Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e7affb-80e3-4b66-b4f8-b2038801f31c/1/Qx09a5NIJAXW1f2T9Q6VD4M69Eg.mft
File:                     Qx09a5NIJAXW1f2T9Q6VD4M69Eg.mft (raw, json)
Hash identifier:          YLYUHVipA4BQKD95WlBhbuUP1ocxhQjDFu8/x5VRAd8=
Subject key identifier:   68:F1:5D:62:BD:06:30:B6:CF:CE:18:F1:76:07:F7:23:07:63:0D:AC
Authority key identifier: 43:1D:3D:6B:93:48:24:05:D6:D5:FD:93:F5:0E:95:0F:83:3A:F4:48
Certificate issuer:       /CN=431d3d6b93482405d6d5fd93f50e950f833af448
Certificate serial:       018327A82D0DF229FC7BCAE910019790A1FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qx09a5NIJAXW1f2T9Q6VD4M69Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/e7affb-80e3-4b66-b4f8-b2038801f31c/1/Qx09a5NIJAXW1f2T9Q6VD4M69Eg.mft
Manifest number:          0D
Signing time:             Sat 10 Sep 2022 13:47:56 +0000
Manifest this update:     Sat 10 Sep 2022 13:47:56 +0000
Manifest next update:     Sun 11 Sep 2022 13:47:56 +0000
Files and hashes:         1: Qx09a5NIJAXW1f2T9Q6VD4M69Eg.crl (hash: 18NG+uAIBkct+a826tB5y/wxP++oA3517YyXp2+rB4U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:27:a8:2d:0d:f2:29:fc:7b:ca:e9:10:01:97:90:a1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=431d3d6b93482405d6d5fd93f50e950f833af448
        Validity
            Not Before: Sep 10 13:47:56 2022 GMT
            Not After : Sep 11 13:47:56 2022 GMT
        Subject: CN=68f15d62bd0630b6cfce18f17607f72307630dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e5:a8:f2:0c:67:22:61:3b:01:0b:e4:f3:3d:
                    d3:dc:2d:84:58:59:7e:1b:50:b2:b2:ac:8a:2d:8d:
                    1e:6a:88:09:84:87:50:1e:6f:09:db:96:f0:af:c1:
                    8f:a9:e4:63:d6:06:b4:d7:40:62:9b:74:d7:b1:78:
                    ef:25:33:33:35:a5:4c:a5:99:49:41:e8:93:2f:1a:
                    a4:bd:7a:b8:5f:1c:a0:84:4a:15:5a:e7:ec:77:ad:
                    11:38:fa:b9:ed:90:56:37:f4:31:3d:57:e6:fc:19:
                    06:f0:d5:0a:1b:cf:df:81:a2:fb:7f:e8:30:d3:1f:
                    a4:b1:94:2c:d2:7e:1b:9e:61:5e:19:6a:57:61:d0:
                    c7:6b:d0:13:83:6a:6e:da:cc:98:e4:05:c8:83:73:
                    3c:fc:aa:1c:d2:f4:15:f9:1f:ec:1f:96:70:b0:83:
                    97:4f:95:b1:2d:c9:5a:60:eb:6c:b8:69:f5:86:97:
                    30:23:0b:1c:5a:d4:ba:68:7c:da:8a:10:be:71:62:
                    44:7d:0b:07:36:07:ba:c4:6d:2e:a6:68:3e:ab:31:
                    81:ab:0a:57:b5:8d:6e:c4:2e:e3:5c:99:74:8f:fe:
                    a9:2d:6b:b9:d9:f5:cc:b3:b4:88:45:e6:cb:7d:9f:
                    46:9d:c0:27:18:31:37:f9:73:a0:12:d2:82:b1:22:
                    8a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F1:5D:62:BD:06:30:B6:CF:CE:18:F1:76:07:F7:23:07:63:0D:AC
            X509v3 Authority Key Identifier:
                keyid:43:1D:3D:6B:93:48:24:05:D6:D5:FD:93:F5:0E:95:0F:83:3A:F4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx09a5NIJAXW1f2T9Q6VD4M69Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e7affb-80e3-4b66-b4f8-b2038801f31c/1/Qx09a5NIJAXW1f2T9Q6VD4M69Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e7affb-80e3-4b66-b4f8-b2038801f31c/1/Qx09a5NIJAXW1f2T9Q6VD4M69Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:21:f6:a5:e3:50:02:ef:79:33:ab:4f:f3:fa:2d:5f:da:30:
         01:15:48:72:40:29:57:b7:93:90:75:6d:ab:d0:05:6d:92:69:
         6b:ce:37:e2:a7:f7:ab:40:98:94:7e:cd:90:ba:1e:43:e2:56:
         25:09:d8:2d:e9:a8:7a:71:7a:73:e1:bd:5b:a6:66:df:33:d7:
         d1:f8:5f:59:88:97:69:3f:bf:ab:bb:b7:15:97:fa:03:ed:ef:
         46:4f:41:de:19:e6:5a:e5:f1:8b:d6:da:c8:c4:7b:8e:76:84:
         49:7b:bf:cf:6b:8d:34:46:e9:37:fc:9c:27:32:4d:5e:a7:0d:
         14:7c:b5:12:17:4f:87:d5:5c:fd:eb:da:b6:31:41:d4:c0:f6:
         ad:e4:d1:dc:ea:99:73:49:95:3a:3b:42:57:67:a0:f9:c8:92:
         a3:f0:4a:08:6b:7c:1b:17:95:8c:99:24:47:5f:74:44:9a:08:
         f8:5b:78:8f:49:c6:b8:6e:7d:11:f6:e8:28:f0:2d:28:33:a8:
         41:2c:11:64:11:76:5f:a7:d0:7b:74:07:f0:cf:f2:28:62:37:
         4b:c2:b5:d3:df:91:33:30:87:29:4f:7b:74:11:23:dc:31:c0:
         53:98:30:38:fe:65:2c:15:cc:2f:aa:4a:d5:f3:71:f8:37:fa:
         54:f7:3f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:27 2025 by rpki-client