Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File:                     BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier:          PXC/pLweCEjGyO2msZbdmMahL1AugX//Snaf5CGzT2U=
Subject key identifier:   E1:17:0D:5D:A5:75:8D:F9:4A:46:DA:4A:5E:F1:0F:18:40:A7:D5:D2
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer:       /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial:       0194BC73256968F2F4216C3B819D77F4A409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number:          09ED
Signing time:             Fri 31 Jan 2025 13:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:50 +0000
Files and hashes:         1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: vLmB/iPzpFWZYSawX5KoaXnfxfZqBGHKmZjIbJdVK+4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:25:69:68:f2:f4:21:6c:3b:81:9d:77:f4:a4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
        Validity
            Not Before: Jan 31 13:00:50 2025 GMT
            Not After : Feb  1 13:00:50 2025 GMT
        Subject: CN=e1170d5da5758df94a46da4a5ef10f1840a7d5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:04:69:df:ec:60:51:90:1b:5d:77:6a:d0:
                    c0:7f:7b:d7:c1:0c:28:ab:ed:9c:dc:3f:6d:5a:f9:
                    e1:98:5c:22:1c:43:43:ce:98:f4:33:6c:b6:79:a9:
                    70:e5:8c:cf:49:b0:75:70:e2:49:59:59:4f:da:5f:
                    d1:8e:c5:3d:da:35:7b:97:f9:2b:f5:8c:8f:1c:9d:
                    9b:fd:80:d6:1f:64:82:db:b3:00:af:63:0a:b6:95:
                    b8:4d:59:d4:d1:32:e7:34:47:8c:25:1d:a1:2e:67:
                    8c:3d:00:5b:35:e4:b5:b5:a4:d2:e8:2c:d6:a0:b4:
                    e6:4a:87:67:81:da:8e:6e:5f:d6:ce:b4:3f:64:2a:
                    51:de:08:ec:5a:fc:a8:89:76:f0:ee:fc:47:f6:d7:
                    ec:35:56:6c:65:0d:ff:55:8e:b9:f5:67:6e:c6:37:
                    45:8b:a2:03:48:8f:69:e7:a0:6e:c1:92:ab:88:45:
                    8a:1b:02:76:af:59:bb:bc:52:88:84:2b:fd:0e:d1:
                    b0:2c:08:e9:c4:e5:24:97:d7:79:c4:3b:2a:55:59:
                    88:d4:0a:28:97:56:89:97:c9:25:b1:ce:b3:33:fc:
                    27:18:7a:7c:c7:11:b1:6d:32:59:7c:6b:a4:22:7f:
                    7b:52:98:27:4c:07:9f:27:6f:5a:43:c6:63:fd:3c:
                    07:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:17:0D:5D:A5:75:8D:F9:4A:46:DA:4A:5E:F1:0F:18:40:A7:D5:D2
            X509v3 Authority Key Identifier:
                keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f0:92:e0:86:78:42:08:7a:e2:b8:f1:70:1b:0c:08:d4:80:
         b5:3d:ef:8f:7a:6a:cd:32:a7:ed:f0:85:ef:72:f2:ab:cb:dc:
         ca:d1:60:86:4d:62:c9:a7:54:ab:af:78:ac:9c:ea:77:6f:dd:
         7d:be:40:8c:15:f1:9b:3e:08:1a:be:62:44:18:76:e0:94:7f:
         59:d5:e1:7c:da:41:c8:a0:60:2a:cd:d2:a3:31:06:8f:f8:e2:
         6e:61:da:84:f3:32:62:9f:64:76:0c:4b:06:b9:21:3e:e6:ab:
         4e:16:7f:a2:84:7e:04:26:31:0b:db:26:5b:85:1c:cc:23:01:
         68:9d:02:83:76:82:28:17:ca:8d:fe:75:56:2e:18:12:8a:62:
         a5:36:6e:fe:33:16:1b:b3:e5:1f:aa:f6:bb:e0:74:64:8f:ac:
         c9:06:99:e8:ee:83:14:84:a7:76:c3:98:3a:ff:41:27:32:9a:
         5b:57:a9:61:53:07:86:fb:93:78:0d:3a:9c:40:2b:79:58:a1:
         61:a4:65:fc:e5:3a:c1:d2:ac:53:91:5d:b5:17:e7:c6:c7:ae:
         f6:5b:fd:15:d4:7b:ce:86:b5:ec:47:b6:64:6b:85:4f:b4:67:
         85:64:a6:34:fc:d7:56:b3:4a:6d:fe:71:6c:b8:f8:ff:3e:d6:
         45:6e:66:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyVpaPL0IWw7gZ139KQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzhlZTE2ZmY4YmMxODRjOGZhYTE3YWRhZjU5OWUzZmFm
MGNhNzEwHhcNMjUwMTMxMTMwMDUwWhcNMjUwMjAxMTMwMDUwWjAzMTEwLwYDVQQD
EyhlMTE3MGQ1ZGE1NzU4ZGY5NGE0NmRhNGE1ZWYxMGYxODQwYTdkNWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumQEad/sYFGQG113atDAf3vXwQwo
q+2c3D9tWvnhmFwiHENDzpj0M2y2ealw5YzPSbB1cOJJWVlP2l/RjsU92jV7l/kr
9YyPHJ2b/YDWH2SC27MAr2MKtpW4TVnU0TLnNEeMJR2hLmeMPQBbNeS1taTS6CzW
oLTmSodngdqObl/WzrQ/ZCpR3gjsWvyoiXbw7vxH9tfsNVZsZQ3/VY659WduxjdF
i6IDSI9p56BuwZKriEWKGwJ2r1m7vFKIhCv9DtGwLAjpxOUkl9d5xDsqVVmI1Aoo
l1aJl8klsc6zM/wnGHp8xxGxbTJZfGukIn97UpgnTAefJ29aQ8Zj/TwHoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEXDV2ldY35SkbaSl7xDxhAp9XSMB8GA1UdIwQY
MBaAFAQ47hb/i8GEyPqhetr1meP68MpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80OTBhMjYtZTFmNS00ZmQ1LWJiZmMt
ZmU0NGJiODhiYzIwLzEvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80OTBhMjYtZTFmNS00ZmQ1LWJiZmMtZmU0NGJiODhiYzIw
LzEvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifCS4IZ4
Qgh64rjxcBsMCNSAtT3vj3pqzTKn7fCF73Lyq8vcytFghk1iyadUq694rJzqd2/d
fb5AjBXxmz4IGr5iRBh24JR/WdXhfNpByKBgKs3SozEGj/jibmHahPMyYp9kdgxL
BrkhPuarThZ/ooR+BCYxC9smW4UczCMBaJ0Cg3aCKBfKjf51Vi4YEopipTZu/jMW
G7PlH6r2u+B0ZI+syQaZ6O6DFISndsOYOv9BJzKaW1epYVMHhvuTeA06nEAreVih
YaRl/OU6wdKsU5FdtRfnxseu9lv9FdR7zoa17Ee2ZGuFT7RnhWSmNPzXVrNKbf5x
bLj4/z7WRW5meg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:26:07 2025 by rpki-client