Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/801ecb-a78a-4305-af72-8e5f0f02efcd/1/bDe4Qv1F-xmc7ju9eWSpi4TJoHg.mft
File:                     bDe4Qv1F-xmc7ju9eWSpi4TJoHg.mft (raw, json)
Hash identifier:          tMZqRrM+VbktXJ4BtXnxiKXjD3hRHRpmxTuMFs0s6dQ=
Subject key identifier:   93:F0:5D:E2:C9:81:86:D9:AE:76:5A:6B:5F:6D:F5:61:BB:49:C1:F5
Authority key identifier: 6C:37:B8:42:FD:45:FB:19:9C:EE:3B:BD:79:64:A9:8B:84:C9:A0:78
Certificate issuer:       /CN=6c37b842fd45fb199cee3bbd7964a98b84c9a078
Certificate serial:       0182EC627F5C178FE06A2A7CDC20E6D0882E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDe4Qv1F-xmc7ju9eWSpi4TJoHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/801ecb-a78a-4305-af72-8e5f0f02efcd/1/bDe4Qv1F-xmc7ju9eWSpi4TJoHg.mft
Manifest number:          0A8B
Signing time:             Tue 30 Aug 2022 01:34:14 +0000
Manifest this update:     Tue 30 Aug 2022 01:34:14 +0000
Manifest next update:     Wed 31 Aug 2022 01:34:14 +0000
Files and hashes:         1: bDe4Qv1F-xmc7ju9eWSpi4TJoHg.crl (hash: suN0YueZvyQMaLr3Wua+ZXwaXQ5j/Cpn/7NQJ69YBzc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ec:62:7f:5c:17:8f:e0:6a:2a:7c:dc:20:e6:d0:88:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c37b842fd45fb199cee3bbd7964a98b84c9a078
        Validity
            Not Before: Aug 30 01:34:14 2022 GMT
            Not After : Aug 31 01:34:14 2022 GMT
        Subject: CN=93f05de2c98186d9ae765a6b5f6df561bb49c1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:d7:1d:88:e6:8e:d9:f0:2e:25:5b:df:ce:
                    af:02:82:bb:2f:0a:68:e1:c8:81:b0:44:80:60:0f:
                    d0:2d:d7:db:9e:c3:b7:65:e5:08:83:36:ae:04:21:
                    a7:72:45:7e:67:56:65:4a:7c:4e:bb:00:d5:e9:9d:
                    71:a8:d4:cc:fa:bf:66:41:64:e8:46:fa:eb:47:9b:
                    90:b7:de:ac:6c:b5:47:38:90:41:37:6b:eb:85:54:
                    63:29:07:b1:f3:69:b2:fc:da:da:3a:de:03:bc:72:
                    7e:41:89:f6:71:e5:6d:fa:37:5f:64:62:26:31:0d:
                    56:5c:c7:57:00:ae:69:e7:7a:b8:be:e5:5f:56:d6:
                    4d:cf:f9:0a:2d:53:65:7d:aa:88:0e:5e:1a:af:9e:
                    17:4c:9a:70:69:c7:ac:b7:f9:1c:b5:50:96:4d:49:
                    03:26:8b:53:b7:01:80:f4:1a:e2:e5:ae:87:68:6f:
                    50:bd:1d:ee:a2:55:05:cb:b0:15:74:e2:dc:1c:f8:
                    bf:5c:74:10:47:e2:69:12:2e:c3:9f:b0:3f:14:6d:
                    7f:b3:c5:6f:28:02:5d:dd:73:43:a0:76:9c:bf:78:
                    7c:80:a8:e7:05:9a:30:40:98:f7:38:c9:94:30:95:
                    0c:07:42:22:e8:c7:e6:ca:64:0e:db:8c:a9:33:23:
                    78:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F0:5D:E2:C9:81:86:D9:AE:76:5A:6B:5F:6D:F5:61:BB:49:C1:F5
            X509v3 Authority Key Identifier:
                keyid:6C:37:B8:42:FD:45:FB:19:9C:EE:3B:BD:79:64:A9:8B:84:C9:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDe4Qv1F-xmc7ju9eWSpi4TJoHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/801ecb-a78a-4305-af72-8e5f0f02efcd/1/bDe4Qv1F-xmc7ju9eWSpi4TJoHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/801ecb-a78a-4305-af72-8e5f0f02efcd/1/bDe4Qv1F-xmc7ju9eWSpi4TJoHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:8a:c1:b1:56:73:cb:35:fb:e9:d1:a3:2b:5c:e8:a1:16:06:
         ad:84:47:99:4c:08:fd:ae:ff:0b:76:bb:e5:f9:ba:cc:48:f6:
         12:33:34:1b:26:6a:d2:4a:37:69:95:02:46:53:ab:87:ce:db:
         eb:fa:8e:d6:ea:61:5e:02:5b:b0:01:21:78:c6:0d:fa:69:4d:
         96:06:78:1d:5e:74:29:0a:65:69:c4:0d:87:98:9f:3f:c1:1e:
         c0:0a:6b:dd:c7:8c:49:88:b2:70:d9:d1:8a:d2:f8:54:33:ba:
         37:d8:40:83:54:e4:5d:9f:7b:bb:f0:09:e7:c8:64:9c:16:75:
         5b:2b:2b:3d:91:5e:f2:ce:c0:81:e5:2a:28:45:ff:02:7e:df:
         b5:f0:bf:30:d0:bb:c1:73:33:bb:cf:5c:72:2b:ac:71:b7:1b:
         99:a9:95:2b:db:9e:e9:2f:7d:e5:37:3f:1c:3e:08:e4:ee:0f:
         6e:a6:5d:7d:5f:44:9c:3e:43:38:99:8d:96:e6:1e:cd:ea:3e:
         ce:3b:95:9a:98:26:ec:8f:0c:b7:36:25:81:62:03:9f:61:88:
         59:c7:96:42:bd:86:9e:fa:ca:e3:95:7d:c2:3d:d1:99:c3:96:
         06:9c:e9:37:a4:d3:6e:75:cc:f9:fb:ef:18:03:ae:a6:f9:da:
         fc:8c:50:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:08 2025 by rpki-client