Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a9beb3-d8c0-47af-995d-cc6c8046bd81/1/QIFAQREy5EA3ZFHKONAxhDnOeZQ.mft
File:                     QIFAQREy5EA3ZFHKONAxhDnOeZQ.mft (raw, json)
Hash identifier:          cCUlPRX0iV3o1NXaRDarAv8eQR3V74oONcDVBg/R0fA=
Subject key identifier:   2F:8C:1E:0B:A6:34:EF:F4:7C:92:8E:F9:AD:C6:99:BD:CE:F0:D2:07
Authority key identifier: 40:81:40:41:11:32:E4:40:37:64:51:CA:38:D0:31:84:39:CE:79:94
Certificate issuer:       /CN=408140411132e440376451ca38d0318439ce7994
Certificate serial:       01971CFDF84DADE83D84BAF7B07244087F81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIFAQREy5EA3ZFHKONAxhDnOeZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a9beb3-d8c0-47af-995d-cc6c8046bd81/1/QIFAQREy5EA3ZFHKONAxhDnOeZQ.mft
Manifest number:          02
Signing time:             Thu 29 May 2025 17:01:35 +0000
Manifest this update:     Thu 29 May 2025 17:01:35 +0000
Manifest next update:     Fri 30 May 2025 17:01:35 +0000
Files and hashes:         1: QIFAQREy5EA3ZFHKONAxhDnOeZQ.crl (hash: PlxXs/WiXBqUkHdGJhZpt9uxlsGDBsisnlfyPJlNJNQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:1c:fd:f8:4d:ad:e8:3d:84:ba:f7:b0:72:44:08:7f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408140411132e440376451ca38d0318439ce7994
        Validity
            Not Before: May 29 17:01:35 2025 GMT
            Not After : May 30 17:01:35 2025 GMT
        Subject: CN=2f8c1e0ba634eff47c928ef9adc699bdcef0d207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:52:0d:44:90:46:bc:60:b2:95:09:ba:21:c4:
                    8c:86:68:30:63:d3:29:9a:68:f7:30:d5:f6:fd:95:
                    bf:35:0a:8b:52:54:57:a3:2e:23:f4:54:c0:3a:7c:
                    43:9d:63:18:aa:03:91:ad:29:63:30:47:af:ea:e1:
                    01:fc:b4:3a:6a:cc:e1:2f:d4:35:35:68:15:9a:7e:
                    18:ef:54:ff:bc:81:e1:29:42:e0:aa:74:30:50:cc:
                    6d:ff:f9:11:f8:80:36:45:f9:f7:d9:6c:51:b7:0c:
                    f2:8e:f7:0c:37:75:3e:88:36:1f:1a:62:88:6d:40:
                    a7:61:ba:88:9f:42:f7:ba:94:eb:b4:58:8c:ab:c0:
                    a4:7e:e8:6d:b6:d9:b0:4c:81:91:9e:dd:9e:cf:17:
                    41:ca:74:e1:38:5d:85:a7:2a:27:e1:98:3c:22:ad:
                    f4:70:f4:5d:e6:95:73:f3:67:50:e1:ce:6e:0f:c3:
                    92:25:de:20:f0:c0:5d:13:3f:3d:39:34:52:c6:df:
                    86:45:e5:36:e0:d8:8e:d7:c7:45:da:64:21:44:f5:
                    68:17:14:7a:97:0d:b9:5f:cd:b0:73:2c:76:b7:f8:
                    ad:c0:10:f1:14:e3:fe:90:4d:15:90:da:31:9e:b0:
                    11:6a:f5:17:90:8d:72:61:84:4e:d6:a5:78:15:58:
                    e2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8C:1E:0B:A6:34:EF:F4:7C:92:8E:F9:AD:C6:99:BD:CE:F0:D2:07
            X509v3 Authority Key Identifier:
                keyid:40:81:40:41:11:32:E4:40:37:64:51:CA:38:D0:31:84:39:CE:79:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIFAQREy5EA3ZFHKONAxhDnOeZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a9beb3-d8c0-47af-995d-cc6c8046bd81/1/QIFAQREy5EA3ZFHKONAxhDnOeZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a9beb3-d8c0-47af-995d-cc6c8046bd81/1/QIFAQREy5EA3ZFHKONAxhDnOeZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5e:50:0b:80:bc:c8:47:26:ea:f8:15:14:6a:79:b3:13:66:
         d1:a6:88:5b:39:26:a9:b9:79:39:bd:ad:f8:c1:76:07:4c:6b:
         10:2a:eb:c7:45:27:b8:39:fa:a6:49:27:ee:ad:86:bf:60:7b:
         bc:e1:d4:de:1a:05:ec:f1:e3:75:ac:01:4c:96:81:f2:6f:88:
         bd:6e:e4:8e:e5:69:ff:a4:43:9f:ae:8f:e9:e7:7e:29:a9:98:
         ad:e0:1c:cc:5d:1a:91:a6:68:c1:db:de:e9:0b:e5:bd:e1:41:
         17:19:87:e2:94:26:ba:76:55:e0:66:88:ff:ce:78:55:b9:12:
         9c:0d:cd:21:8d:19:91:e2:0f:2e:3d:2c:6b:c5:fb:61:2b:96:
         f0:a0:fa:f4:5c:95:24:d5:64:4e:b2:9d:68:7c:fe:03:d6:89:
         7e:32:56:b7:d1:1c:35:ec:23:34:91:4c:91:6d:6d:90:81:23:
         23:60:72:4d:48:7f:11:70:35:3d:69:69:89:6d:54:2a:b7:5d:
         04:1d:f0:99:f2:d9:83:79:cd:e0:76:ae:9a:d6:85:ee:c3:ba:
         7e:62:57:15:12:f2:0d:f5:e8:a7:a3:d0:55:81:fb:f8:cf:25:
         13:0e:f5:46:90:ac:cc:b4:54:9f:24:53:57:fc:a3:06:0a:a5:
         90:d1:f4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:19:57 2025 by rpki-client