Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File:                     6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier:          ZvZlA6pew66Q6J6yZ8jyaN0ZCTLeINVl3JW8kAsLuTQ=
Subject key identifier:   04:13:A1:F2:81:8A:F7:97:92:39:9D:05:60:2C:32:1B:A0:C6:6D:8D
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer:       /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial:       0194BD17C6DC23BC6DDD51661D20F0A96D92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number:          13B2
Signing time:             Fri 31 Jan 2025 16:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:39 +0000
Files and hashes:         1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: FG+izA9I+hhE8xfIPXPdar6xU3HH3S4MD9i/4guyJ/k=)
                          2: rvzjyC9muvr4migx_xtUIzZ2FRM.roa (hash: 2jsltHZ+YtkUSfR/OVprtu2235QmWCtb64qQWKzazWI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:c6:dc:23:bc:6d:dd:51:66:1d:20:f0:a9:6d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
        Validity
            Not Before: Jan 31 16:00:39 2025 GMT
            Not After : Feb  1 16:00:39 2025 GMT
        Subject: CN=0413a1f2818af79792399d05602c321ba0c66d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d1:75:e6:b0:e8:39:ad:09:0d:4b:ab:78:6e:
                    2e:2c:16:de:c7:08:d4:a2:55:9a:50:74:f1:66:dc:
                    a7:f8:e1:93:3b:92:ee:d4:9d:3c:69:16:68:ad:ca:
                    1d:fa:63:9d:18:53:7c:bf:77:4a:bf:11:f8:f1:e1:
                    36:a5:6e:f5:eb:bf:a5:40:1c:e4:fe:87:5b:9b:4c:
                    d1:14:6b:9c:74:4d:ac:80:5b:59:13:16:1c:ba:30:
                    7e:25:f5:f1:67:27:0d:d8:82:4f:7a:73:f6:0c:1f:
                    a3:d7:2f:87:dc:cd:fa:2f:ec:19:02:e9:19:ea:e4:
                    18:67:c6:c2:61:93:1a:9a:ec:e2:03:fe:79:14:ed:
                    69:50:7f:95:7a:69:a3:4e:aa:6b:21:0b:d7:61:d3:
                    ae:b1:64:80:d9:fb:d5:9c:f7:b1:15:d7:8b:ea:6e:
                    ec:08:da:0d:fe:79:f6:c4:c7:b5:1b:24:33:bd:53:
                    f9:49:db:2b:49:32:20:0e:77:b8:d6:45:de:6a:b5:
                    d7:20:84:00:e2:24:2c:3d:48:f2:7d:8e:8e:96:33:
                    29:bd:fb:22:41:a8:57:be:61:20:1e:61:a4:44:e9:
                    22:b3:cb:f1:ed:49:f8:e0:86:d6:32:a0:af:5c:c6:
                    90:e9:ca:74:92:2d:96:f5:fe:52:cc:14:52:65:9b:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:13:A1:F2:81:8A:F7:97:92:39:9D:05:60:2C:32:1B:A0:C6:6D:8D
            X509v3 Authority Key Identifier:
                keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e7:63:77:c3:ba:23:63:bb:3a:27:e5:d3:e2:8a:0b:e1:8f:
         d7:0f:6e:f2:48:2e:3e:25:e4:11:3e:f2:1c:7a:55:4b:af:b6:
         95:a4:15:bb:b1:b4:2b:36:99:e9:22:b1:61:b0:6b:27:15:c0:
         7b:a0:b4:4b:2e:e4:80:2f:a0:0e:7b:8d:b5:41:1a:ae:02:e4:
         56:4e:28:5c:c5:0d:06:db:85:c1:5b:72:2d:97:48:81:3d:bf:
         72:0e:fd:53:13:94:5c:3d:a6:8a:07:c8:7b:5a:7a:56:ae:0d:
         27:23:c4:42:20:e6:b6:d6:ba:35:24:8c:85:99:96:6f:83:64:
         28:b8:ee:ce:0a:b0:8b:62:c2:a2:d5:d1:5d:11:16:67:2d:c2:
         03:75:72:4c:68:2f:c8:14:e1:d4:f3:7f:de:9b:b7:a7:2c:4f:
         37:cb:62:0c:79:3e:c7:bd:79:27:7b:9c:ae:a7:34:bf:cc:e6:
         3e:95:e9:1d:9a:26:e0:93:fa:8f:c6:a3:6e:c0:d3:66:fd:c7:
         84:8c:d6:2e:57:35:82:35:00:da:d3:31:a7:32:10:83:f8:fd:
         19:96:58:40:24:33:93:b7:fa:82:2e:5d:bd:e9:b3:da:63:53:
         50:d3:c4:a7:90:e7:4f:25:45:8b:a3:a3:38:dc:fe:d8:2e:6c:
         6e:28:37:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:12 2025 by rpki-client