Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/951fa3-e80e-449f-8441-ffc767b81f1c/1/STYtnw4aOKZgWlnKRpGyjuTY8kk.mft
File:                     STYtnw4aOKZgWlnKRpGyjuTY8kk.mft (raw, json)
Hash identifier:          TyCtfVrA4+8/OiJPR+RKzBbvDTXovhjQYgWVFRqHwhk=
Subject key identifier:   12:81:FE:0B:3F:DD:AD:D2:59:46:03:CB:53:9D:23:10:62:78:83:91
Authority key identifier: 49:36:2D:9F:0E:1A:38:A6:60:5A:59:CA:46:91:B2:8E:E4:D8:F2:49
Certificate issuer:       /CN=49362d9f0e1a38a6605a59ca4691b28ee4d8f249
Certificate serial:       018215CAFC1F147CE798860B58EB85568E27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STYtnw4aOKZgWlnKRpGyjuTY8kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/951fa3-e80e-449f-8441-ffc767b81f1c/1/STYtnw4aOKZgWlnKRpGyjuTY8kk.mft
Manifest number:          09A5
Signing time:             Tue 19 Jul 2022 09:30:00 +0000
Manifest this update:     Tue 19 Jul 2022 09:30:00 +0000
Manifest next update:     Wed 20 Jul 2022 09:30:00 +0000
Files and hashes:         1: STYtnw4aOKZgWlnKRpGyjuTY8kk.crl (hash: ThXrDF/A/IKvjSyBI0hteR/SRbPNjTw1vCOwBPlsdOs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:15:ca:fc:1f:14:7c:e7:98:86:0b:58:eb:85:56:8e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49362d9f0e1a38a6605a59ca4691b28ee4d8f249
        Validity
            Not Before: Jul 19 09:30:00 2022 GMT
            Not After : Jul 20 09:30:00 2022 GMT
        Subject: CN=1281fe0b3fddadd2594603cb539d231062788391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:b8:a5:ab:1b:8c:fe:f1:1e:6a:19:22:29:
                    7a:b0:e0:40:f6:64:67:b6:ae:11:15:6e:fb:ca:b9:
                    4b:cb:9e:03:54:e7:d5:05:50:fb:af:14:2e:af:2d:
                    14:56:5b:d1:b3:32:fb:1d:ea:f3:50:38:fb:2f:45:
                    81:0a:cb:b6:37:e1:33:75:1e:2d:14:d4:ae:5a:cd:
                    97:ca:91:94:12:3f:f9:e5:65:5b:06:90:1d:63:e0:
                    3d:4f:b3:2f:67:b1:e1:1f:4f:77:bd:ec:3d:ca:c0:
                    99:4f:8f:ff:c6:96:81:05:8d:8e:58:4b:e4:01:ae:
                    c0:26:05:3c:35:79:31:f1:c8:d1:c7:35:2e:1c:bb:
                    a7:8e:8d:2c:6d:cc:8c:bf:f9:c7:b7:d1:fd:c7:ca:
                    91:93:9d:da:ef:17:c5:94:aa:10:76:ee:4c:22:0d:
                    46:67:c3:f3:d3:b2:67:1e:a3:65:9d:4e:74:a4:32:
                    92:7b:6e:3a:2c:0f:2e:f7:58:a6:cd:c7:00:d9:7c:
                    ac:47:c7:0f:e0:87:a8:45:35:49:c0:7f:9d:3c:f6:
                    07:6b:e4:85:f9:7d:f5:36:e4:64:1b:cc:6f:04:41:
                    1f:d0:c2:c9:b3:d6:38:88:80:47:79:cc:f6:59:d1:
                    50:8f:e3:fa:30:0a:3d:33:b4:22:62:41:88:2d:8a:
                    76:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:81:FE:0B:3F:DD:AD:D2:59:46:03:CB:53:9D:23:10:62:78:83:91
            X509v3 Authority Key Identifier:
                keyid:49:36:2D:9F:0E:1A:38:A6:60:5A:59:CA:46:91:B2:8E:E4:D8:F2:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STYtnw4aOKZgWlnKRpGyjuTY8kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/951fa3-e80e-449f-8441-ffc767b81f1c/1/STYtnw4aOKZgWlnKRpGyjuTY8kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/951fa3-e80e-449f-8441-ffc767b81f1c/1/STYtnw4aOKZgWlnKRpGyjuTY8kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2a:fa:cd:15:b2:5a:54:65:57:4e:2f:5f:8b:29:66:6a:2c:
         8a:c6:74:50:f7:11:7e:81:e8:bd:20:09:51:bb:0d:2f:9c:6b:
         d5:0a:64:04:ee:40:59:7f:98:79:39:04:aa:0d:0c:f6:30:45:
         36:ee:70:4d:f3:a2:cc:3a:de:29:12:67:4f:37:cd:ed:62:43:
         4f:96:ca:0f:01:75:bd:34:a1:01:41:59:0e:de:aa:6b:e0:b1:
         ed:52:29:54:8e:c6:85:1c:e8:8a:50:5f:11:a9:1b:ec:e5:36:
         c5:fd:ba:81:bf:e2:ab:67:0c:bf:98:42:51:fc:8a:19:72:56:
         e9:bc:9d:ba:5a:73:f7:10:d9:79:f1:6a:52:1e:b4:d4:09:28:
         c3:75:ff:0f:3a:57:2c:91:0e:4d:a7:e3:de:02:14:50:02:8e:
         32:0a:8a:f6:a8:27:a2:a9:aa:e5:f8:f7:4d:07:f5:d2:f3:24:
         d1:9d:1e:ca:81:19:78:da:47:64:35:80:b3:a3:d0:57:9e:b5:
         ed:0b:10:03:54:1c:4b:77:38:28:1b:b5:24:ed:94:90:1c:e6:
         54:0b:03:2a:61:6a:ee:ce:9c:3b:2d:13:32:34:41:34:d5:98:
         19:c8:0d:58:a7:9a:80:1f:77:2a:d8:61:13:37:94:ec:8c:b7:
         53:c4:a8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:25 2025 by rpki-client