Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
File:                     tLB5uhPORqvsf1vD893Ni7hnWQU.mft (raw, json)
Hash identifier:          JCmLfQFirlDbPIU5xywuSei/roigNMJxKekjXCkO7t0=
Subject key identifier:   25:58:97:47:4A:23:7C:9B:76:37:E5:C5:D4:99:F4:9E:51:96:AE:3E
Authority key identifier: B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
Certificate issuer:       /CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Certificate serial:       0194BBCE3DF3BAFC7A7A2D320D7E3CE27BF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 10:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:43 +0000
Files and hashes:         1: tLB5uhPORqvsf1vD893Ni7hnWQU.crl (hash: ijGp1TTL3EJ+3mwNmO6OTWt0NVL8GNdWW+GcIX2e5Pw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:3d:f3:ba:fc:7a:7a:2d:32:0d:7e:3c:e2:7b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
        Validity
            Not Before: Jan 31 10:00:43 2025 GMT
            Not After : Feb  1 10:00:43 2025 GMT
        Subject: CN=255897474a237c9b7637e5c5d499f49e5196ae3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:e8:6f:2a:f8:42:5c:b3:b1:13:cd:a3:75:
                    1d:a0:1f:08:81:60:d5:07:6e:45:92:d2:c5:7a:ac:
                    e3:f9:62:83:c5:d6:d3:41:1a:23:4a:f3:ba:2e:b8:
                    e7:18:be:d1:a8:05:c8:24:15:58:b9:0c:e1:1a:86:
                    1d:f0:41:98:1c:65:df:5b:3d:e5:41:31:6e:77:67:
                    6d:47:0d:22:ec:15:93:9b:e7:1c:3e:6c:f1:96:19:
                    ee:38:81:6c:9b:68:89:9f:27:03:69:63:8a:a6:e0:
                    00:ef:27:f0:b0:0d:29:0f:fa:36:0a:46:29:14:ab:
                    69:ce:9d:d7:13:bb:10:a9:fe:3b:62:11:5c:a8:fa:
                    12:b4:c4:04:5b:d2:95:38:f7:05:d7:4e:5e:9a:31:
                    ef:e7:a6:6f:e9:f7:a1:cc:b2:f7:29:c8:15:d9:9c:
                    c5:18:ba:ad:81:78:55:95:cd:6e:40:a3:12:50:09:
                    ca:af:77:87:ff:13:75:a9:d1:0b:8f:b7:e2:a7:15:
                    e1:24:ba:78:42:fb:ba:67:b2:58:70:be:03:31:97:
                    72:2e:ad:db:a5:4a:4e:dd:58:41:9d:cc:12:20:ea:
                    30:63:92:d1:81:ba:ba:3c:fd:38:6e:b0:97:c8:86:
                    f4:18:3b:b6:ab:c4:86:0f:b2:3b:36:c6:4f:e5:ac:
                    01:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:58:97:47:4A:23:7C:9B:76:37:E5:C5:D4:99:F4:9E:51:96:AE:3E
            X509v3 Authority Key Identifier:
                keyid:B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:f0:52:68:b1:76:ef:49:5a:ca:d6:5d:0d:46:2e:dc:82:03:
         00:c6:92:94:95:ff:40:71:15:e6:26:41:50:f7:7a:d1:7e:56:
         37:94:97:ac:2f:36:58:b2:83:aa:c1:0c:76:58:ae:7f:88:86:
         e3:4f:a0:f9:17:0d:50:c5:41:f9:d1:a2:b0:04:72:43:82:e0:
         1d:9b:93:8d:18:b0:94:3b:9b:74:37:35:e1:88:4f:7c:d2:0d:
         c3:13:a8:4d:42:12:37:df:3f:a5:df:31:cc:25:a6:f4:bc:73:
         f2:56:87:ab:d7:db:84:e9:eb:e4:ae:06:e9:1b:1d:06:3a:b1:
         97:5a:bd:1f:88:b2:34:87:6f:07:d7:03:94:40:eb:18:cc:b8:
         55:5b:83:15:08:c8:56:a2:f2:94:51:b5:4e:0b:06:a5:4a:d7:
         26:44:e7:e6:f7:ec:4f:3e:c3:4c:ba:59:a2:5e:b0:2e:56:0f:
         de:4d:97:b4:a9:a6:2c:18:38:45:39:b5:f7:db:56:ba:07:a2:
         78:18:ad:f1:88:e5:4a:03:37:68:e1:a5:71:fc:40:43:88:ec:
         a0:3b:d6:3d:c7:b3:31:bb:44:3e:30:5e:b1:75:81:52:1c:c4:
         7f:28:8e:fc:b9:a8:51:eb:10:8b:c6:b0:42:76:1c:ae:e4:3b:
         9e:a0:c4:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zj3zuvx6ei0yDX484nvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YjA3OWJhMTNjZTQ2YWJlYzdmNWJjM2YzZGRjZDhiYjg2
NzU5MDUwHhcNMjUwMTMxMTAwMDQzWhcNMjUwMjAxMTAwMDQzWjAzMTEwLwYDVQQD
EygyNTU4OTc0NzRhMjM3YzliNzYzN2U1YzVkNDk5ZjQ5ZTUxOTZhZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumbobyr4QlyzsRPNo3UdoB8IgWDV
B25FktLFeqzj+WKDxdbTQRojSvO6LrjnGL7RqAXIJBVYuQzhGoYd8EGYHGXfWz3l
QTFud2dtRw0i7BWTm+ccPmzxlhnuOIFsm2iJnycDaWOKpuAA7yfwsA0pD/o2CkYp
FKtpzp3XE7sQqf47YhFcqPoStMQEW9KVOPcF105emjHv56Zv6fehzLL3KcgV2ZzF
GLqtgXhVlc1uQKMSUAnKr3eH/xN1qdELj7fipxXhJLp4Qvu6Z7JYcL4DMZdyLq3b
pUpO3VhBncwSIOowY5LRgbq6PP04brCXyIb0GDu2q8SGD7I7NsZP5awBwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVYl0dKI3ybdjflxdSZ9J5Rlq4+MB8GA1UdIwQY
MBaAFLSweboTzkar7H9bw/PdzYu4Z1kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdExCNXVoUE9ScXZzZjF2RDg5M05pN2huV1FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kNDZhODEtMzczNS00MmM2LTliYmIt
MWQxNzk5YjU5Yzk5LzEvdExCNXVoUE9ScXZzZjF2RDg5M05pN2huV1FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kNDZhODEtMzczNS00MmM2LTliYmItMWQxNzk5YjU5Yzk5
LzEvdExCNXVoUE9ScXZzZjF2RDg5M05pN2huV1FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1fBSaLF2
70laytZdDUYu3IIDAMaSlJX/QHEV5iZBUPd60X5WN5SXrC82WLKDqsEMdliuf4iG
40+g+RcNUMVB+dGisARyQ4LgHZuTjRiwlDubdDc14YhPfNINwxOoTUISN98/pd8x
zCWm9Lxz8laHq9fbhOnr5K4G6RsdBjqxl1q9H4iyNIdvB9cDlEDrGMy4VVuDFQjI
VqLylFG1TgsGpUrXJkTn5vfsTz7DTLpZol6wLlYP3k2XtKmmLBg4RTm199tWugei
eBit8YjlSgM3aOGlcfxAQ4jsoDvWPcezMbtEPjBesXWBUhzEfyiO/LmoUesQi8aw
QnYcruQ7nqDETA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:50 2025 by rpki-client