Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/cd36f4-a537-47c9-a9ee-89373951f425/1/tiCByh2QtvilPfxkknymhBj-Cbs.mft
File:                     tiCByh2QtvilPfxkknymhBj-Cbs.mft (raw, json)
Hash identifier:          ivSHvHdnG/90pQXGOE62N/7LNHF+JFZ8Oki4yL9uzTY=
Subject key identifier:   CE:AB:4F:2C:10:D2:00:EE:09:0E:28:60:55:24:F8:14:DC:12:65:38
Authority key identifier: B6:20:81:CA:1D:90:B6:F8:A5:3D:FC:64:92:7C:A6:84:18:FE:09:BB
Certificate issuer:       /CN=b62081ca1d90b6f8a53dfc64927ca68418fe09bb
Certificate serial:       01938EF83D66C3F3853DE3043A6611ECD6C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tiCByh2QtvilPfxkknymhBj-Cbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/cd36f4-a537-47c9-a9ee-89373951f425/1/tiCByh2QtvilPfxkknymhBj-Cbs.mft
Manifest number:          6F
Signing time:             Wed 04 Dec 2024 00:00:53 +0000
Manifest this update:     Wed 04 Dec 2024 00:00:53 +0000
Manifest next update:     Thu 05 Dec 2024 00:00:53 +0000
Files and hashes:         1: tiCByh2QtvilPfxkknymhBj-Cbs.crl (hash: 15trpb3H8MwETgwIqb+yFa+C6Z8PCd+0/ZhA+u+IxtY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8e:f8:3d:66:c3:f3:85:3d:e3:04:3a:66:11:ec:d6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62081ca1d90b6f8a53dfc64927ca68418fe09bb
        Validity
            Not Before: Dec  4 00:00:53 2024 GMT
            Not After : Dec  5 00:00:53 2024 GMT
        Subject: CN=ceab4f2c10d200ee090e28605524f814dc126538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:45:30:01:0e:d0:7a:a1:70:42:98:55:e5:
                    77:8d:df:ca:fe:2b:af:1d:42:3f:e3:6a:d1:a6:23:
                    11:b1:08:85:00:d1:e5:d8:bf:0f:01:d5:3f:0b:ca:
                    68:ce:2f:04:4d:ff:69:4c:4b:ef:bb:a6:cb:d6:91:
                    4a:bb:46:94:1f:8c:83:ae:e8:b2:ab:22:2c:01:1f:
                    94:5b:dc:84:6f:96:0d:96:c7:6d:49:dd:63:f3:25:
                    df:b8:60:49:24:f5:60:af:38:05:65:c0:47:b0:1a:
                    16:d8:db:0b:c6:8f:af:fc:3a:9f:78:78:ed:93:f0:
                    8c:1b:d6:fe:f8:22:34:e3:80:fb:c0:06:ec:79:fb:
                    93:e3:d2:4d:ef:60:66:06:83:3e:1a:c0:3f:fd:ce:
                    5a:4c:fb:af:89:39:86:29:9c:21:ec:7b:1c:08:2a:
                    6e:05:08:79:3f:b8:b0:11:1b:0d:ba:4b:53:32:aa:
                    99:be:0c:d5:84:48:71:47:cb:e5:23:69:c5:2c:9c:
                    73:12:34:50:ea:06:7d:58:c6:8e:c0:5e:f6:d4:82:
                    f9:af:a9:89:82:61:f6:ea:80:b5:fc:95:79:4d:2e:
                    ef:25:7b:b1:49:fb:f1:d8:1c:a4:ac:89:01:67:03:
                    42:83:41:68:c0:5d:e8:30:3f:b1:38:8b:a2:36:69:
                    ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AB:4F:2C:10:D2:00:EE:09:0E:28:60:55:24:F8:14:DC:12:65:38
            X509v3 Authority Key Identifier:
                keyid:B6:20:81:CA:1D:90:B6:F8:A5:3D:FC:64:92:7C:A6:84:18:FE:09:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiCByh2QtvilPfxkknymhBj-Cbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/cd36f4-a537-47c9-a9ee-89373951f425/1/tiCByh2QtvilPfxkknymhBj-Cbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/cd36f4-a537-47c9-a9ee-89373951f425/1/tiCByh2QtvilPfxkknymhBj-Cbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a3:f2:4b:d2:b8:15:51:e9:83:8d:b3:e5:8e:b0:9c:ba:10:
         5a:f7:65:d0:ef:3c:9b:18:2e:6b:0f:30:bf:a1:5e:c7:ff:d6:
         b9:d2:b9:8e:6e:59:cb:ee:bc:f7:de:95:64:19:c9:78:87:3c:
         92:83:92:5d:25:5e:71:13:5e:0b:d6:0c:48:3d:d2:b9:05:15:
         16:82:d3:07:ad:e6:37:58:2b:ba:1d:fc:79:71:2a:aa:a1:b6:
         f8:70:23:ab:88:d2:39:de:e8:0d:b9:e2:ad:36:5d:ce:77:bf:
         09:7f:05:db:1b:93:f8:89:2d:d7:6e:50:db:95:16:1a:f6:d1:
         21:ff:f8:19:b1:3a:7a:34:e7:d9:61:03:09:44:92:48:dc:20:
         82:9e:b5:97:1d:34:8f:a5:ad:e5:dc:c3:d6:36:66:15:62:bb:
         61:a3:04:c7:71:4e:ab:45:87:b1:0f:71:bd:49:64:75:91:58:
         40:5d:83:eb:60:ef:f0:03:47:eb:90:db:c9:14:ef:f1:2b:f7:
         46:7c:e0:39:c2:a6:f5:d3:7f:4e:3b:12:28:d0:f4:9e:2e:a1:
         e2:9a:c0:d2:4b:89:da:1a:a1:98:33:f5:f6:a9:ff:fb:e3:92:
         01:04:3b:2a:98:4a:4c:3b:3c:15:3a:bc:e6:9d:d6:e4:4a:66:
         1b:f4:1e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:57 2025 by rpki-client