Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.mft
File:                     Qn3KYxdMb3ztK6TzGdzCmkiSiYU.mft (raw, json)
Hash identifier:          kkTiJs3wTDXuRFp4Vy0XYHAnZ3M7EpDlpTpdqpSjPbI=
Subject key identifier:   C1:EA:47:83:A6:48:D4:F5:AA:01:A9:89:0E:2F:E6:FB:8E:5F:F0:85
Authority key identifier: 42:7D:CA:63:17:4C:6F:7C:ED:2B:A4:F3:19:DC:C2:9A:48:92:89:85
Certificate issuer:       /CN=427dca63174c6f7ced2ba4f319dcc29a48928985
Certificate serial:       018D8B2B2BD47DF63DA86EB8E1977E1E4914
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.mft
Manifest number:          085F
Signing time:             Fri 09 Feb 2024 00:01:18 +0000
Manifest this update:     Fri 09 Feb 2024 00:01:18 +0000
Manifest next update:     Sat 10 Feb 2024 00:01:18 +0000
Files and hashes:         1: Qn3KYxdMb3ztK6TzGdzCmkiSiYU.crl (hash: PUX6ecIYDes4nHbTERnvfOSymF+BarkoA1EckWME4SM=)
                          2: V2DrHsg_1co8O5IwJG3yoDueJhM.roa (hash: x5bRvDYAPzGVNO+m09M5SzYJdQizHZhCqcNBumSvDdo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:8b:2b:2b:d4:7d:f6:3d:a8:6e:b8:e1:97:7e:1e:49:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427dca63174c6f7ced2ba4f319dcc29a48928985
        Validity
            Not Before: Feb  9 00:01:18 2024 GMT
            Not After : Feb 10 00:01:18 2024 GMT
        Subject: CN=c1ea4783a648d4f5aa01a9890e2fe6fb8e5ff085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f1:4e:7d:80:e9:f9:a7:da:d7:b0:f3:30:37:
                    10:53:d0:65:8a:d5:6e:0c:a2:e5:77:93:ef:0f:b4:
                    b7:01:c0:9a:f5:f9:2a:05:e5:aa:7b:37:46:0f:f3:
                    af:ae:eb:bd:72:8d:97:85:54:75:7a:26:3a:e9:e5:
                    ca:cb:fe:78:70:cf:d3:31:93:62:e5:9a:15:c2:56:
                    77:c2:f3:c6:14:5b:28:05:12:87:50:c4:2e:55:45:
                    01:48:b7:01:7a:f2:39:76:02:62:ad:f3:50:5c:bc:
                    7d:30:bc:22:b6:36:05:6e:4b:7e:ea:6e:bc:23:9c:
                    12:04:c6:a2:6f:97:3a:79:51:0f:d1:a8:3d:47:95:
                    25:37:b8:7f:0d:a9:b3:4f:f5:56:8a:8b:8c:2d:49:
                    3d:85:fc:d3:9f:ac:47:12:8a:d1:c7:2f:aa:24:78:
                    93:1e:44:bf:55:09:8c:0c:70:69:39:8c:8b:cc:2e:
                    7b:96:67:cc:20:4c:f4:be:d6:dc:88:70:b8:72:1e:
                    ae:42:50:11:e9:4a:5a:bf:b5:0f:82:d4:e5:fa:85:
                    fb:0d:e4:c4:95:ec:02:86:9f:af:a3:55:e6:8d:a0:
                    5c:7d:c7:6a:32:0a:e0:f3:98:e7:cc:e9:d6:51:66:
                    80:15:52:d7:cd:cd:9c:b9:53:31:76:4f:fb:81:d0:
                    75:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EA:47:83:A6:48:D4:F5:AA:01:A9:89:0E:2F:E6:FB:8E:5F:F0:85
            X509v3 Authority Key Identifier:
                keyid:42:7D:CA:63:17:4C:6F:7C:ED:2B:A4:F3:19:DC:C2:9A:48:92:89:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:99:05:51:64:8b:90:66:eb:46:45:27:ff:f3:c0:fd:f1:13:
         14:70:af:91:7d:4c:5e:7e:78:a0:1c:92:ec:11:fd:45:b8:2a:
         2a:ea:d5:23:99:46:a4:75:d2:61:cd:a0:fd:a9:6e:63:7b:0d:
         7d:15:8c:b1:25:57:ef:20:1e:c8:17:46:9b:50:b4:0b:0a:2a:
         7b:f9:24:ee:c8:ca:e7:ad:fd:19:55:f9:e7:f6:68:d1:d8:d8:
         2b:a0:2f:b2:45:c1:a2:23:e7:9d:e9:db:c5:1f:d3:ef:6b:22:
         d2:f8:80:22:d4:fa:5e:51:5b:ec:53:a9:96:ae:fe:0e:31:94:
         98:64:ff:95:5d:6c:57:02:f1:1d:82:61:29:55:bc:ad:27:2f:
         dc:e6:93:a4:37:9a:02:d6:80:95:37:40:1a:09:3e:9c:31:5c:
         99:9e:a6:dd:e0:61:7c:19:3d:9b:27:76:39:00:c5:28:65:e3:
         91:c6:ec:d5:ec:8f:36:48:17:a4:d1:b3:87:99:ef:64:9a:fa:
         83:27:bc:8c:a7:52:bf:6b:ff:23:aa:ae:68:49:c2:17:75:72:
         0e:b2:a4:14:21:bb:69:00:41:26:24:58:c7:a8:f1:92:ca:fe:
         9f:d0:5e:43:91:ea:ee:47:45:11:78:20:dc:d5:43:39:30:20:
         24:17:a4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:07:04 2025 by rpki-client