Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
File:                     RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft (raw, json)
Hash identifier:          vVzL+7zJQS7YY35z+vGSu5XJZ2dgdvpfomV/4w7dmWI=
Subject key identifier:   64:54:38:28:3E:27:BD:A4:ED:B5:0A:83:08:37:17:35:FE:9D:FA:D2
Authority key identifier: 46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
Certificate issuer:       /CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Certificate serial:       0194BBCE082B90012F7EAD3A247D6EC959B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
Manifest number:          068C
Signing time:             Fri 31 Jan 2025 10:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:29 +0000
Files and hashes:         1: RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl (hash: OVTaoCK2CP7NiKCrPfz7xLNHbyMkB9MpcX+ST5oUfLw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:08:2b:90:01:2f:7e:ad:3a:24:7d:6e:c9:59:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
        Validity
            Not Before: Jan 31 10:00:29 2025 GMT
            Not After : Feb  1 10:00:29 2025 GMT
        Subject: CN=645438283e27bda4edb50a8308371735fe9dfad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:fe:7e:28:03:3c:f4:ac:92:66:de:ca:8c:
                    e9:ce:33:09:c9:05:7e:b6:b9:bd:37:48:dc:6e:0e:
                    cf:91:85:e6:a5:91:af:b7:64:7c:3f:90:2c:98:ea:
                    c4:e2:aa:1b:50:d9:0f:4c:bb:da:fc:df:01:2e:30:
                    b2:ea:4b:d6:f4:e9:89:1b:c6:3a:bd:0a:4a:c6:63:
                    b0:b0:84:87:da:d0:b2:03:04:db:7d:87:e9:de:28:
                    e3:9b:cc:dd:e3:75:0a:88:25:f2:76:73:91:c6:b0:
                    47:08:44:19:9c:27:5a:14:1f:5b:04:b8:6e:b2:c0:
                    bb:55:84:aa:2c:ca:ba:df:c9:3a:5e:61:b7:5b:c5:
                    0b:79:16:0e:95:b2:b7:6a:88:51:2b:09:86:d5:01:
                    86:ef:50:10:37:d9:b3:27:37:7a:6d:21:2f:96:f1:
                    a6:5f:34:65:67:ff:f6:6d:da:d1:c9:ef:0a:58:44:
                    12:17:43:2e:f6:ab:64:ae:2e:d9:20:0e:cf:de:1a:
                    bc:26:db:2d:27:5a:68:45:0e:ba:18:b3:70:be:f6:
                    27:6f:00:cd:c8:85:fc:e5:b3:56:80:8e:1d:a7:39:
                    94:5b:cb:a6:c1:db:63:71:26:bb:ff:5a:d5:6a:80:
                    51:de:f2:1e:f6:ae:a5:c9:89:ea:09:53:26:33:67:
                    04:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:54:38:28:3E:27:BD:A4:ED:B5:0A:83:08:37:17:35:FE:9D:FA:D2
            X509v3 Authority Key Identifier:
                keyid:46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ae:78:50:92:1f:35:aa:f8:8e:d1:4c:03:24:dd:f1:2d:96:
         51:b0:fd:af:ee:ea:1e:cd:4e:b1:61:4c:fc:53:e3:1a:57:47:
         66:ad:5a:47:2e:07:e0:dd:ae:49:40:e8:d9:b7:44:5e:90:0d:
         76:ed:7f:dc:e5:01:24:b4:3c:0f:eb:fc:fb:fe:c7:eb:b5:05:
         cb:31:1b:fc:95:79:bd:c6:84:04:cd:57:6a:fb:f0:c2:19:9c:
         eb:63:82:68:ee:3d:40:98:84:89:91:7e:24:86:a4:f7:be:22:
         f4:03:6c:f4:a7:e2:86:7b:6a:69:38:17:21:2f:89:35:23:fe:
         dd:6a:b6:a6:fa:62:8e:f7:20:fa:3d:3a:37:f5:ed:07:3d:33:
         fc:33:8b:4a:ea:49:c0:ac:ab:0e:ec:08:98:35:2d:4e:5f:9d:
         bb:86:2e:4c:f5:50:59:b2:ed:fb:93:09:9f:f4:65:82:91:64:
         9a:a0:0a:dc:32:54:35:9f:64:d4:2b:dd:8c:10:2f:50:ce:0a:
         b1:a1:f4:6c:61:30:e5:cc:7a:69:d4:ba:e0:e3:5d:a0:e5:b3:
         95:11:4d:2d:7b:76:a1:3c:7f:1e:98:3b:10:b1:c5:b4:d2:be:
         54:6a:16:4f:d6:96:b4:98:f2:03:36:d4:d4:cd:f2:a0:05:d8:
         1d:c4:16:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:18 2025 by rpki-client