Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
File:                     jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft (raw, json)
Hash identifier:          e63I15/7PpTncpv3iBvTTRZyyWPVDnTOPFZpopUu9r4=
Subject key identifier:   F3:93:44:F1:5E:5A:E4:4D:9F:D3:E1:3E:7A:15:8B:3F:96:97:D1:42
Authority key identifier: 8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
Certificate issuer:       /CN=8c5002f639e81958d0f9b3585aed76707d2625de
Certificate serial:       0194BD17F4EA77D02CD781C6315855077A57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 16:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:51 +0000
Files and hashes:         1: jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl (hash: T0gt7JRFMYBo5r2SJZHTT45TiTLeh3iTbJLuGwzQ1Tw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:f4:ea:77:d0:2c:d7:81:c6:31:58:55:07:7a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c5002f639e81958d0f9b3585aed76707d2625de
        Validity
            Not Before: Jan 31 16:00:51 2025 GMT
            Not After : Feb  1 16:00:51 2025 GMT
        Subject: CN=f39344f15e5ae44d9fd3e13e7a158b3f9697d142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:15:44:a8:d0:f2:b6:8e:3b:fc:c1:49:54:
                    b4:e7:c3:0f:8e:5b:b8:d1:da:bf:c5:74:17:63:4a:
                    22:24:65:90:6b:e1:e9:d4:5b:47:fe:60:2a:e2:b4:
                    8f:18:fa:dc:43:09:37:39:d1:33:8b:10:e3:2d:1b:
                    47:d4:12:8d:bf:6c:90:8c:dc:fa:22:9b:9d:e9:ac:
                    8b:a1:3c:82:62:90:94:05:57:0d:0f:c8:dd:b6:d4:
                    8d:74:31:4d:5b:17:48:30:2a:70:73:dd:54:30:d9:
                    99:98:11:08:25:f9:b5:32:4a:4d:0e:e9:52:b0:fe:
                    73:77:18:60:16:cf:a9:19:0c:ed:62:7a:c8:bf:68:
                    86:32:48:30:49:bc:8f:de:13:75:5d:cd:04:7d:e3:
                    8f:4f:9f:18:35:bc:08:fc:3c:30:9e:d4:85:3d:c6:
                    89:0a:e3:cc:de:07:3b:42:5b:a7:4f:b6:fd:39:c3:
                    8c:45:a9:cb:59:a7:b1:7a:ed:73:11:40:b9:cc:1c:
                    64:ed:fd:b7:b5:ed:b4:bd:3b:db:c1:1a:59:19:26:
                    e9:b6:47:66:ef:5b:a2:56:c1:46:40:5e:f5:24:56:
                    03:66:6e:58:d7:0a:8b:36:72:79:4a:5f:68:71:23:
                    6c:c0:a6:9d:3f:7f:44:2e:f2:dc:d7:75:f1:a6:23:
                    66:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:93:44:F1:5E:5A:E4:4D:9F:D3:E1:3E:7A:15:8B:3F:96:97:D1:42
            X509v3 Authority Key Identifier:
                keyid:8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ae:82:40:4b:59:15:a8:0c:2a:73:c5:9e:9d:5d:aa:fc:b7:
         e7:96:07:f9:f0:48:56:d3:36:aa:4d:1f:ec:66:74:f9:49:33:
         3e:e2:30:8b:bb:d0:7a:a8:8f:cc:54:b3:dd:e4:76:92:7d:22:
         7a:fa:f5:55:c0:6f:6b:7d:86:b4:1b:66:56:14:8b:de:b3:59:
         24:eb:5b:77:e7:99:f6:c3:60:78:86:7f:7f:94:d0:4a:a4:f7:
         70:6f:a8:cd:b1:c7:05:63:6f:a5:df:0c:60:22:c9:0b:82:e0:
         8f:2e:ea:e6:f9:33:12:5f:71:c9:9c:f7:83:62:72:7f:94:04:
         93:d3:df:dc:9f:38:e5:d4:5e:71:ce:6e:63:12:77:8e:17:0c:
         a0:fd:79:0b:17:70:b9:2d:b7:ba:85:00:c3:7c:5b:ba:35:85:
         88:37:85:de:fd:91:ac:9d:9c:b2:93:e0:58:d9:01:28:97:08:
         a4:b9:98:6e:df:20:3b:53:07:10:cb:9e:3b:39:fd:ef:56:12:
         73:78:ee:5a:7c:b1:76:52:3d:11:20:d8:db:a0:23:0b:bd:ab:
         ba:2a:06:66:81:a8:c8:3a:60:8f:72:f7:26:e0:75:d4:f1:05:
         cf:e0:09:85:38:11:a4:57:96:42:c2:8d:7c:7c:67:cb:81:62:
         33:8f:2a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:35 2025 by rpki-client