Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft
File:                     q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft (raw, json)
Hash identifier:          5tsPGgCeivrOc3Eh/XRk8e28deTsVZ/JOig0f7/9Bdc=
Subject key identifier:   26:11:CE:19:C4:A2:80:91:97:FB:E9:0A:E9:9D:07:39:57:23:20:EF
Authority key identifier: AB:73:BF:62:BD:1A:3F:49:DD:92:49:07:8E:39:D1:B9:4E:AE:6D:2B
Certificate issuer:       /CN=ab73bf62bd1a3f49dd9249078e39d1b94eae6d2b
Certificate serial:       0197C31358A796051B31D924214D14BFECD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft
Manifest number:          1129
Signing time:             Mon 30 Jun 2025 23:01:54 +0000
Manifest this update:     Mon 30 Jun 2025 23:01:54 +0000
Manifest next update:     Tue 01 Jul 2025 23:01:54 +0000
Files and hashes:         1: q3O_Yr0aP0ndkkkHjjnRuU6ubSs.crl (hash: bnT5hWaspu4SXNk/Ik50owvZ0Jqq2ud/jUjhE0aHp+Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c3:13:58:a7:96:05:1b:31:d9:24:21:4d:14:bf:ec:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab73bf62bd1a3f49dd9249078e39d1b94eae6d2b
        Validity
            Not Before: Jun 30 23:01:54 2025 GMT
            Not After : Jul  1 23:01:54 2025 GMT
        Subject: CN=2611ce19c4a2809197fbe90ae99d0739572320ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:23:db:2a:8b:69:4f:95:b5:4f:a6:f4:bb:5f:
                    94:31:57:96:89:66:d4:62:30:fb:64:2e:39:5f:60:
                    27:f0:48:4a:ae:61:21:5f:2e:ad:f0:74:cf:0a:14:
                    22:2f:f6:41:66:45:45:07:84:18:f1:9f:d2:6d:67:
                    d9:10:64:66:43:c2:37:43:4f:54:4b:40:13:ac:e2:
                    e3:be:67:c4:06:57:8a:1f:5a:e9:7c:71:c6:ae:6b:
                    99:53:29:6f:e1:ae:aa:23:5a:5b:85:01:29:27:df:
                    69:91:00:8f:30:da:f4:9f:2e:1f:fa:c9:95:2c:ee:
                    f2:1f:91:fe:9f:1b:8d:af:41:a9:90:e9:bf:89:6a:
                    c5:22:b4:7b:f4:d8:e3:fe:b5:fa:0b:fb:2d:1c:2e:
                    cd:0e:77:28:69:8c:a8:70:78:66:0a:f0:b0:90:d9:
                    a2:16:95:e7:01:0a:f2:16:e0:9e:09:04:3d:de:63:
                    7f:5a:37:12:6e:ec:08:85:ea:e3:1b:f3:0b:23:8a:
                    d8:bc:4b:f7:40:1b:4e:e8:bb:43:b9:d2:b9:99:e4:
                    ac:c0:d1:ed:78:b8:44:59:bf:94:c3:de:4c:1d:02:
                    59:28:f1:2a:99:96:30:f3:34:cf:71:5d:89:4e:39:
                    e2:8f:2e:c2:57:c7:47:d3:d3:1b:ef:06:fe:1c:84:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:11:CE:19:C4:A2:80:91:97:FB:E9:0A:E9:9D:07:39:57:23:20:EF
            X509v3 Authority Key Identifier:
                keyid:AB:73:BF:62:BD:1A:3F:49:DD:92:49:07:8E:39:D1:B9:4E:AE:6D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0f:64:21:f1:52:9e:83:4a:bd:21:03:2f:6c:c6:a9:b6:fa:
         14:58:dd:e0:91:f7:4f:18:d8:98:27:f9:31:7a:1b:7d:d0:85:
         5a:8f:d2:f5:42:dd:b1:27:c0:37:4b:68:b0:8e:b0:a2:33:d8:
         ed:31:1d:72:d2:87:8e:0a:59:09:c1:4f:bb:63:cc:35:58:bb:
         dd:32:28:dc:ac:d5:a4:01:f3:04:b6:ac:dc:62:cb:97:4a:1c:
         58:19:79:b4:5f:5b:a1:7c:ea:76:5a:30:74:fd:16:a1:3e:d1:
         9a:ba:10:5f:64:09:94:cb:f0:0a:fb:2a:55:f5:3f:8c:ee:84:
         36:2c:74:c3:36:dc:cb:05:3c:52:06:53:6d:e2:1e:5e:35:a9:
         94:35:3f:e7:63:f8:14:64:1f:66:76:45:78:8a:78:ec:4f:2c:
         f6:71:c8:66:b5:b8:e1:01:bf:9c:bb:44:97:22:71:06:34:14:
         ee:66:2a:47:0a:d5:40:bd:92:81:2c:79:e1:c2:ea:e2:66:50:
         cc:c1:f4:a8:95:8e:1f:4a:87:9b:0b:3e:ce:80:d3:81:94:d7:
         48:06:4c:7a:0d:a2:ea:5c:dd:97:52:de:ca:f4:44:84:00:ad:
         d3:2e:fb:b2:d9:82:12:c5:8d:05:24:56:6a:9a:9b:5a:54:6d:
         dd:85:22:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:28:19 2025 by rpki-client