6:72:8e:fb:2a:a7:71:47:
                    ab:ea:41:27:f9:c6:44:0f:cc:cd:ef:99:11:4a:2b:
                    f5:82:a0:9e:5e:ed:2a:b3:18:d6:23:a7:72:f3:91:
                    7b:f2:48:85:60:98:e9:bd:8b:0c:e9:1b:fa:df:d7:
                    63:73:30:9a:43:6c:61:b8:37:7c:6a:e4:56:7a:18:
                    be:e2:99:76:3d:bc:07:bd:e1:02:b1:e1:f2:57:23:
                    70:73:fc:50:0b:14:10:31:2b:ac:ca:72:cf:04:e3:
                    5d:91:ac:6e:e4:72:6f:e5:c3:c5:a1:7a:46:d0:55:
                    a2:a0:6a:73:a8:42:65:f1:34:c1:58:c3:88:fc:78:
                    80:25:6a:4e:a5:af:c4:e6:1c:74:29:9e:8c:82:81:
                    dc:60:d9:3c:84:09:79:6a:cd:f0:16:97:d0:98:3b:
                    39:5b:c9:ae:8f:1d:10:64:0b:0f:ee:dd:76:fe:74:
                    3f:b6:a5:7c:5e:45:8b:20:f5:4f:b6:2b:78:d0:53:
                    de:e7:90:49:4e:ee:82:8d:38:e6:3c:c4:9f:66:a7:
                    42:f9:ff:55:81:3e:af:66:f6:40:8c:21:91:e1:e9:
                    43:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D9:7C:98:56:AC:EE:6E:58:EE:63:B7:7B:FF:BA:D7:C9:31:BE:4B
            X509v3 Authority Key Identifier:
                keyid:12:A6:28:50:1A:F6:5C:F5:FF:39:70:F3:12:34:14:C6:B8:0C:C0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqYoUBr2XPX_OXDzEjQUxrgMwKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915fcd-7e5a-453c-b436-83032008d2eb/1/EqYoUBr2XPX_OXDzEjQUxrgMwKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:89:7d:25:d6:e9:c3:76:b6:f9:c4:f6:ca:d8:f2:17:d1:c2:
         75:6a:8b:15:ea:1e:25:65:be:85:23:e5:e5:f2:05:e6:77:07:
         4e:a7:15:37:f2:cf:ab:6f:16:35:4d:71:5b:7d:51:f1:da:ed:
         b5:fd:0f:eb:a5:a2:1b:90:c1:39:df:42:3e:4a:04:d7:0f:c0:
         1b:64:20:09:31:6a:3e:71:60:90:d1:82:59:45:60:f6:46:da:
         ae:73:4c:47:e4:99:c5:3f:6d:7a:a0:a0:f9:6c:23:20:33:5e:
         21:45:72:1e:f5:f5:86:c8:fd:06:65:fd:d1:ce:1f:f6:b3:e4:
         75:ac:41:53:23:c6:9e:4e:46:dc:ae:da:d7:c4:fc:39:9a:22:
         18:9c:af:c4:23:75:38:71:5c:9c:ae:be:a3:fb:4d:8f:c4:f6:
         2e:6c:b7:57:ff:6b:26:51:b5:32:0d:37:1e:53:10:8b:ef:28:
         f9:bb:a4:73:41:41:2b:ef:fc:b4:79:b1:b6:f0:a4:55:4b:ce:
         8d:ea:a0:97:27:29:8d:66:40:65:f0:0f:e7:9a:5e:aa:f2:5b:
         0b:ba:73:83:44:c9:5f:c6:86:d7:cf:56:6b:76:d6:23:2e:b2:
         ba:ef:64:68:94:d5:4d:6a:65:c6:93:81:ab:51:dc:fe:0e:05:
         96:b9:bd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:05:09 2025 by rpki-client