Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
File:                     au6rXTwAHVetswh4EhecgpIouCE.mft (raw, json)
Hash identifier:          EB/TjBTFbYBDkJiDNkrSK/KyxK1jpPKWy4XNN62eh4s=
Subject key identifier:   A3:1D:71:23:A0:F2:B0:EA:EF:83:BC:71:48:E8:C4:E0:37:7F:FF:71
Authority key identifier: 6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21
Certificate issuer:       /CN=6aeeab5d3c001d57adb3087812179c829228b821
Certificate serial:       0194BBCDFBB66CC1D0AF6DC0A54F6086A642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 10:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:26 +0000
Files and hashes:         1: au6rXTwAHVetswh4EhecgpIouCE.crl (hash: TjgJu3ivVnNggMldmH9H/wAKaPJPSvP7GjmCQXCmekc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:fb:b6:6c:c1:d0:af:6d:c0:a5:4f:60:86:a6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aeeab5d3c001d57adb3087812179c829228b821
        Validity
            Not Before: Jan 31 10:00:26 2025 GMT
            Not After : Feb  1 10:00:26 2025 GMT
        Subject: CN=a31d7123a0f2b0eaef83bc7148e8c4e0377fff71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:a5:eb:29:d0:53:4b:11:ce:e8:89:86:8e:
                    a5:d2:f4:3e:55:14:1f:be:18:55:03:9e:c6:a2:78:
                    d3:14:1c:0d:4c:d1:40:b9:02:3e:88:16:5c:c4:c9:
                    8c:7a:46:c8:9b:f7:42:59:ff:98:58:98:ff:07:dd:
                    43:e8:1b:9c:15:b4:5e:8c:23:4a:ed:39:34:42:2f:
                    60:f1:a0:86:01:94:ac:5d:6a:50:4a:3f:e4:d7:3d:
                    1b:e8:b6:8e:f5:fd:c3:be:95:3d:3d:bf:4b:68:43:
                    dd:00:0a:c4:6b:3c:cc:01:7d:68:95:6a:4f:52:f0:
                    17:b8:f7:01:34:23:8d:95:d3:a2:bb:64:a7:b6:3a:
                    05:35:ed:db:d6:6b:33:78:9f:f8:34:27:7a:fc:aa:
                    e9:a7:96:04:48:29:19:6a:db:42:11:10:6b:b7:e8:
                    42:d4:e4:e4:1a:ab:66:f8:5b:5e:11:3a:46:08:8b:
                    94:73:92:8f:62:91:65:a5:63:0c:93:1d:79:77:69:
                    ef:40:b7:32:75:08:f2:52:c9:7c:35:b7:55:fb:32:
                    93:91:94:72:9a:a9:85:1e:04:67:53:e7:f2:a7:aa:
                    23:f3:e4:9c:bb:a5:ed:9f:5c:0f:98:7f:1f:ae:90:
                    43:51:c6:ad:b7:40:d9:15:12:c8:d9:ef:8c:79:ad:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1D:71:23:A0:F2:B0:EA:EF:83:BC:71:48:E8:C4:E0:37:7F:FF:71
            X509v3 Authority Key Identifier:
                keyid:6A:EE:AB:5D:3C:00:1D:57:AD:B3:08:78:12:17:9C:82:92:28:B8:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au6rXTwAHVetswh4EhecgpIouCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/dffb9c-4f2c-483d-a6f4-1330f44a39d6/1/au6rXTwAHVetswh4EhecgpIouCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f3:ed:53:1d:93:80:cb:17:ef:21:21:4b:55:ec:5d:16:f5:
         92:18:37:78:ea:da:73:a6:ab:97:55:8b:23:a9:57:97:c8:90:
         73:8c:95:c2:62:35:05:d2:59:73:30:71:fc:fe:c4:0b:c8:23:
         d7:5c:04:3c:79:02:b1:a5:e2:64:48:55:9e:85:1e:50:09:35:
         ec:fe:46:4f:ed:4a:9c:4e:3b:20:e7:85:64:80:bf:11:b1:0d:
         1d:fb:55:57:e1:06:e7:a3:b5:7f:9c:53:71:c9:61:6e:97:18:
         ea:61:2b:be:25:f0:20:ae:f9:f7:b9:cf:cf:71:9e:af:a6:f8:
         cd:6a:fc:9b:a3:9d:bc:7a:6e:0f:6d:1c:f2:82:cb:79:78:ad:
         d2:85:65:34:61:e9:4c:3c:fc:a7:65:dc:a9:99:10:7d:91:69:
         d1:80:7d:0a:bb:96:65:fc:4b:b4:8a:5b:7d:f6:40:15:75:09:
         c0:0e:5a:72:1f:5d:7b:01:c9:db:12:9c:94:c6:a3:fc:09:b9:
         b7:e0:96:57:cb:1b:d8:cc:e8:c7:31:4d:a4:79:4a:9e:72:23:
         f3:ce:b6:8a:3e:cb:ec:39:10:25:b1:ad:e3:4c:95:81:e0:a6:
         e5:1b:a4:11:c6:9e:a9:ee:fa:17:22:45:f2:57:8b:00:45:12:
         55:9c:6a:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfu2bMHQr23ApU9ghqZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZWVhYjVkM2MwMDFkNTdhZGIzMDg3ODEyMTc5YzgyOTIy
OGI4MjEwHhcNMjUwMTMxMTAwMDI2WhcNMjUwMjAxMTAwMDI2WjAzMTEwLwYDVQQD
EyhhMzFkNzEyM2EwZjJiMGVhZWY4M2JjNzE0OGU4YzRlMDM3N2ZmZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdil6ynQU0sRzuiJho6l0vQ+VRQf
vhhVA57GonjTFBwNTNFAuQI+iBZcxMmMekbIm/dCWf+YWJj/B91D6BucFbRejCNK
7Tk0Qi9g8aCGAZSsXWpQSj/k1z0b6LaO9f3DvpU9Pb9LaEPdAArEazzMAX1olWpP
UvAXuPcBNCONldOiu2SntjoFNe3b1mszeJ/4NCd6/Krpp5YESCkZattCERBrt+hC
1OTkGqtm+FteETpGCIuUc5KPYpFlpWMMkx15d2nvQLcydQjyUsl8NbdV+zKTkZRy
mqmFHgRnU+fyp6oj8+Scu6Xtn1wPmH8frpBDUcatt0DZFRLI2e+Mea0VTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMdcSOg8rDq74O8cUjoxOA3f/9xMB8GA1UdIwQY
MBaAFGruq108AB1XrbMIeBIXnIKSKLghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXU2clhUd0FIVmV0c3doNEVoZWNncElvdUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kZmZiOWMtNGYyYy00ODNkLWE2ZjQt
MTMzMGY0NGEzOWQ2LzEvYXU2clhUd0FIVmV0c3doNEVoZWNncElvdUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9kZmZiOWMtNGYyYy00ODNkLWE2ZjQtMTMzMGY0NGEzOWQ2
LzEvYXU2clhUd0FIVmV0c3doNEVoZWNncElvdUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/PtUx2T
gMsX7yEhS1XsXRb1khg3eOrac6arl1WLI6lXl8iQc4yVwmI1BdJZczBx/P7EC8gj
11wEPHkCsaXiZEhVnoUeUAk17P5GT+1KnE47IOeFZIC/EbENHftVV+EG56O1f5xT
cclhbpcY6mErviXwIK7597nPz3Ger6b4zWr8m6OdvHpuD20c8oLLeXit0oVlNGHp
TDz8p2XcqZkQfZFp0YB9CruWZfxLtIpbffZAFXUJwA5ach9dewHJ2xKclMaj/Am5
t+CWV8sb2MzoxzFNpHlKnnIj8862ij7L7DkQJbGt40yVgeCm5RukEcaeqe76FyJF
8leLAEUSVZxqyw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:22 2025 by rpki-client