Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
File:                     Sqk04w2mkOdRcTO30hJjJlWnS4c.mft (raw, json)
Hash identifier:          Upom2LwPnSrhkv3JLQm1yPbvQzM+LrGZRHhclboQ5eM=
Subject key identifier:   54:FB:8D:F2:E2:58:42:69:37:7C:78:5D:DF:FA:F0:2F:81:2F:59:C5
Authority key identifier: 4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87
Certificate issuer:       /CN=4aa934e30da690e7517133b7d212632655a74b87
Certificate serial:       01979B9770B9AFA53866910B720912818DF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
Manifest number:          0EA3
Signing time:             Mon 23 Jun 2025 07:01:22 +0000
Manifest this update:     Mon 23 Jun 2025 07:01:22 +0000
Manifest next update:     Tue 24 Jun 2025 07:01:22 +0000
Files and hashes:         1: Sqk04w2mkOdRcTO30hJjJlWnS4c.crl (hash: Os4jnVZU2qmw/dCgueIBH1r1rYyYegD10K+VwXFZ4Sk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:9b:97:70:b9:af:a5:38:66:91:0b:72:09:12:81:8d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aa934e30da690e7517133b7d212632655a74b87
        Validity
            Not Before: Jun 23 07:01:22 2025 GMT
            Not After : Jun 24 07:01:22 2025 GMT
        Subject: CN=54fb8df2e2584269377c785ddffaf02f812f59c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3b:ed:64:f9:6e:27:8b:f5:2b:5d:95:d5:d3:
                    1b:dd:66:dc:8a:59:be:04:a1:28:20:92:19:55:50:
                    ab:eb:45:10:d2:48:63:52:b6:29:81:b6:aa:e0:e3:
                    61:ad:b8:a2:80:de:1c:eb:2c:13:e0:51:51:16:3d:
                    58:d9:19:a9:ef:7e:65:c9:79:83:76:e2:db:7d:4a:
                    32:4b:02:24:7d:9e:7e:22:e1:47:a4:c4:ea:4e:91:
                    fc:a5:03:ea:73:b4:c0:0d:4c:ba:a7:f6:ee:be:6f:
                    f5:c4:18:7e:87:b8:46:05:0b:42:64:8e:27:8a:6f:
                    de:26:ca:84:64:a8:23:74:e3:5d:f6:9d:c5:ba:90:
                    02:0e:d4:f4:c0:c2:28:38:94:5f:88:cd:2d:fe:00:
                    33:a3:41:6c:c3:6d:80:1f:3c:40:e4:59:21:f0:cb:
                    89:66:99:af:74:8a:76:28:7a:fc:8d:3f:8a:d0:7c:
                    09:e7:6a:0c:85:88:04:fe:e8:65:21:ee:b4:42:ba:
                    ad:ba:52:dc:d6:d3:58:79:39:b9:fa:9b:4e:ad:fe:
                    52:25:31:de:14:94:4b:16:52:8e:b1:66:5f:58:f6:
                    32:9a:61:b6:af:03:43:14:2f:f8:c1:ed:b2:75:a3:
                    f4:17:77:59:f5:c9:b3:f9:1c:67:5a:cd:27:8f:d1:
                    3e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FB:8D:F2:E2:58:42:69:37:7C:78:5D:DF:FA:F0:2F:81:2F:59:C5
            X509v3 Authority Key Identifier:
                keyid:4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:94:ad:52:d4:bf:1d:57:b2:08:36:e4:e1:e2:af:22:65:df:
         f1:f1:2e:02:7f:a9:86:2d:a4:52:4c:43:e3:cc:50:52:52:23:
         cb:8e:40:a6:9e:ab:74:a8:7d:7c:27:87:04:23:57:62:0c:db:
         6b:c3:e9:8b:25:af:91:5d:89:2d:6c:69:0b:ff:08:d9:d3:8c:
         20:b0:53:b1:eb:92:ea:48:6c:89:c4:29:ce:7a:80:cb:36:9e:
         44:69:d0:ad:03:87:c8:a2:45:f8:bc:6c:2b:84:7f:33:51:bd:
         7f:20:3b:0b:1c:ea:02:94:e4:df:c1:52:8a:59:6a:f2:2e:42:
         53:d4:d5:c5:c7:01:1e:27:f8:74:cf:11:81:b7:f4:fa:e8:1c:
         6b:0e:da:5d:2b:dd:77:2b:55:2f:a6:61:ef:b2:50:92:a7:4f:
         70:38:7a:ee:17:60:92:71:93:7f:2e:0a:ce:d4:81:60:6b:28:
         6f:2b:95:bd:e3:65:30:f0:55:55:9e:ce:25:6d:e8:dc:bd:9d:
         98:06:c8:f9:6b:6c:b5:d9:df:2f:3e:99:b0:e1:e3:74:bd:9f:
         dd:52:db:e0:e7:2c:83:b6:af:b7:93:78:49:c3:21:b0:1c:52:
         6c:d3:2d:48:51:0c:9e:23:b3:b0:a7:e7:ad:e0:79:ae:14:2e:
         c2:d6:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:43:11 2025 by rpki-client