Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.mft
File:                     _SqYOFjGha4w7gNeigMFQkiMXws.mft (raw, json)
Hash identifier:          nSR5vahmFd+PtSCEEQLXJbXN4HeE1a+/eEJgqywS5zk=
Subject key identifier:   FD:83:B3:87:10:CD:16:64:DF:D0:B3:6F:66:C0:55:68:5B:0A:8D:77
Authority key identifier: FD:2A:98:38:58:C6:85:AE:30:EE:03:5E:8A:03:05:42:48:8C:5F:0B
Certificate issuer:       /CN=fd2a983858c685ae30ee035e8a030542488c5f0b
Certificate serial:       0196A2E4FE3326495C68B9EE4B1331F0322C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SqYOFjGha4w7gNeigMFQkiMXws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.mft
Manifest number:          036F
Signing time:             Tue 06 May 2025 00:00:38 +0000
Manifest this update:     Tue 06 May 2025 00:00:38 +0000
Manifest next update:     Wed 07 May 2025 00:00:38 +0000
Files and hashes:         1: _SqYOFjGha4w7gNeigMFQkiMXws.crl (hash: rVOCLzYpcL/IaajmDWZUKJDBljyjlweKELcFMPuXl2A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:e4:fe:33:26:49:5c:68:b9:ee:4b:13:31:f0:32:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2a983858c685ae30ee035e8a030542488c5f0b
        Validity
            Not Before: May  6 00:00:38 2025 GMT
            Not After : May  7 00:00:38 2025 GMT
        Subject: CN=fd83b38710cd1664dfd0b36f66c055685b0a8d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:31:75:c4:f3:67:67:96:03:ed:88:89:0f:
                    9e:b0:c9:74:62:92:86:c9:95:6c:bd:8d:de:78:60:
                    2c:62:f2:47:18:c4:8f:64:37:89:85:aa:da:9e:9d:
                    b5:37:a8:73:77:86:ed:c9:dc:d7:56:1d:e1:36:c5:
                    6c:cc:95:10:5a:aa:4d:d7:3d:8c:0b:0b:7f:eb:3d:
                    a9:45:9b:fa:bb:d2:84:3d:8c:74:57:6c:df:f3:39:
                    e0:c9:bd:a5:ab:f2:26:cc:df:92:f1:ae:37:e9:6d:
                    93:61:c5:81:08:72:92:bc:ae:0d:55:63:09:2d:d2:
                    c4:af:f2:34:07:dc:38:99:34:28:13:c0:42:28:3d:
                    e9:d1:b6:69:af:51:1c:bc:8c:cb:ba:90:70:16:01:
                    7e:3b:5d:9f:49:bb:4c:bf:c1:4a:b4:6e:a0:3e:4c:
                    2c:34:fc:9a:88:a2:c3:d8:14:27:d8:5d:fd:6e:f3:
                    9c:54:f6:9f:e9:ec:ac:27:48:9e:e5:8f:3a:9a:ec:
                    d6:4d:ca:a8:ee:45:d9:5d:1f:db:36:04:d3:0b:ae:
                    9f:7e:d9:f9:88:97:ee:71:89:31:53:93:39:84:db:
                    fc:5d:e3:15:d2:a8:8b:45:a8:0a:4d:f3:80:ea:63:
                    2e:38:b9:4b:c6:ad:9d:e2:d9:66:b9:e0:8d:9d:1e:
                    8b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:83:B3:87:10:CD:16:64:DF:D0:B3:6F:66:C0:55:68:5B:0A:8D:77
            X509v3 Authority Key Identifier:
                keyid:FD:2A:98:38:58:C6:85:AE:30:EE:03:5E:8A:03:05:42:48:8C:5F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SqYOFjGha4w7gNeigMFQkiMXws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/23cbdd-139f-468d-88c3-f7942ca328f9/1/_SqYOFjGha4w7gNeigMFQkiMXws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b2:2c:0c:55:99:f4:74:7e:b0:37:44:03:76:9a:3d:e5:56:
         99:ec:9b:b3:30:a8:f1:da:a5:80:09:76:0e:3b:ca:b5:9b:81:
         18:5c:ca:48:92:2b:eb:a7:81:2d:13:9e:fe:4b:46:be:86:90:
         80:02:1a:b3:3f:d8:8e:7f:ec:df:53:f8:8f:15:0a:ec:fc:1c:
         0b:0f:fa:41:c4:b3:87:8b:24:17:bc:95:c7:24:16:b9:00:ce:
         a6:0a:5e:58:cf:a5:37:5a:51:fa:8f:46:36:42:7e:5e:9f:99:
         18:b9:b1:cb:80:f3:cb:38:b8:fe:42:c8:5b:ea:f5:c0:22:b9:
         67:26:7c:c6:bb:f8:ce:f0:fe:dc:62:f9:71:d9:4b:81:b1:a4:
         93:18:7e:61:1c:3f:63:1e:7d:cc:53:56:8b:c9:c1:6e:99:09:
         3d:17:72:ac:ef:53:56:fa:bf:08:b0:07:65:5e:15:eb:50:db:
         8d:86:15:aa:26:15:27:7c:c0:3c:c3:bf:0f:84:b8:e1:a0:63:
         b4:68:55:28:cd:cf:81:0a:8a:f3:d9:08:9a:d8:81:ee:c1:cf:
         91:d2:be:3b:11:4b:83:be:29:e0:cb:8c:cf:1e:e1:b2:5c:13:
         a8:55:e6:c4:d1:fc:9e:ea:d1:3c:2f:41:01:bf:05:cb:3f:8d:
         ba:b8:c7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:37:31 2025 by rpki-client