Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.mft
File:                     3W6a_JMYMzgCLH2PGGr3GXOu9bo.mft (raw, json)
Hash identifier:          k3MgqJafOr3GxH/xcJ96Ne08x8UBDXJ1XT5lt9J17Jw=
Subject key identifier:   B7:8D:CF:51:85:18:9B:28:63:54:DD:E1:29:7A:95:47:6F:EB:B1:13
Authority key identifier: DD:6E:9A:FC:93:18:33:38:02:2C:7D:8F:18:6A:F7:19:73:AE:F5:BA
Certificate issuer:       /CN=dd6e9afc93183338022c7d8f186af71973aef5ba
Certificate serial:       01956D7A2B46598934FE2B6051EDDB5C3840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3W6a_JMYMzgCLH2PGGr3GXOu9bo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.mft
Manifest number:          0EE3
Signing time:             Thu 06 Mar 2025 22:01:17 +0000
Manifest this update:     Thu 06 Mar 2025 22:01:17 +0000
Manifest next update:     Fri 07 Mar 2025 22:01:17 +0000
Files and hashes:         1: 3W6a_JMYMzgCLH2PGGr3GXOu9bo.crl (hash: jUNAkxcmdofGo5rlc3ZUSitB8z/QWFPQjAdaANpz9G0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:6d:7a:2b:46:59:89:34:fe:2b:60:51:ed:db:5c:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6e9afc93183338022c7d8f186af71973aef5ba
        Validity
            Not Before: Mar  6 22:01:17 2025 GMT
            Not After : Mar  7 22:01:17 2025 GMT
        Subject: CN=b78dcf5185189b286354dde1297a95476febb113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:81:19:c4:68:ac:29:a6:0a:a6:3b:5e:59:cc:
                    8f:99:2f:72:72:85:9d:a8:cd:89:26:a9:33:be:87:
                    65:3e:d5:ea:1d:28:06:39:21:a3:77:4d:df:17:0e:
                    68:e3:c6:e5:2e:c1:13:f9:8c:ec:a6:83:80:ae:53:
                    de:a6:f7:04:45:a5:ba:d0:3b:d7:fc:57:e7:28:8b:
                    36:2d:b1:74:6b:a9:f8:04:6d:70:a9:f3:27:f6:67:
                    e8:54:43:32:51:ee:e5:ef:75:cd:9c:78:5c:09:91:
                    d4:dd:ad:c8:23:d2:d0:10:9f:e0:69:82:49:b9:a2:
                    77:9b:55:0e:bf:de:73:db:ce:1a:21:ee:67:7b:03:
                    0d:ee:d8:74:4a:c0:bf:9c:96:20:02:ad:95:b8:48:
                    f3:7f:1c:05:4b:82:a8:98:98:94:98:f7:2a:97:8f:
                    31:68:b9:45:60:6a:79:f9:f2:b1:d8:6a:3c:e1:bd:
                    b2:43:9f:10:c8:ad:7a:88:b8:76:88:24:59:ba:7f:
                    0d:9e:85:3c:79:fd:fa:9b:50:47:55:d3:e8:8a:60:
                    f5:47:fe:35:be:ee:0c:c2:99:d7:5d:be:ea:62:8a:
                    f1:29:59:64:cb:58:c4:24:1e:f9:e9:4c:7d:dc:15:
                    97:db:70:41:e6:14:36:8c:4b:3b:0c:02:f2:41:ca:
                    e2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8D:CF:51:85:18:9B:28:63:54:DD:E1:29:7A:95:47:6F:EB:B1:13
            X509v3 Authority Key Identifier:
                keyid:DD:6E:9A:FC:93:18:33:38:02:2C:7D:8F:18:6A:F7:19:73:AE:F5:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W6a_JMYMzgCLH2PGGr3GXOu9bo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5d3a83-ea9f-4d83-b06b-a35b1bb3dfbd/1/3W6a_JMYMzgCLH2PGGr3GXOu9bo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7e:bf:d9:51:31:6d:eb:04:d6:ae:40:d4:d8:b4:bd:ed:1c:
         44:56:5c:14:df:c0:e7:14:72:fd:cf:57:0d:a6:f5:c2:34:b2:
         1e:4f:15:20:6d:f2:97:a6:9c:45:52:bd:86:8c:38:7e:71:b2:
         66:4a:33:95:c6:5b:2f:a5:09:2a:56:ea:46:22:c3:38:8f:76:
         f7:be:c4:49:e3:1c:f5:b6:9b:05:29:39:f4:b3:0f:84:4f:5b:
         4d:d7:5e:4f:ca:33:e2:2c:75:de:de:86:28:f1:29:55:56:51:
         fa:ca:10:98:96:52:c3:64:56:e7:90:02:61:69:5a:dc:dc:89:
         e0:5a:90:14:52:2f:f8:e4:c2:f2:ad:ff:8e:99:ec:71:a2:79:
         a1:46:39:a5:7f:64:6c:9a:0d:b7:05:f9:8a:33:44:7d:62:db:
         c3:2b:43:f9:f8:99:c3:f2:06:6c:df:4a:ef:01:88:88:0a:2a:
         1e:f5:41:0e:bc:53:8e:da:8d:5e:43:00:20:da:ed:20:df:a1:
         75:f1:cd:76:01:1e:1c:e1:f8:14:19:80:98:b8:ac:09:4e:04:
         69:69:6f:32:38:51:72:bf:86:d0:9d:be:54:45:69:14:25:9c:
         07:68:3b:92:0f:e5:b7:20:a3:c7:77:5a:15:13:d4:94:1b:17:
         bd:31:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:27:38 2025 by rpki-client