Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1d9521-a053-48cf-a33a-ee11d81578a3/1/jmARlPYORwzwQrUz_H5aeqnXzg4.mft
File:                     jmARlPYORwzwQrUz_H5aeqnXzg4.mft (raw, json)
Hash identifier:          EpdAjH4MYVqOcOHia6bsyVrwjpJybKeGCTqWwWmPvhs=
Subject key identifier:   A7:52:0C:99:55:5F:11:E9:00:E1:99:5B:05:BC:79:DF:4C:C5:0C:2F
Authority key identifier: 8E:60:11:94:F6:0E:47:0C:F0:42:B5:33:FC:7E:5A:7A:A9:D7:CE:0E
Certificate issuer:       /CN=8e601194f60e470cf042b533fc7e5a7aa9d7ce0e
Certificate serial:       0195699DC247C47FC54D2824FFB313633D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmARlPYORwzwQrUz_H5aeqnXzg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/1d9521-a053-48cf-a33a-ee11d81578a3/1/jmARlPYORwzwQrUz_H5aeqnXzg4.mft
Manifest number:          09E4
Signing time:             Thu 06 Mar 2025 04:01:41 +0000
Manifest this update:     Thu 06 Mar 2025 04:01:41 +0000
Manifest next update:     Fri 07 Mar 2025 04:01:41 +0000
Files and hashes:         1: jmARlPYORwzwQrUz_H5aeqnXzg4.crl (hash: aUpCeRjyb84fzeLGJ7Ua8s3PO1Bm7qGngJWxjwKwzk4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:69:9d:c2:47:c4:7f:c5:4d:28:24:ff:b3:13:63:3d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e601194f60e470cf042b533fc7e5a7aa9d7ce0e
        Validity
            Not Before: Mar  6 04:01:41 2025 GMT
            Not After : Mar  7 04:01:41 2025 GMT
        Subject: CN=a7520c99555f11e900e1995b05bc79df4cc50c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1b:bb:e3:64:c1:57:90:94:f3:05:0d:bc:d4:
                    a8:ac:2a:80:52:e4:92:b7:5d:d4:49:09:94:5f:38:
                    ee:b5:fa:cb:4a:fa:72:84:c3:9c:1a:0d:cb:fe:4d:
                    de:86:0a:10:d6:08:9c:e3:33:35:84:2c:10:68:d6:
                    03:95:92:bc:29:34:c9:8b:d3:56:cb:49:4a:11:ea:
                    c9:48:d3:e9:8a:97:75:b6:59:8a:14:ea:e5:2e:f2:
                    26:06:5b:4b:23:41:3c:fd:6c:f8:78:36:68:82:25:
                    93:25:60:fa:92:8e:74:2e:d1:84:5c:ca:75:54:c3:
                    e9:f1:18:64:45:f2:0e:5e:dd:34:59:f3:56:af:d1:
                    82:c5:6b:d5:8a:c5:ef:15:25:2c:78:69:86:e6:9d:
                    36:5c:b0:41:04:68:5b:35:58:48:3e:26:51:57:a4:
                    c0:50:8f:33:27:c3:88:0d:e4:c8:0d:45:47:a5:d3:
                    6e:07:16:bf:92:60:73:6d:bb:e4:7e:7d:53:62:55:
                    b3:cb:ff:ca:4a:95:b2:08:05:7c:55:0f:cc:b5:80:
                    6e:7f:5e:67:71:e6:f2:e7:07:18:ba:1e:b0:ff:d4:
                    60:14:34:31:66:62:c2:e0:93:0a:86:1a:00:03:ed:
                    03:e1:cc:a3:5a:4c:40:6d:58:e3:e7:c0:4c:2b:0e:
                    d0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:52:0C:99:55:5F:11:E9:00:E1:99:5B:05:BC:79:DF:4C:C5:0C:2F
            X509v3 Authority Key Identifier:
                keyid:8E:60:11:94:F6:0E:47:0C:F0:42:B5:33:FC:7E:5A:7A:A9:D7:CE:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmARlPYORwzwQrUz_H5aeqnXzg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1d9521-a053-48cf-a33a-ee11d81578a3/1/jmARlPYORwzwQrUz_H5aeqnXzg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1d9521-a053-48cf-a33a-ee11d81578a3/1/jmARlPYORwzwQrUz_H5aeqnXzg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d2:2c:24:8f:14:25:cd:5e:31:48:33:0a:a1:69:21:48:3e:
         9f:ff:08:cd:fa:18:2e:28:3a:b1:ab:45:90:42:ca:45:c0:30:
         db:b2:1a:9d:b0:13:c2:f1:6b:39:cb:b9:a3:54:a4:a8:17:0d:
         43:cb:e8:cf:d8:a6:bf:ca:78:b2:b9:23:2e:96:34:5e:a6:2e:
         88:2e:c9:78:93:a2:41:b4:55:1f:d7:f8:1a:ba:a3:02:fd:35:
         80:90:68:8c:ba:6e:a3:04:8d:c2:7e:59:0e:3e:5c:a9:fd:d7:
         ca:77:d1:7c:db:18:8a:99:ab:b3:9d:08:92:b4:a7:94:03:4c:
         9a:17:95:51:74:e3:a8:c0:cc:e6:33:43:64:a3:8d:0e:25:f8:
         8a:3d:99:a1:bb:b4:5c:57:bb:d0:bf:76:ca:79:74:66:64:7a:
         4f:45:43:b5:23:83:df:98:b6:27:32:f5:73:6c:97:a8:e7:0f:
         bd:e2:7b:0a:99:b0:88:24:63:f0:ca:a8:2f:09:f6:62:a6:ac:
         00:a3:22:47:09:b4:2c:93:5a:df:27:86:9b:db:5a:71:79:de:
         ed:b0:8c:de:d2:70:b1:55:68:d1:87:27:57:d1:76:d3:9d:49:
         5e:09:a8:a2:29:45:0a:63:6a:d4:c2:0d:6a:54:52:4c:5c:cf:
         ff:3f:ed:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVpncJHxH/FTSgk/7MTYz2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjAxMTk0ZjYwZTQ3MGNmMDQyYjUzM2ZjN2U1YTdhYTlk
N2NlMGUwHhcNMjUwMzA2MDQwMTQxWhcNMjUwMzA3MDQwMTQxWjAzMTEwLwYDVQQD
EyhhNzUyMGM5OTU1NWYxMWU5MDBlMTk5NWIwNWJjNzlkZjRjYzUwYzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hu742TBV5CU8wUNvNSorCqAUuSS
t13USQmUXzjutfrLSvpyhMOcGg3L/k3ehgoQ1gic4zM1hCwQaNYDlZK8KTTJi9NW
y0lKEerJSNPpipd1tlmKFOrlLvImBltLI0E8/Wz4eDZogiWTJWD6ko50LtGEXMp1
VMPp8RhkRfIOXt00WfNWr9GCxWvVisXvFSUseGmG5p02XLBBBGhbNVhIPiZRV6TA
UI8zJ8OIDeTIDUVHpdNuBxa/kmBzbbvkfn1TYlWzy//KSpWyCAV8VQ/MtYBuf15n
ceby5wcYuh6w/9RgFDQxZmLC4JMKhhoAA+0D4cyjWkxAbVjj58BMKw7Q3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdSDJlVXxHpAOGZWwW8ed9MxQwvMB8GA1UdIwQY
MBaAFI5gEZT2DkcM8EK1M/x+Wnqp184OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1BUmxQWU9Sd3p3UXJVel9INWFlcW5Yemc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xZDk1MjEtYTA1My00OGNmLWEzM2Et
ZWUxMWQ4MTU3OGEzLzEvam1BUmxQWU9Sd3p3UXJVel9INWFlcW5Yemc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xZDk1MjEtYTA1My00OGNmLWEzM2EtZWUxMWQ4MTU3OGEz
LzEvam1BUmxQWU9Sd3p3UXJVel9INWFlcW5Yemc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNIsJI8U
Jc1eMUgzCqFpIUg+n/8IzfoYLig6satFkELKRcAw27IanbATwvFrOcu5o1SkqBcN
Q8voz9imv8p4srkjLpY0XqYuiC7JeJOiQbRVH9f4GrqjAv01gJBojLpuowSNwn5Z
Dj5cqf3XynfRfNsYipmrs50IkrSnlANMmheVUXTjqMDM5jNDZKONDiX4ij2Zobu0
XFe70L92ynl0ZmR6T0VDtSOD35i2JzL1c2yXqOcPveJ7CpmwiCRj8MqoLwn2Yqas
AKMiRwm0LJNa3yeGm9tacXne7bCM3tJwsVVo0YcnV9F2051JXgmooilFCmNq1MIN
alRSTFzP/z/t/A==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:18 2025 by rpki-client