Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
File:                     55hPlAuxPQUcj4led5ZSsFrgwLM.mft (raw, json)
Hash identifier:          IWRFq1UUpMiPxpdmHkhVNM+hi41IY8fuOV/Yh458PY0=
Subject key identifier:   46:3B:69:22:77:0B:ED:3E:3F:50:FB:B0:66:31:2E:D2:C3:E0:C9:0F
Authority key identifier: E7:98:4F:94:0B:B1:3D:05:1C:8F:89:5E:77:96:52:B0:5A:E0:C0:B3
Certificate issuer:       /CN=e7984f940bb13d051c8f895e779652b05ae0c0b3
Certificate serial:       019515ED40E5596DE3146932DBE2362DAC1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft
Manifest number:          08AB
Signing time:             Mon 17 Feb 2025 22:00:24 +0000
Manifest this update:     Mon 17 Feb 2025 22:00:24 +0000
Manifest next update:     Tue 18 Feb 2025 22:00:24 +0000
Files and hashes:         1: 55hPlAuxPQUcj4led5ZSsFrgwLM.crl (hash: MDdwc1CRqStMnhyN3QPVh/fF2A3vKtsdYKx6vJpyk4k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:15:ed:40:e5:59:6d:e3:14:69:32:db:e2:36:2d:ac:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7984f940bb13d051c8f895e779652b05ae0c0b3
        Validity
            Not Before: Feb 17 22:00:24 2025 GMT
            Not After : Feb 18 22:00:24 2025 GMT
        Subject: CN=463b6922770bed3e3f50fbb066312ed2c3e0c90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:14:31:68:80:d7:4c:6a:b2:83:98:8e:de:45:
                    36:78:6b:c4:0c:c8:88:d2:f9:c3:12:3e:9a:3d:0e:
                    7c:30:c3:8d:65:15:8b:58:2a:51:ff:3b:fa:82:14:
                    c2:89:67:5d:3f:6a:10:d2:6f:aa:a8:d2:a1:cf:be:
                    08:fa:ce:35:cf:47:38:b7:8e:d0:51:26:7f:35:e8:
                    ad:ad:7d:1e:df:83:bd:c6:26:b5:c5:74:a8:bf:51:
                    a1:c5:3e:5f:a4:1b:c9:40:5d:69:6d:09:c9:52:e4:
                    3d:9e:0f:99:4a:ee:89:7f:02:a5:f5:4c:76:6a:bb:
                    12:98:b6:c9:3d:45:ba:01:c3:1a:e7:0f:d8:c0:70:
                    c4:49:5e:40:7c:a0:39:20:05:fb:44:69:f5:46:6f:
                    50:c2:a5:80:4b:ea:9e:21:8b:bd:7e:9a:55:47:4b:
                    47:a7:48:58:14:08:2e:5f:cc:c2:b6:11:b3:b9:97:
                    a8:ff:38:47:d4:f4:ed:80:89:aa:c7:0e:9b:74:e4:
                    dd:0a:f7:62:af:ec:e0:8c:5c:f2:08:a2:e6:df:c0:
                    d4:c1:17:d3:ce:68:9b:61:31:94:97:22:d6:67:65:
                    f7:27:f7:fa:13:f5:1a:17:56:ba:87:ed:13:b5:7f:
                    24:85:ab:70:e0:20:c5:5d:87:da:62:44:b4:b3:93:
                    05:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3B:69:22:77:0B:ED:3E:3F:50:FB:B0:66:31:2E:D2:C3:E0:C9:0F
            X509v3 Authority Key Identifier:
                keyid:E7:98:4F:94:0B:B1:3D:05:1C:8F:89:5E:77:96:52:B0:5A:E0:C0:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55hPlAuxPQUcj4led5ZSsFrgwLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7774e7-3b4a-4a16-abe5-b9c00ee5a490/1/55hPlAuxPQUcj4led5ZSsFrgwLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:49:28:31:2f:9f:68:47:1d:d5:3f:23:43:d4:2a:b9:48:7b:
         1c:48:fb:21:69:6b:2a:42:f0:42:c1:6b:b3:02:b1:7a:96:ae:
         dc:8d:95:e7:b7:02:07:da:a0:b7:f9:1b:4b:1d:99:25:94:dc:
         fc:49:f9:f6:a2:49:f4:22:6b:73:8c:68:2b:8c:5e:31:64:b6:
         53:33:cf:1d:80:08:5e:15:60:a7:69:98:9a:af:29:a7:f3:e8:
         d4:ff:6d:0b:8a:d2:0c:54:28:17:d3:95:5b:e8:3b:98:f9:a9:
         6f:8d:3a:94:b8:4b:43:d5:13:68:47:36:04:41:55:91:62:6b:
         d4:d6:d1:c5:6f:4d:fd:ad:33:99:5b:40:37:46:da:79:16:a6:
         8b:c8:86:26:f2:85:9e:3e:35:eb:da:7e:44:ed:91:cd:55:92:
         c6:4f:7e:57:3b:86:ea:c6:92:fe:b1:47:18:d0:1e:57:7d:ce:
         ff:97:03:2d:b9:4c:27:d8:4d:96:c5:78:8d:a9:38:2e:2c:ac:
         13:c2:0d:20:97:80:f7:40:3c:71:81:11:10:5e:d6:d7:fa:19:
         c2:da:a0:4a:79:8a:24:99:31:0a:17:e6:81:17:84:9f:df:ad:
         8b:e1:63:6e:51:08:42:19:6c:0f:ed:76:fa:f0:58:be:c9:21:
         89:ff:24:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:19 2025 by rpki-client