Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File:                     4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier:          ABwA9FH8/iwccctb2rySf1H/sBy5S1DKJgOW9tFNgHs=
Subject key identifier:   08:6A:79:8E:5C:DE:86:EA:E6:C6:81:6D:C2:FF:84:85:BA:A2:29:44
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer:       /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial:       0195E1592CAA7F37DBEA0E52048B3B10CABA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number:          14BF
Signing time:             Sat 29 Mar 2025 10:01:12 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:12 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:12 +0000
Files and hashes:         1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: 4Jv3gONrIgkJA3X3p1E8l4SzMc0hfYW1RuTw8ApHfSE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:2c:aa:7f:37:db:ea:0e:52:04:8b:3b:10:ca:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
        Validity
            Not Before: Mar 29 10:01:12 2025 GMT
            Not After : Mar 30 10:01:12 2025 GMT
        Subject: CN=086a798e5cde86eae6c6816dc2ff8485baa22944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:2f:3a:03:df:ed:28:4f:02:64:b0:d8:3b:
                    22:8a:6f:97:ce:86:cf:52:0c:4a:36:6c:de:e5:a8:
                    dd:42:aa:f3:7c:c6:1f:35:cc:c1:d0:89:39:f4:8e:
                    e1:4f:ae:b8:67:bd:6c:a2:0b:57:46:5c:4d:11:fb:
                    31:5c:78:5d:68:b5:f2:4e:7f:3a:9f:a9:25:a5:b4:
                    22:ba:10:bd:97:c0:c4:65:61:0f:00:65:11:51:1d:
                    bb:6a:86:18:62:5d:43:6d:89:fa:ad:f9:73:d0:9d:
                    5f:c2:c6:c8:0f:b4:51:fe:a6:cc:f0:ea:59:a0:23:
                    b5:b8:30:f7:a7:b8:53:ca:9a:af:5d:64:20:2d:bc:
                    23:be:c3:6c:67:64:58:21:e2:6f:19:f9:71:ee:0b:
                    de:39:94:cf:f4:74:73:f0:cd:ba:19:2b:ab:3f:24:
                    f8:5f:02:d8:13:84:48:a2:fa:0c:04:b6:65:38:83:
                    4a:4e:99:5e:b4:bf:44:e6:3f:fe:3e:0e:ea:58:29:
                    d9:a0:77:a9:e0:e9:b6:f6:ec:62:a6:44:3a:00:8c:
                    67:bd:c8:f4:fc:13:93:56:92:e2:ae:af:10:cb:b3:
                    28:b2:18:92:d7:5c:76:f7:63:2d:47:30:70:69:91:
                    ac:3e:ce:cb:dd:ef:bb:be:b1:c6:55:7c:cf:2c:a7:
                    99:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6A:79:8E:5C:DE:86:EA:E6:C6:81:6D:C2:FF:84:85:BA:A2:29:44
            X509v3 Authority Key Identifier:
                keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:11:f4:7c:f3:29:34:42:63:7d:f5:eb:79:52:71:bd:c5:8f:
         2f:f9:83:af:32:9e:59:ae:58:c0:78:04:47:fe:ec:a0:f8:8a:
         73:b1:b1:fa:ed:76:ce:9c:70:c9:49:86:13:23:d7:c1:ca:e0:
         8a:2f:75:e7:a2:78:0c:b5:73:d2:a6:1a:87:90:ab:7e:99:01:
         b4:4a:bd:e6:8e:fb:af:d8:50:a4:11:14:5c:fb:5d:36:08:ec:
         a8:97:fc:1e:28:d8:ed:49:bd:39:94:11:fe:22:46:ff:75:21:
         a6:0f:0d:3a:9a:b9:e1:b6:13:7d:89:d5:65:dc:4a:0f:c4:07:
         fa:d4:14:c6:c6:d8:72:0e:f1:9b:46:1b:89:91:ba:cc:89:32:
         13:19:bf:6f:25:56:db:6a:21:54:da:34:31:57:1b:63:27:ae:
         78:9e:c0:cc:a3:44:4e:aa:f2:a7:b6:4f:42:ed:4d:14:9f:fb:
         1c:30:20:5b:61:d0:bd:ce:7c:d9:d9:5c:76:8e:2c:7c:eb:71:
         0b:c4:c0:6e:fd:f8:64:22:69:86:b8:af:d3:12:7a:74:1e:b5:
         64:ff:18:12:fd:13:b5:f4:78:6b:05:98:76:21:7a:7a:2d:36:
         97:36:f1:59:f2:9b:70:8e:f3:79:48:c6:81:01:f7:8d:ae:c9:
         9d:70:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:13 2025 by rpki-client