Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
File:                     FMuhsMMFzGL5KXwtmRiZRbl3leE.mft (raw, json)
Hash identifier:          LxdYOwTbVgNmpHcO5VRqp+VZvLyggk0zXcr0kh3G6gk=
Subject key identifier:   9D:3C:8B:6C:73:DF:7A:BA:A1:11:80:ED:C9:8F:AC:12:5B:60:9F:E3
Authority key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Certificate issuer:       /CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Certificate serial:       0194BD1785B21EB66B95128D749057F09F6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 16:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:22 +0000
Files and hashes:         1: FMuhsMMFzGL5KXwtmRiZRbl3leE.crl (hash: 6X8D5DMtBdtBhjPLu9VKiAv6RLMYWsBtKZsuZb5FC3k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:85:b2:1e:b6:6b:95:12:8d:74:90:57:f0:9f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
        Validity
            Not Before: Jan 31 16:00:22 2025 GMT
            Not After : Feb  1 16:00:22 2025 GMT
        Subject: CN=9d3c8b6c73df7abaa11180edc98fac125b609fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:39:c5:f7:08:70:92:72:87:fc:da:05:cb:2d:
                    b8:b9:43:99:6e:06:20:9f:8b:05:70:36:c9:e7:1e:
                    1e:c3:71:70:79:99:75:3a:7e:40:ae:48:db:02:f0:
                    94:45:3f:c8:ed:aa:ae:8d:5b:0c:b2:5f:b9:7d:3a:
                    43:4a:60:7e:71:49:61:45:39:d5:3c:3b:4f:1c:7f:
                    df:84:78:3c:64:b6:b8:1f:db:c6:b0:14:7d:6e:45:
                    d2:e3:a4:64:ca:e0:4a:90:09:06:46:e6:59:1d:3b:
                    93:c3:b5:56:b3:e2:ef:fd:81:d4:63:08:c0:7d:fa:
                    e4:a4:2f:e7:4f:3c:ab:4a:cf:94:10:21:47:48:d9:
                    23:89:d3:b3:fd:f8:80:04:c3:d3:b1:6f:48:5c:3b:
                    50:8c:cf:49:35:d5:24:47:ca:86:7e:4f:cf:6d:3a:
                    c7:56:0f:bc:cb:c0:c7:81:3c:6e:84:3b:5f:02:63:
                    8b:cc:3a:4f:36:59:06:59:15:3c:67:f1:bf:74:cb:
                    7b:ad:6f:25:7c:54:7c:52:1b:c3:8b:56:15:b5:28:
                    fb:9d:3e:fa:6e:11:9b:69:95:93:4f:20:d2:27:92:
                    29:c1:d1:1c:cc:48:37:b3:bb:cb:f8:5b:7c:65:cd:
                    f1:5c:77:81:43:3a:82:f2:5b:b7:a2:ca:51:a3:e5:
                    dd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3C:8B:6C:73:DF:7A:BA:A1:11:80:ED:C9:8F:AC:12:5B:60:9F:E3
            X509v3 Authority Key Identifier:
                keyid:14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c5:e7:26:01:5c:34:b8:11:59:bf:ba:09:26:04:2b:30:95:
         a8:a7:37:b3:50:4c:20:46:3f:f8:ec:ad:ac:fa:8c:25:64:66:
         59:7d:50:2b:93:0a:95:e5:b7:45:ca:7d:a1:e8:4c:52:c4:7e:
         8c:f6:67:70:d5:93:de:43:bb:3d:67:dc:f9:5c:1a:a2:d8:ad:
         60:7a:b0:93:24:cc:cd:e4:b4:3f:5f:bc:c6:ab:4b:b5:b3:f5:
         c9:2a:9d:50:7c:3a:4c:39:d6:b8:ec:35:75:ca:86:6b:71:47:
         e6:5c:14:a4:13:1d:f9:aa:3b:8e:62:c0:92:ce:75:13:58:71:
         99:51:1a:6c:1f:d7:53:35:d2:33:d5:ab:f2:97:7b:5d:01:c3:
         c9:b0:78:2b:1e:67:e2:1a:f8:78:a3:42:32:17:b7:85:16:ef:
         5c:0a:bd:2c:0b:0c:d3:ca:59:79:71:bb:4f:18:9d:c7:4d:40:
         d3:78:4b:75:4f:75:6e:66:ef:22:64:28:cc:52:be:c3:67:7f:
         d5:88:bc:46:05:f1:3f:f3:e3:80:84:e6:99:39:e7:ac:23:5e:
         ee:ef:66:4a:63:8d:f3:27:57:89:87:01:db:fa:4b:95:d9:1d:
         7e:7a:74:2d:be:86:1f:46:4b:b0:b3:91:75:cf:15:33:43:ad:
         ac:da:40:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:32:59 2025 by rpki-client