Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bf602f-d80b-480e-8d3f-3a423cbed11b/1/Tk6ou_cB2P42qoZDcSWRWGsfsfo.mft
File:                     Tk6ou_cB2P42qoZDcSWRWGsfsfo.mft (raw, json)
Hash identifier:          815EznM+b6vmCYguvSCukZRc1ql2t6DEAEIUCTZQUMg=
Subject key identifier:   3C:AC:46:FA:1F:5B:B4:0D:AA:9F:47:55:B9:58:88:55:E7:FB:14:F3
Authority key identifier: 4E:4E:A8:BB:F7:01:D8:FE:36:AA:86:43:71:25:91:58:6B:1F:B1:FA
Certificate issuer:       /CN=4e4ea8bbf701d8fe36aa8643712591586b1fb1fa
Certificate serial:       01924184735DF7A009DBA6DE01EAE602E66F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tk6ou_cB2P42qoZDcSWRWGsfsfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/bf602f-d80b-480e-8d3f-3a423cbed11b/1/Tk6ou_cB2P42qoZDcSWRWGsfsfo.mft
Manifest number:          0357
Signing time:             Mon 30 Sep 2024 06:00:52 +0000
Manifest this update:     Mon 30 Sep 2024 06:00:52 +0000
Manifest next update:     Tue 01 Oct 2024 06:00:52 +0000
Files and hashes:         1: Tk6ou_cB2P42qoZDcSWRWGsfsfo.crl (hash: aS7EWcCaINKWsEqxLNRYNetnc0lGzzmtQ3JnDlAWdw0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:41:84:73:5d:f7:a0:09:db:a6:de:01:ea:e6:02:e6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e4ea8bbf701d8fe36aa8643712591586b1fb1fa
        Validity
            Not Before: Sep 30 06:00:52 2024 GMT
            Not After : Oct  1 06:00:52 2024 GMT
        Subject: CN=3cac46fa1f5bb40daa9f4755b9588855e7fb14f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:66:24:73:6f:d1:6a:59:51:9a:1f:55:6d:
                    89:6b:b4:ac:08:e5:ff:1d:ce:17:d7:98:06:47:41:
                    ab:a4:4c:7f:dc:4c:d0:e0:d3:38:a7:81:b9:52:70:
                    bc:12:69:1b:24:44:a6:a1:cf:be:0c:ba:c6:5e:eb:
                    bb:2a:9b:a0:fe:fb:87:d0:50:c8:25:ab:1d:da:f8:
                    61:5f:23:2b:32:2c:17:8c:d7:6e:19:50:60:4f:c8:
                    8a:d8:d0:9b:dd:f6:2e:79:b6:b1:4c:00:68:75:d5:
                    6f:eb:f0:30:da:84:a1:22:42:1d:00:cb:cc:c3:b9:
                    85:80:0c:e4:9d:51:47:b7:01:bf:dc:e5:05:93:1c:
                    db:03:13:09:08:a4:de:e3:60:66:a4:8c:33:05:2c:
                    2e:64:a4:69:c0:64:6e:1b:a1:8b:b0:b1:00:e2:0e:
                    88:43:39:b6:ae:40:b1:76:98:cc:94:39:c7:98:27:
                    ba:b7:4a:a2:5a:af:f3:47:58:e4:43:0b:57:17:db:
                    66:0a:58:a0:44:dd:c7:3e:58:ac:95:a3:91:92:ac:
                    7c:6a:39:0a:35:b9:03:09:57:08:e0:9a:6b:46:2f:
                    35:1e:ca:10:b8:66:53:05:69:c4:6c:a2:ce:c8:96:
                    41:6e:93:db:10:5f:34:73:45:ff:4b:f2:3a:1c:b6:
                    79:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AC:46:FA:1F:5B:B4:0D:AA:9F:47:55:B9:58:88:55:E7:FB:14:F3
            X509v3 Authority Key Identifier:
                keyid:4E:4E:A8:BB:F7:01:D8:FE:36:AA:86:43:71:25:91:58:6B:1F:B1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk6ou_cB2P42qoZDcSWRWGsfsfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bf602f-d80b-480e-8d3f-3a423cbed11b/1/Tk6ou_cB2P42qoZDcSWRWGsfsfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bf602f-d80b-480e-8d3f-3a423cbed11b/1/Tk6ou_cB2P42qoZDcSWRWGsfsfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ca:20:43:b5:e6:56:3f:a6:b4:5b:89:39:b4:6f:02:1c:84:
         1f:2e:b3:13:b6:3f:98:3a:b7:b6:bc:ea:8a:73:a1:51:f3:1c:
         7a:f6:f3:39:e0:39:17:90:d2:03:14:b9:2e:10:6c:86:c0:7c:
         67:84:43:ce:90:3f:d6:57:3b:73:2a:65:3e:a4:62:96:21:ef:
         cb:1c:9d:71:0c:39:5a:eb:c7:b4:58:11:23:45:85:f9:28:38:
         60:42:a9:2c:dd:4d:63:5b:06:ff:8a:8e:c7:4f:6d:9f:9d:64:
         30:a1:7a:b6:26:3c:fd:c1:a6:4c:aa:70:8e:4e:58:7b:fb:fe:
         86:04:14:8b:b4:8d:b4:94:da:79:e9:51:6f:b6:26:08:86:aa:
         7a:f9:05:6f:79:32:29:c9:ee:a3:ae:b6:d3:80:6f:92:a5:9f:
         b6:68:2a:34:c3:13:71:a6:01:00:5b:db:01:03:7d:7a:9f:1d:
         cc:ec:64:c0:97:51:f2:7a:64:7c:0f:64:98:c7:8c:94:3a:9a:
         be:52:bc:1e:cb:e1:b2:0d:91:a7:e5:9f:ce:f1:16:91:c9:8d:
         1b:79:ce:8f:79:15:50:d5:1e:fb:54:be:12:58:3c:51:db:91:
         b1:6c:fd:5d:26:b7:a8:f3:8a:be:af:88:4e:64:49:42:31:11:
         25:80:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:38:33 2025 by rpki-client