Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/455eac-86da-45cf-8124-ffb827d527ea/1/lRZYnlbqZPEBQe_VQ-wj_FZy67M.mft
File:                     lRZYnlbqZPEBQe_VQ-wj_FZy67M.mft (raw, json)
Hash identifier:          bDPclJbwd/nz2dAUkgHWpWqHal1DRsWkzY0omT/TnzI=
Subject key identifier:   10:3F:0F:99:5C:A5:DE:53:37:87:C4:1C:3F:59:46:59:ED:67:B8:61
Authority key identifier: 95:16:58:9E:56:EA:64:F1:01:41:EF:D5:43:EC:23:FC:56:72:EB:B3
Certificate issuer:       /CN=9516589e56ea64f10141efd543ec23fc5672ebb3
Certificate serial:       0190332A4CA1FA0775245FE97084235D5749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRZYnlbqZPEBQe_VQ-wj_FZy67M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/455eac-86da-45cf-8124-ffb827d527ea/1/lRZYnlbqZPEBQe_VQ-wj_FZy67M.mft
Manifest number:          0CCA
Signing time:             Thu 20 Jun 2024 01:02:08 +0000
Manifest this update:     Thu 20 Jun 2024 01:02:08 +0000
Manifest next update:     Fri 21 Jun 2024 01:02:08 +0000
Files and hashes:         1: lRZYnlbqZPEBQe_VQ-wj_FZy67M.crl (hash: SM2s9waCL+cCudyHF3K/b/pSrGt0dmKOB1uSfeSF028=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:2a:4c:a1:fa:07:75:24:5f:e9:70:84:23:5d:57:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9516589e56ea64f10141efd543ec23fc5672ebb3
        Validity
            Not Before: Jun 20 01:02:08 2024 GMT
            Not After : Jun 21 01:02:08 2024 GMT
        Subject: CN=103f0f995ca5de533787c41c3f594659ed67b861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3b:58:d7:6c:bc:f4:20:9d:39:ed:f8:cb:21:
                    d7:32:a5:a7:98:97:a6:c2:af:d7:f3:04:29:83:50:
                    ab:9d:7a:65:f6:f4:72:71:c1:08:30:b3:4f:de:3a:
                    63:67:99:31:c1:1e:cc:c7:f4:e1:39:fb:14:03:4b:
                    c4:5e:a6:ac:5d:ce:0f:cc:5a:e0:2d:d0:bc:45:12:
                    16:86:63:cd:01:4f:e4:bb:4c:69:7d:d1:ce:b0:e6:
                    e1:54:c9:3d:1a:1d:5f:90:b3:f3:8b:dd:34:68:91:
                    1f:41:57:e8:d4:db:35:da:6b:b4:58:9e:f7:d7:95:
                    f9:c7:39:bf:79:b5:9f:ee:2c:78:87:f4:b6:16:71:
                    4e:6a:f2:51:72:9e:35:ba:e9:98:6b:d2:72:93:36:
                    4e:ce:f4:f9:08:8b:43:3d:89:9f:94:82:00:18:47:
                    c2:e9:90:1a:05:32:60:7c:c1:03:61:25:10:5f:70:
                    99:5a:80:91:cf:d8:68:cc:03:ac:18:72:fc:50:77:
                    2a:34:cf:7b:53:85:6d:e7:5b:10:27:11:58:08:98:
                    45:92:85:7b:93:e0:9a:fb:ec:ce:26:a0:e4:da:77:
                    6c:b6:bc:8e:5a:ef:97:e7:98:53:29:24:e1:a2:e4:
                    1c:83:ab:4e:0d:5b:2c:bf:20:8e:55:dd:ec:c8:87:
                    b1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3F:0F:99:5C:A5:DE:53:37:87:C4:1C:3F:59:46:59:ED:67:B8:61
            X509v3 Authority Key Identifier:
                keyid:95:16:58:9E:56:EA:64:F1:01:41:EF:D5:43:EC:23:FC:56:72:EB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZYnlbqZPEBQe_VQ-wj_FZy67M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/455eac-86da-45cf-8124-ffb827d527ea/1/lRZYnlbqZPEBQe_VQ-wj_FZy67M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/455eac-86da-45cf-8124-ffb827d527ea/1/lRZYnlbqZPEBQe_VQ-wj_FZy67M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f3:2b:84:6d:ed:b8:96:e4:26:5d:92:af:8b:62:90:7a:c0:
         fb:4d:2b:13:f4:e6:b5:60:3c:b8:f8:65:4d:ee:4c:6e:ed:58:
         66:3a:6c:6f:f0:b0:da:16:7d:57:e3:51:bc:bb:b1:08:9c:84:
         83:b7:62:b0:08:85:5e:82:13:11:90:ba:70:64:f6:2c:c9:fd:
         99:1f:70:be:3b:92:cd:4f:27:bc:f0:0d:59:a9:87:f7:ad:f3:
         b3:32:6d:b9:a8:20:a1:96:41:21:a3:e5:bc:30:29:fa:c7:22:
         f3:84:dc:e6:01:58:9d:5b:7c:48:21:82:49:b9:43:ea:b9:06:
         7f:89:4f:48:70:9e:a3:9c:fc:9a:94:2c:41:5a:6f:5f:8a:6d:
         aa:03:74:e2:5f:84:6a:a5:40:a8:08:c6:4c:ba:20:1f:29:49:
         74:5d:8b:28:59:ec:a7:2c:7f:f5:40:8e:9d:4c:9e:98:cb:33:
         61:e7:d8:41:df:76:21:e0:6b:f0:59:47:73:ad:ab:49:1b:96:
         51:c8:a0:ab:6d:72:96:d2:2d:74:8d:50:6b:1c:38:a9:5e:4c:
         dc:37:7b:bc:5a:ce:4b:70:10:05:b2:73:1a:89:cb:52:3d:c0:
         c2:fe:21:6a:a8:c4:4e:93:5c:2d:64:e5:69:a0:b3:d9:82:28:
         91:9b:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:37:29 2025 by rpki-client