Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
File:                     lOvBA1TTG_33wdg1EN8N1mzoNaw.mft (raw, json)
Hash identifier:          q3yyL/yf75lbVltd5zvkmBOlpT7BAd0BDIqnGndoCV4=
Subject key identifier:   E2:21:97:12:4D:86:3A:DB:FE:2A:B8:1F:40:E9:65:2B:3B:AB:BD:A5
Authority key identifier: 94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
Certificate issuer:       /CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Certificate serial:       0194BBCEC624F66A462BC6FAD5402C659284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 10:01:17 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:17 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:17 +0000
Files and hashes:         1: lOvBA1TTG_33wdg1EN8N1mzoNaw.crl (hash: OtfXWv/aukqTTbOMP7aUjWBWO+T2mv6Orx1dThSSlY4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:c6:24:f6:6a:46:2b:c6:fa:d5:40:2c:65:92:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
        Validity
            Not Before: Jan 31 10:01:17 2025 GMT
            Not After : Feb  1 10:01:17 2025 GMT
        Subject: CN=e22197124d863adbfe2ab81f40e9652b3babbda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:09:c8:78:61:4a:7c:1a:39:3f:7d:20:0e:2c:
                    a3:92:aa:7d:54:c6:63:93:24:7e:fa:84:f2:f4:30:
                    ff:b6:b2:ec:22:dd:3e:9e:6f:dd:1b:34:5d:36:6c:
                    c2:54:df:e6:41:aa:f6:76:ff:3c:0d:34:c1:4d:90:
                    08:6e:f4:a7:b9:28:93:15:f7:83:71:82:ea:ff:1a:
                    84:6d:af:a8:ca:84:31:7e:fa:d2:ae:aa:f3:48:2f:
                    1d:93:57:fc:91:fb:02:d6:ff:fc:7e:63:05:fc:62:
                    4c:92:26:e9:c5:61:fa:ab:ed:d6:0e:46:f3:c4:12:
                    b1:50:b7:7b:a1:d8:d7:4c:a7:24:fb:a4:2b:9d:ea:
                    52:79:02:29:69:82:6d:71:18:ee:ee:f8:fa:63:6d:
                    5f:d8:f1:dc:55:6e:73:ac:29:9d:73:0a:e9:a9:77:
                    91:ef:b2:02:f0:ab:94:29:0f:66:e4:d5:f9:1c:2a:
                    43:66:54:05:16:20:ce:e7:ff:17:10:85:40:41:7e:
                    ab:47:b8:91:93:57:71:5f:a8:5f:9e:9e:c8:3f:4c:
                    53:d3:a9:c6:54:b5:e6:1d:a6:65:46:ac:3b:62:b6:
                    f6:ef:60:dc:5b:0a:92:b5:41:3d:a1:fd:6c:0a:a1:
                    30:14:d9:7c:26:40:d5:e3:c6:ee:9c:ac:33:63:d1:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:21:97:12:4D:86:3A:DB:FE:2A:B8:1F:40:E9:65:2B:3B:AB:BD:A5
            X509v3 Authority Key Identifier:
                keyid:94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fa:0f:2f:0f:26:62:5c:d9:b9:9b:8d:35:0a:69:e7:03:9f:
         5d:df:7c:30:67:c4:a5:42:2f:d3:64:30:06:6c:29:e8:97:41:
         3d:fc:06:df:22:8b:67:48:9e:8a:8f:33:6e:cb:ee:24:d5:4f:
         6e:52:cb:01:f2:e5:26:00:1b:1b:06:d0:96:0e:1c:b5:9c:45:
         a5:2e:f9:50:6e:03:f0:19:00:cb:93:b0:ff:6c:a0:38:72:64:
         7b:83:74:6c:15:e3:2d:0a:bf:18:14:a8:4a:cb:31:d7:01:a4:
         b0:d0:55:47:d4:01:c2:55:ea:da:0c:68:80:11:bf:96:e2:cc:
         3f:af:b8:9a:bd:0c:14:e4:29:4a:af:c3:57:d3:3b:db:57:f9:
         8e:29:21:92:47:b9:65:e7:45:c9:07:26:a3:34:bf:69:7d:a4:
         cc:c4:16:f1:d5:fb:6f:1c:41:20:90:c2:2c:a6:25:ff:1c:58:
         c8:a6:9e:c0:2b:5a:ac:47:76:0a:a6:af:6e:cd:55:6c:57:99:
         a6:73:bb:cb:cb:a4:ce:81:dc:73:a8:fd:93:ae:e6:0d:e0:f2:
         57:70:72:ab:93:59:9e:b8:fd:03:b1:df:d3:70:c6:33:40:23:
         07:82:2a:56:45:f7:95:18:70:34:33:6f:27:c6:f8:44:b1:0b:
         75:9e:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:19 2025 by rpki-client