Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File:                     Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier:          /D1Yt67F3wvA+iwfxTbeXWSWravLJDAvbNjcwoBxuEg=
Subject key identifier:   54:08:8F:11:66:D2:31:F0:A8:6A:45:A3:50:05:F9:32:7D:FF:D2:95
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer:       /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial:       0194BBCECC3DBE7368FAA2B386D726219DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number:          1425
Signing time:             Fri 31 Jan 2025 10:01:19 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:19 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:19 +0000
Files and hashes:         1: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: YSnGnYAdukDREfF0OtaMqv61GUijlw2l1ubu618bRIc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:cc:3d:be:73:68:fa:a2:b3:86:d7:26:21:9d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
        Validity
            Not Before: Jan 31 10:01:19 2025 GMT
            Not After : Feb  1 10:01:19 2025 GMT
        Subject: CN=54088f1166d231f0a86a45a35005f9327dffd295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:ae:16:88:03:19:99:8c:8c:10:82:29:62:
                    5c:30:e8:ec:ff:88:97:c2:a1:22:9e:e4:d9:47:35:
                    7b:e0:f8:80:0d:65:4c:23:83:fe:9e:d8:f1:8f:92:
                    c4:40:b8:ae:fc:d7:3f:96:03:1e:8e:f8:1b:31:9a:
                    21:21:48:3f:2a:d1:c4:75:23:8f:ce:f3:05:ec:fb:
                    4c:9d:af:ee:67:9f:be:b5:f1:90:2f:0e:3c:81:53:
                    71:1f:68:bd:a4:9a:3f:75:cc:2b:db:6f:25:89:50:
                    6d:a1:a6:e4:0b:c0:40:a1:ed:c9:df:51:1a:6f:8f:
                    04:1e:1f:7f:8a:0b:b3:42:0f:95:8b:b9:bd:0f:45:
                    be:e7:27:ff:9b:00:5c:4b:ff:24:12:a1:cb:a2:96:
                    65:07:05:0d:fa:42:07:d7:89:a5:c7:7e:85:9f:3c:
                    64:61:89:a8:2f:b5:66:cb:4c:8b:4d:a7:e3:63:50:
                    5c:41:4a:f2:18:24:4e:f3:b3:54:bd:5e:e6:65:75:
                    00:12:60:0f:66:55:38:9b:49:b4:ed:fd:33:a0:ea:
                    5a:ac:42:53:48:33:26:5d:f2:a3:da:b8:dc:ec:98:
                    73:92:12:e0:7a:27:21:74:3b:d3:64:55:cd:3f:b6:
                    a1:f9:e2:eb:7c:18:6f:7d:78:fb:0f:34:47:27:10:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:08:8F:11:66:D2:31:F0:A8:6A:45:A3:50:05:F9:32:7D:FF:D2:95
            X509v3 Authority Key Identifier:
                keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:88:ff:a3:43:df:f9:8c:b6:73:5b:d7:78:cd:ff:15:ac:57:
         d2:8c:93:06:90:56:20:59:88:81:a4:e8:fd:1f:85:f4:8f:9f:
         2b:3c:f9:2c:bb:4b:42:02:8b:ec:48:3e:93:58:bf:bf:ba:fb:
         e8:26:f5:60:03:7e:3f:70:64:35:bd:a2:62:f3:05:56:e5:16:
         10:73:c9:1b:84:91:c7:e0:7b:d7:b9:e5:b9:43:22:33:e2:fe:
         ea:c9:9d:e9:02:77:84:19:ed:18:5f:ea:29:4c:72:cc:a0:95:
         8d:23:a1:99:86:01:ec:f0:42:47:fe:1a:87:1a:20:40:8a:87:
         72:9c:4f:34:80:a6:e6:c5:83:fc:ad:10:dd:2f:63:84:2e:23:
         b7:c6:60:20:d5:52:05:a4:e1:6e:45:de:1f:fe:bc:8a:b7:36:
         0e:3f:b0:80:aa:41:61:bd:05:17:d8:36:83:94:19:78:13:f5:
         fc:62:d5:a9:37:2e:bc:fc:3d:04:eb:e6:a2:a4:b2:fa:e4:10:
         df:ea:fa:f5:68:bc:e3:ba:a0:e9:80:71:30:3f:05:4e:95:7f:
         54:41:bc:b7:9c:78:8c:ad:3b:27:ec:26:5c:7e:b7:3e:80:db:
         4a:06:e8:fb:69:9c:5f:d0:00:9d:cd:4b:8a:59:a3:85:57:be:
         76:8f:6e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:59 2025 by rpki-client