Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft
File:                     Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft (raw, json)
Hash identifier:          lp5uD+ExhJ9v4+ZgEdjogukn+11Bb7o58SbtKAI+hBA=
Subject key identifier:   25:17:4B:7D:A5:37:1F:1C:E2:28:0E:DD:3C:C6:44:07:34:5E:95:C6
Authority key identifier: 1D:DF:59:51:C9:AE:79:97:6D:97:E1:D2:8E:46:6A:61:51:19:89:8B
Certificate issuer:       /CN=1ddf5951c9ae79976d97e1d28e466a615119898b
Certificate serial:       01910B75B329F94B1FE32DB45CDA064A1AD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft
Manifest number:          0C8B
Signing time:             Thu 01 Aug 2024 01:02:28 +0000
Manifest this update:     Thu 01 Aug 2024 01:02:28 +0000
Manifest next update:     Fri 02 Aug 2024 01:02:28 +0000
Files and hashes:         1: Hd9ZUcmueZdtl-HSjkZqYVEZiYs.crl (hash: iW+xbl01hgB0bctjfnDP50qe+pDmJDTxDdPfFX41XHA=)
                          2: YMQ02KtoHddOBd8P0_L911zzXZo.roa (hash: KLEMa+EsIIYumj5REVXzu9c2VVWhgQLOfarzx4uuFQ8=)
                          3: dq0H0ptfWVeMI5pzuDVutGRIMbA.roa (hash: 0F5Hp24nVBW+EaqkAlTh8XGSno4s2M0R/Zi5bowUmQE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:0b:75:b3:29:f9:4b:1f:e3:2d:b4:5c:da:06:4a:1a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ddf5951c9ae79976d97e1d28e466a615119898b
        Validity
            Not Before: Aug  1 01:02:28 2024 GMT
            Not After : Aug  2 01:02:28 2024 GMT
        Subject: CN=25174b7da5371f1ce2280edd3cc64407345e95c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:e1:3e:c8:32:89:f3:ea:5b:eb:9a:4b:63:
                    51:80:9b:1c:22:ee:b7:45:fd:57:30:8c:21:d0:de:
                    41:d9:57:d3:08:06:2f:f4:98:df:57:cf:aa:17:b9:
                    1b:c8:49:9c:c0:dd:ac:ed:22:9f:6f:ee:a3:99:bb:
                    10:4e:43:1a:6b:1e:42:91:67:1f:9f:dd:db:79:7b:
                    0e:c6:fe:65:09:18:2d:4b:1d:31:6d:da:f6:48:f3:
                    6e:a4:92:fa:50:87:f9:62:56:0f:28:77:c4:c2:fa:
                    5d:b8:04:34:0e:65:7d:fd:59:a7:f0:77:be:e6:e5:
                    d4:64:ca:d7:3a:3a:55:0a:ea:96:f7:57:6a:16:f6:
                    62:13:96:dc:aa:48:bd:67:6e:ad:a3:85:05:22:e7:
                    fd:9a:95:b0:26:70:dd:95:96:20:a8:36:d5:d6:8f:
                    c4:c2:3a:75:2a:bd:4a:c6:09:1a:7c:58:55:d1:c1:
                    1b:02:8e:0d:80:02:b1:90:36:85:02:60:cc:ab:95:
                    ba:d5:79:e9:0b:a4:1f:3f:f1:ce:0e:6e:47:a6:b1:
                    34:01:76:b8:4b:8b:38:c9:ef:17:dd:94:07:b8:cf:
                    4f:f0:8e:4f:0d:4e:b5:e9:a1:9a:36:92:07:4e:78:
                    02:3d:6f:23:42:77:d9:59:ac:c1:a5:0e:86:dd:66:
                    48:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:17:4B:7D:A5:37:1F:1C:E2:28:0E:DD:3C:C6:44:07:34:5E:95:C6
            X509v3 Authority Key Identifier:
                keyid:1D:DF:59:51:C9:AE:79:97:6D:97:E1:D2:8E:46:6A:61:51:19:89:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:a9:ca:09:5c:c7:19:c8:ff:c4:6f:54:ca:56:ca:48:b6:57:
         02:88:e2:9b:c7:f5:d6:60:d1:10:43:cc:87:23:ea:81:33:75:
         ac:9d:10:05:5b:f6:88:c7:fd:c5:00:59:36:b8:c3:33:c1:2e:
         d7:84:10:a0:a4:5f:99:c4:2f:6b:85:70:6a:7a:86:38:9b:bd:
         a7:47:84:57:90:21:fe:df:0c:c9:dc:d7:e9:75:f2:62:50:9f:
         bb:2d:56:d4:5c:8b:29:0e:b8:06:d6:eb:db:af:d4:a6:53:7e:
         41:6e:19:b0:a7:39:db:bc:a6:bf:a2:10:d8:65:50:a1:64:96:
         c7:f3:d8:f2:66:27:b6:4a:7a:c8:df:0d:51:65:01:de:9b:23:
         e6:f2:50:c0:2a:c4:6a:2f:8d:ab:55:78:3a:99:14:8d:33:cd:
         62:ef:c7:11:85:b5:80:6e:b6:b3:fb:49:ba:d9:fd:e3:2c:92:
         a0:5d:e2:dd:42:6a:ea:66:fe:fc:e1:18:46:e7:6e:e7:a4:12:
         70:84:59:a4:76:2b:31:05:ff:00:fe:41:93:e5:cb:e2:44:54:
         c0:9e:43:b5:53:ae:32:1a:5c:9d:38:04:5e:b7:ac:b3:d7:ad:
         b2:d3:a0:84:80:41:47:81:9b:0f:d9:d1:e5:35:84:b0:09:79:
         24:31:6b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:44 2025 by rpki-client