Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/3605ec-73d3-4d90-b6f0-f49aea3d10b0/1/M8Y-DlUr7tQzDxjQkmYBoELzXjA.mft
File:                     M8Y-DlUr7tQzDxjQkmYBoELzXjA.mft (raw, json)
Hash identifier:          YsmFW9Ki6KTxOBPRwO+G4UvNPtzqUFFacGASfgWG2CM=
Subject key identifier:   BB:12:C1:35:BD:56:5E:59:C9:DF:DE:5E:D6:68:04:F6:02:48:42:8F
Authority key identifier: 33:C6:3E:0E:55:2B:EE:D4:33:0F:18:D0:92:66:01:A0:42:F3:5E:30
Certificate issuer:       /CN=33c63e0e552beed4330f18d0926601a042f35e30
Certificate serial:       018795BBBDD1CABECF0185B0595C33A8FC03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M8Y-DlUr7tQzDxjQkmYBoELzXjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/3605ec-73d3-4d90-b6f0-f49aea3d10b0/1/M8Y-DlUr7tQzDxjQkmYBoELzXjA.mft
Manifest number:          01
Signing time:             Tue 18 Apr 2023 18:58:41 +0000
Manifest this update:     Tue 18 Apr 2023 18:58:41 +0000
Manifest next update:     Wed 19 Apr 2023 18:58:41 +0000
Files and hashes:         1: M8Y-DlUr7tQzDxjQkmYBoELzXjA.crl (hash: sfNDBE5XZUtWd2rf5ci2XYrW68LVav3p43AQnhYtwXc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:95:bb:bd:d1:ca:be:cf:01:85:b0:59:5c:33:a8:fc:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c63e0e552beed4330f18d0926601a042f35e30
        Validity
            Not Before: Apr 18 18:58:41 2023 GMT
            Not After : Apr 19 18:58:41 2023 GMT
        Subject: CN=bb12c135bd565e59c9dfde5ed66804f60248428f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:a1:64:f5:2e:a6:56:46:cf:29:b3:13:56:
                    34:90:be:63:4a:fb:1a:71:07:bd:f7:8e:c2:12:d8:
                    c5:e9:0a:e8:f8:42:fc:36:6c:c3:74:e6:b3:b7:84:
                    6a:6d:49:ea:aa:fb:fd:6b:c6:b4:90:af:ca:fc:94:
                    dd:2d:ab:e0:44:be:1f:d7:b6:9f:6b:f0:8f:18:3c:
                    8b:a2:c1:b4:d8:70:60:78:17:3f:6e:1d:0b:8e:79:
                    88:11:90:83:ec:11:46:9d:91:d1:9a:5e:ad:8a:87:
                    09:7c:2f:fe:30:eb:fb:a3:ee:69:ec:3b:3a:06:b5:
                    dc:f6:8a:6f:fe:53:33:58:c0:1f:ff:27:b2:5f:b9:
                    62:0a:06:74:5e:78:6a:6f:f6:fa:f4:5a:9e:dc:02:
                    fa:2c:ca:f9:7a:01:79:9a:fd:93:e7:ab:2b:a2:e5:
                    e3:fa:f5:83:96:d8:6e:d0:a6:44:d6:32:7d:11:fc:
                    40:8a:eb:75:70:11:3b:84:3f:c0:bb:f2:83:07:e7:
                    aa:30:46:8b:da:a4:3a:1c:3e:62:6a:07:c8:cf:c7:
                    9b:2a:d1:82:bd:8b:23:71:c0:d5:86:9e:bc:89:54:
                    7e:5a:6b:04:09:68:d4:dd:ba:a9:4c:d5:aa:ed:8a:
                    9a:d4:ed:81:ad:29:ad:69:dc:37:f4:84:e3:a6:f9:
                    a2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:12:C1:35:BD:56:5E:59:C9:DF:DE:5E:D6:68:04:F6:02:48:42:8F
            X509v3 Authority Key Identifier:
                keyid:33:C6:3E:0E:55:2B:EE:D4:33:0F:18:D0:92:66:01:A0:42:F3:5E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Y-DlUr7tQzDxjQkmYBoELzXjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/3605ec-73d3-4d90-b6f0-f49aea3d10b0/1/M8Y-DlUr7tQzDxjQkmYBoELzXjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/3605ec-73d3-4d90-b6f0-f49aea3d10b0/1/M8Y-DlUr7tQzDxjQkmYBoELzXjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e4:3d:b5:73:be:35:5f:45:64:3c:1c:df:6a:74:c3:4a:5f:
         24:3a:cb:d2:e7:6d:5c:c4:f5:da:24:ab:28:ad:a7:b1:28:82:
         7b:83:64:27:dc:47:f5:b1:03:08:82:b9:43:a6:d1:18:ed:85:
         2f:01:82:26:6c:64:ba:b1:3e:c0:6f:da:ce:6e:1f:cb:c2:26:
         da:45:6c:f0:ed:2a:3e:f6:38:ae:30:36:58:c8:2a:9c:d4:2a:
         2e:31:7a:73:d4:a8:75:af:72:9b:b4:ef:07:85:41:0f:64:eb:
         1f:af:fb:24:31:58:ff:2a:1a:a8:cc:9a:12:47:e1:06:a4:66:
         9a:a7:b3:e2:3c:e0:bb:09:f4:a2:09:b8:05:a7:2e:1b:99:0c:
         59:9e:23:88:60:df:cb:de:e5:2b:39:e2:75:c2:66:28:df:80:
         ba:4b:7c:80:6f:2f:64:10:98:54:3f:a2:6f:bf:af:8d:41:88:
         dc:e2:88:4a:cd:d9:6f:67:92:4e:00:29:ae:d0:e3:5f:50:95:
         3a:bc:d1:3e:1b:3f:66:94:3d:13:c0:00:5d:2e:cc:74:e7:d6:
         fc:2d:0a:51:63:3a:08:1f:0d:52:0a:c9:88:a2:f9:79:13:3f:
         4f:f2:70:2f:e0:1b:9c:84:6b:78:ee:3e:bb:58:b3:91:ec:56:
         51:37:38:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:17 2025 by rpki-client