Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/79bfdd-d947-4dbf-8acb-678a2529a1e1/1/IInyGLYJHgA8yVGa-JSqojzdjEI.mft
File:                     IInyGLYJHgA8yVGa-JSqojzdjEI.mft (raw, json)
Hash identifier:          ROCU3qNIGyX14ktKhJxZUhP57B0EJyvlobUhDjuV8Yg=
Subject key identifier:   4E:FA:2C:DB:6D:66:FA:CA:41:05:CD:02:48:81:EA:12:8A:EF:6B:03
Authority key identifier: 20:89:F2:18:B6:09:1E:00:3C:C9:51:9A:F8:94:AA:A2:3C:DD:8C:42
Certificate issuer:       /CN=2089f218b6091e003cc9519af894aaa23cdd8c42
Certificate serial:       0193A210FEBCF5CD2C6B0DBB436DFA96DEBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IInyGLYJHgA8yVGa-JSqojzdjEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/79bfdd-d947-4dbf-8acb-678a2529a1e1/1/IInyGLYJHgA8yVGa-JSqojzdjEI.mft
Manifest number:          A4
Signing time:             Sat 07 Dec 2024 17:00:42 +0000
Manifest this update:     Sat 07 Dec 2024 17:00:42 +0000
Manifest next update:     Sun 08 Dec 2024 17:00:42 +0000
Files and hashes:         1: IInyGLYJHgA8yVGa-JSqojzdjEI.crl (hash: ay2RjlzgEA0mMO5CIoaWdpihrMD/K8VunOydhWQV+UA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:a2:10:fe:bc:f5:cd:2c:6b:0d:bb:43:6d:fa:96:de:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2089f218b6091e003cc9519af894aaa23cdd8c42
        Validity
            Not Before: Dec  7 17:00:42 2024 GMT
            Not After : Dec  8 17:00:42 2024 GMT
        Subject: CN=4efa2cdb6d66faca4105cd024881ea128aef6b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d3:ed:ec:a4:91:6d:07:c8:97:dd:ca:23:54:
                    c3:eb:d6:c3:a6:f6:9d:2b:cc:de:20:3c:17:6a:74:
                    3d:96:60:bf:cf:71:5c:e3:9e:ab:58:9e:62:ae:9c:
                    2c:98:a3:e5:d7:b9:87:5e:dd:9c:86:80:be:b6:80:
                    0d:81:4c:f0:6b:ee:aa:57:5b:8f:7a:f3:a9:4b:1f:
                    26:e5:3f:17:97:0a:a6:df:54:47:de:a3:3c:ba:00:
                    d2:d7:c6:29:a6:71:92:b2:c5:7f:58:d3:74:4d:e2:
                    ea:0b:73:d7:7e:ae:15:97:53:16:06:dd:18:ef:d9:
                    15:17:00:ba:a6:a6:62:39:f3:83:fb:12:c9:af:cb:
                    f9:ab:cf:f7:ed:2e:95:c8:60:b2:e4:d3:1d:2e:b7:
                    5a:85:43:dd:60:93:4a:21:1c:ac:14:d2:22:ec:8e:
                    ca:72:8d:4e:79:51:cd:2b:1f:33:ff:20:0b:c1:0f:
                    ff:47:14:95:62:61:89:51:0b:a5:e9:e4:c1:83:ec:
                    11:c2:03:80:8c:6f:ea:c2:1b:b0:a0:6c:2d:25:d4:
                    69:37:86:2e:29:ea:47:4c:a3:07:23:eb:53:fc:f8:
                    c2:72:01:c1:f5:b1:60:d9:a2:5b:51:b9:99:55:f5:
                    95:36:f5:f4:78:8e:79:a3:c6:13:1f:ad:e0:a4:79:
                    5f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FA:2C:DB:6D:66:FA:CA:41:05:CD:02:48:81:EA:12:8A:EF:6B:03
            X509v3 Authority Key Identifier:
                keyid:20:89:F2:18:B6:09:1E:00:3C:C9:51:9A:F8:94:AA:A2:3C:DD:8C:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IInyGLYJHgA8yVGa-JSqojzdjEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/79bfdd-d947-4dbf-8acb-678a2529a1e1/1/IInyGLYJHgA8yVGa-JSqojzdjEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/79bfdd-d947-4dbf-8acb-678a2529a1e1/1/IInyGLYJHgA8yVGa-JSqojzdjEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a6:93:16:d8:25:5e:97:36:42:07:21:d8:47:3d:64:9a:32:
         17:67:b2:5f:65:d1:4f:e2:4a:97:87:ed:71:82:4d:55:6c:b6:
         b7:9a:5a:eb:9c:8b:d0:b9:3e:10:ef:a3:e1:1d:2e:9c:7a:20:
         88:2a:a8:c5:99:bb:5a:ae:c1:ee:3a:eb:5a:b6:f8:f8:e7:b0:
         bd:8f:6f:1e:8e:41:67:62:8a:9e:1a:a7:cb:ae:df:8f:13:89:
         12:b1:5e:f2:0e:8a:44:c1:54:fe:2c:81:26:21:bf:c0:b7:f9:
         26:97:cf:6e:de:bb:e0:9e:cd:bf:ae:15:0b:f8:81:7d:b6:fa:
         ce:f0:ce:5f:e6:d6:38:b3:86:30:1e:c7:28:cb:d2:c5:b1:68:
         97:03:38:de:15:68:84:d5:bb:75:bd:07:b6:84:af:a3:64:8c:
         b3:69:d3:0c:48:a8:a3:4b:80:6c:8d:db:b7:d6:2a:27:35:ef:
         c7:f0:49:2d:4b:69:a6:be:5a:a6:32:9e:55:36:60:ae:53:54:
         2e:c5:de:ab:e2:da:6e:37:95:68:23:d7:ec:0b:c4:e2:2f:91:
         ac:ee:91:e1:72:d2:1c:14:48:33:3c:8f:a5:d1:19:e6:0f:da:
         11:ce:8a:c1:57:b9:f8:a5:b8:2c:bf:c9:e4:53:1d:8f:76:4e:
         a4:6a:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:34 2025 by rpki-client