Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft
File:                     IYCTB4hvuv261Th2Eu_-dxOHowA.mft (raw, json)
Hash identifier:          MZVqt82oms2atjzIahOv8IeLo6ApflW1/wHQFoDb+aA=
Subject key identifier:   77:82:87:EF:4C:77:50:56:C5:E7:97:A4:8E:E0:7C:57:40:B9:DB:E1
Authority key identifier: 21:80:93:07:88:6F:BA:FD:BA:D5:38:76:12:EF:FE:77:13:87:A3:00
Certificate issuer:       /CN=21809307886fbafdbad5387612effe771387a300
Certificate serial:       0194BBCE4343F7DD94A6312F8515F4E90351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYCTB4hvuv261Th2Eu_-dxOHowA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft
Manifest number:          056E
Signing time:             Fri 31 Jan 2025 10:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:44 +0000
Files and hashes:         1: IYCTB4hvuv261Th2Eu_-dxOHowA.crl (hash: AuUCmfWWpbx+IXAT3C79M3+ijvkKmT4n+aeBBGTjBOI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:43:43:f7:dd:94:a6:31:2f:85:15:f4:e9:03:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21809307886fbafdbad5387612effe771387a300
        Validity
            Not Before: Jan 31 10:00:44 2025 GMT
            Not After : Feb  1 10:00:44 2025 GMT
        Subject: CN=778287ef4c775056c5e797a48ee07c5740b9dbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d5:73:d8:47:26:8b:d0:90:de:3b:94:3a:26:
                    47:25:47:0a:5a:29:fa:9d:a0:3e:82:b3:0b:a6:6d:
                    bd:e2:69:17:d4:38:db:eb:19:ef:05:9f:95:cc:04:
                    57:2b:3e:27:16:bf:3e:9b:d3:f9:e8:a0:15:55:6a:
                    6a:be:93:f7:13:ff:7c:3a:2e:58:6d:02:4f:ed:23:
                    31:91:d2:ad:34:91:06:99:ba:10:68:51:d7:0f:6c:
                    97:e2:e2:fe:e7:44:15:74:c8:d0:9b:50:47:4e:bf:
                    b5:a1:d4:79:6e:19:47:11:20:fa:8f:ba:8c:e3:9c:
                    e8:e1:64:65:bd:76:e1:fc:8a:d0:bf:e7:f8:b3:44:
                    aa:a0:91:12:14:8b:11:4c:c8:99:17:54:82:e7:a0:
                    68:b6:62:5d:ec:1e:4f:79:52:41:a0:d6:44:89:11:
                    08:08:1b:3c:1b:4d:80:58:4d:cb:68:1c:e2:db:e0:
                    5d:15:c6:e5:e0:cf:29:70:17:7b:7a:09:f1:08:ad:
                    68:ba:63:9a:e6:1d:6d:44:70:4f:14:29:b3:bd:7d:
                    eb:a6:c2:cf:2d:d5:69:6d:d9:65:a7:c3:fb:3b:eb:
                    7d:ee:c5:61:d3:1a:28:cb:a8:5e:b2:2c:37:ef:1c:
                    57:a1:fc:e5:d5:94:25:42:46:cc:a3:02:02:31:30:
                    b9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:82:87:EF:4C:77:50:56:C5:E7:97:A4:8E:E0:7C:57:40:B9:DB:E1
            X509v3 Authority Key Identifier:
                keyid:21:80:93:07:88:6F:BA:FD:BA:D5:38:76:12:EF:FE:77:13:87:A3:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYCTB4hvuv261Th2Eu_-dxOHowA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:88:55:ec:8a:98:a1:13:69:3d:ac:fe:81:85:9e:bd:7c:b4:
         07:9c:6a:16:9f:aa:a3:9b:cb:a7:23:0e:b5:75:d6:2e:03:c7:
         07:01:94:34:bd:31:dc:7b:0b:cb:51:a6:32:68:49:24:e4:15:
         44:67:ca:54:cd:9c:29:e5:90:00:eb:46:e8:e7:de:40:88:35:
         8b:d0:be:eb:ee:6f:52:87:35:8a:a0:5e:3a:a4:4a:33:8f:73:
         7e:62:a1:60:e2:cf:f7:5f:68:dc:5a:55:6c:bd:07:66:b9:cd:
         f1:2f:fa:77:ad:7c:bc:fa:af:bb:52:bb:79:43:b2:6c:7b:15:
         74:72:d7:fd:5b:de:40:df:78:e6:40:49:17:ea:ff:0c:5e:47:
         27:a6:60:b7:50:37:3b:7b:e8:77:44:9e:6f:80:e1:f2:fd:f0:
         5b:a2:5e:dc:b3:39:13:d6:d8:b2:52:55:b3:ef:7c:ae:e7:05:
         a1:ca:2e:73:b7:08:ac:e0:20:d2:fa:bb:00:96:ac:1e:84:77:
         6c:50:73:89:48:95:96:f7:76:ad:b4:4c:74:c1:c8:fa:e6:33:
         7b:5f:b3:01:ba:33:0c:69:49:1d:72:4d:65:62:85:99:f8:1b:
         94:c9:b2:7e:19:44:ca:52:f7:cb:79:d6:7f:e2:58:b5:f3:21:
         4f:87:53:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:00 2025 by rpki-client