Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
File:                     1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft (raw, json)
Hash identifier:          RbK1h9Oa1kIHGdZlMUpIwXq/CsQqKYMUY7JQVghIn1E=
Subject key identifier:   63:30:7E:47:FA:E4:20:1F:9E:D0:91:B4:27:47:37:90:77:91:05:AB
Authority key identifier: D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC
Certificate issuer:       /CN=d5468f54c0d49581f69b54383d5573ff775620ec
Certificate serial:       0194BCE08EE894CD70DF1ABAB071C670C8AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft
Manifest number:          0813
Signing time:             Fri 31 Jan 2025 15:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:20 +0000
Files and hashes:         1: 1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl (hash: +w+6NWDVJpEzYF72wD4SAgphFNAZ6B7aAQ2GrWc34us=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:8e:e8:94:cd:70:df:1a:ba:b0:71:c6:70:c8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5468f54c0d49581f69b54383d5573ff775620ec
        Validity
            Not Before: Jan 31 15:00:20 2025 GMT
            Not After : Feb  1 15:00:20 2025 GMT
        Subject: CN=63307e47fae4201f9ed091b427473790779105ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:46:87:04:f8:5a:52:c9:60:5a:5a:dd:06:f2:
                    96:d1:05:ef:ae:b4:a3:21:63:27:71:33:4e:f9:99:
                    ff:22:a6:53:20:6b:4d:c0:da:71:95:9e:b9:8c:35:
                    71:b3:9a:85:a5:be:f4:15:6e:d0:a2:3d:db:a8:fa:
                    e9:0a:cc:60:97:a4:a6:d3:c0:4a:5a:5d:40:2b:aa:
                    0c:ac:0a:f0:22:c9:34:61:7c:49:f7:0b:ab:16:8d:
                    0c:b6:c9:0d:7c:e8:ae:27:35:f2:8f:45:ac:3d:75:
                    a9:90:e0:b4:bc:0f:9e:b7:3b:91:80:cf:e1:68:7a:
                    b1:e2:57:63:a5:a7:c8:55:3b:75:86:1c:70:3a:dc:
                    7d:5d:52:b9:67:0c:61:e0:1f:d0:35:e0:6a:b8:b4:
                    34:7f:f5:0b:87:82:b5:cf:0e:80:3e:f3:d4:45:eb:
                    d2:f4:fa:fe:f9:8e:d1:d7:b8:8d:72:46:63:c2:84:
                    00:85:f8:98:e5:f3:68:ab:71:18:35:5f:c2:5b:13:
                    ef:7f:90:10:94:1f:ee:e1:b8:4b:b1:4b:13:cb:1c:
                    bc:57:39:e9:5b:a5:4a:7f:f6:f5:b2:26:3e:80:80:
                    da:7b:4b:7a:43:c6:b6:76:a0:d8:77:9f:a7:40:b9:
                    26:f2:49:b2:e3:6f:0e:19:ed:5c:22:47:1a:48:77:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:30:7E:47:FA:E4:20:1F:9E:D0:91:B4:27:47:37:90:77:91:05:AB
            X509v3 Authority Key Identifier:
                keyid:D5:46:8F:54:C0:D4:95:81:F6:9B:54:38:3D:55:73:FF:77:56:20:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5e8421-1b41-4567-89a4-2c5a7ab49319/1/1UaPVMDUlYH2m1Q4PVVz_3dWIOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3e:06:64:de:8e:6b:18:99:8a:61:0f:9d:a6:00:db:2d:9d:
         77:6c:4b:c9:11:dd:5b:7f:88:71:e2:2e:69:8b:8c:e7:28:52:
         47:8e:e7:f7:be:12:55:84:43:d9:ef:8b:02:fe:7b:35:c0:1a:
         fd:32:05:60:bf:0d:e9:18:cd:d7:ab:5c:c6:e8:7f:7e:73:d2:
         51:ed:73:e6:d1:c9:4d:93:2a:0e:86:8f:bb:9a:29:8e:7f:9b:
         8e:eb:0b:a1:bc:95:37:f8:50:f6:7f:1d:56:97:e0:bb:36:c8:
         ea:7a:9b:ec:e5:7d:e4:f6:80:70:b2:97:27:af:f1:80:55:5b:
         26:c3:93:73:0b:1c:24:eb:bd:6e:e9:f6:00:47:03:9e:c1:09:
         80:bf:83:3c:05:fc:24:8a:1d:84:bb:07:44:9d:ea:5c:2e:24:
         73:9a:5b:22:f1:f8:61:bd:a1:d7:92:68:88:78:35:2c:f5:db:
         27:23:89:6f:70:13:6d:e0:c0:8f:22:b4:73:5a:d6:9d:26:ae:
         24:ee:d5:26:5c:65:31:0c:b6:d2:64:a2:0c:9f:71:b2:e3:15:
         23:68:80:40:3b:78:6b:a8:09:17:15:ee:aa:0e:e7:bd:00:5e:
         02:05:28:81:db:08:8c:00:4f:fd:3c:31:59:69:64:6d:7b:b0:
         36:17:2a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:49 2025 by rpki-client