Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/qPTmONH-2zLFVu1pe9ltyt6e3Tw.mft
File:                     qPTmONH-2zLFVu1pe9ltyt6e3Tw.mft (raw, json)
Hash identifier:          /jCO4iAzCxrSKxs2p4fIH0hkw1q1eteDzdKiCMU6x1E=
Subject key identifier:   B4:C2:EC:EF:39:97:21:D9:F2:00:98:FF:DF:62:17:44:B7:05:1A:57
Authority key identifier: A8:F4:E6:38:D1:FE:DB:32:C5:56:ED:69:7B:D9:6D:CA:DE:9E:DD:3C
Certificate issuer:       /CN=a8f4e638d1fedb32c556ed697bd96dcade9edd3c
Certificate serial:       0195C5AAB893DCE0D3F64C04310EBE1F5DAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qPTmONH-2zLFVu1pe9ltyt6e3Tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/qPTmONH-2zLFVu1pe9ltyt6e3Tw.mft
Manifest number:          1081
Signing time:             Mon 24 Mar 2025 01:00:54 +0000
Manifest this update:     Mon 24 Mar 2025 01:00:54 +0000
Manifest next update:     Tue 25 Mar 2025 01:00:54 +0000
Files and hashes:         1: qPTmONH-2zLFVu1pe9ltyt6e3Tw.crl (hash: zlbnOkBlSc7BLeTRRY6bFyIdQ+VHpEJg6nPmVJFehzM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c5:aa:b8:93:dc:e0:d3:f6:4c:04:31:0e:be:1f:5d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f4e638d1fedb32c556ed697bd96dcade9edd3c
        Validity
            Not Before: Mar 24 01:00:54 2025 GMT
            Not After : Mar 25 01:00:54 2025 GMT
        Subject: CN=b4c2ecef399721d9f20098ffdf621744b7051a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:cb:ac:ea:88:a9:8d:c7:30:70:ef:dd:9e:
                    55:31:44:0d:bd:fb:42:c7:37:0a:e2:c4:49:51:4c:
                    5f:97:c9:d3:04:e3:55:e2:95:50:79:d9:24:27:6a:
                    96:a3:28:bb:56:e4:ef:1c:e3:19:e3:55:1e:8a:ac:
                    20:06:e2:16:5c:e9:f9:3a:93:7f:91:f1:72:bb:ff:
                    7d:3c:44:a0:82:54:6e:9a:b2:5a:0b:bd:f3:82:12:
                    5e:62:3b:56:f2:92:c8:ec:dd:b5:ae:61:07:fa:7b:
                    6d:5c:ff:48:40:70:b9:7f:d1:14:50:05:b3:e8:cb:
                    63:51:5b:7d:e0:92:c7:86:3c:f5:e9:b3:61:d6:43:
                    40:6f:5e:97:28:18:3e:e1:5d:12:7c:ae:f8:09:3a:
                    a1:52:eb:49:26:01:5a:f6:af:a9:42:90:62:70:01:
                    d6:c6:c3:a2:22:74:c9:34:eb:28:60:e5:21:dd:e0:
                    03:86:30:5e:62:72:e3:91:b5:ec:f5:e7:40:00:c9:
                    a9:64:a0:a4:dd:45:cb:a8:d9:0e:da:82:09:6f:a9:
                    f4:98:b7:de:e3:4b:44:5f:c0:70:ad:93:76:7f:6f:
                    51:d3:59:93:08:2f:0e:9a:87:2f:9e:70:a2:56:86:
                    43:fe:4d:14:8a:cf:02:ae:80:ec:bc:26:54:73:69:
                    fd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C2:EC:EF:39:97:21:D9:F2:00:98:FF:DF:62:17:44:B7:05:1A:57
            X509v3 Authority Key Identifier:
                keyid:A8:F4:E6:38:D1:FE:DB:32:C5:56:ED:69:7B:D9:6D:CA:DE:9E:DD:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPTmONH-2zLFVu1pe9ltyt6e3Tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/qPTmONH-2zLFVu1pe9ltyt6e3Tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13688f-32ae-446c-a6f8-a87444e6061b/1/qPTmONH-2zLFVu1pe9ltyt6e3Tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:af:16:9c:52:e3:05:cc:c2:7f:f3:ac:43:e8:ec:df:e1:7e:
         56:a0:8d:8b:35:cb:a5:8d:f9:65:6c:36:73:78:1c:e3:1b:f0:
         eb:85:0c:70:d2:9b:60:5e:04:76:14:0a:d5:62:95:6c:01:88:
         2a:b7:d8:e5:95:cc:23:dc:b0:71:ce:08:d7:ac:de:b1:c2:dd:
         05:6a:60:c5:0f:31:d9:f0:52:be:ae:73:11:55:5c:b9:da:8d:
         e6:9f:73:91:89:55:27:94:55:ea:a8:2f:d3:b8:70:d3:91:24:
         e0:9f:f5:3c:c4:7c:c2:1b:8c:e3:b0:01:2e:85:cd:55:f0:de:
         8a:05:1f:cc:21:de:9d:96:2f:3b:c3:87:22:10:32:e0:70:9a:
         8b:f9:cc:22:20:df:7c:08:2d:3c:08:ef:45:d7:8d:8f:de:89:
         ee:f1:ae:c9:07:1f:40:80:a5:b1:c3:35:6d:31:a3:78:70:5f:
         a8:20:fe:d1:1d:7d:98:6f:89:5f:4d:84:47:bc:9d:1b:a0:2e:
         5d:43:2f:7a:90:31:a6:23:8e:32:54:be:75:1c:29:2d:98:bd:
         4e:aa:0c:c1:e6:7f:7f:58:25:9b:f3:f6:c3:fc:a1:2c:89:ec:
         f3:19:40:1c:84:d2:29:2f:a9:ab:93:27:f8:22:14:81:d3:75:
         66:75:57:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:31:24 2025 by rpki-client