Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
File:                     Illqyngn2jIPE1xhMpnjWi4iJUM.mft (raw, json)
Hash identifier:          vinKGeOS4LjczzOL8jCLbPJayYtaOpnWZAAjxZmsACg=
Subject key identifier:   E1:CA:80:3F:23:7A:F4:30:3F:A9:46:64:5D:BA:59:24:26:DD:BB:83
Authority key identifier: 22:59:6A:CA:78:27:DA:32:0F:13:5C:61:32:99:E3:5A:2E:22:25:43
Certificate issuer:       /CN=22596aca7827da320f135c613299e35a2e222543
Certificate serial:       019714D61725AA66C0785AC8822DDCAB4633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Illqyngn2jIPE1xhMpnjWi4iJUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft
Manifest number:          094A
Signing time:             Wed 28 May 2025 03:01:04 +0000
Manifest this update:     Wed 28 May 2025 03:01:04 +0000
Manifest next update:     Thu 29 May 2025 03:01:04 +0000
Files and hashes:         1: Illqyngn2jIPE1xhMpnjWi4iJUM.crl (hash: CiRDW2h+dBL12P+xsVHcU/1mA7Q/Y7Ml0bxHnZOxhXQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:14:d6:17:25:aa:66:c0:78:5a:c8:82:2d:dc:ab:46:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22596aca7827da320f135c613299e35a2e222543
        Validity
            Not Before: May 28 03:01:04 2025 GMT
            Not After : May 29 03:01:04 2025 GMT
        Subject: CN=e1ca803f237af4303fa946645dba592426ddbb83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:4c:f6:c1:6c:6d:2f:5e:5c:a6:22:14:8a:
                    79:f7:1d:fb:53:6a:3f:6d:c3:91:99:3f:41:a6:bb:
                    c1:52:8e:8b:40:b5:f5:79:52:b3:0c:a7:c0:d7:64:
                    7c:65:62:51:59:2c:19:71:7c:86:ed:bc:1c:8e:23:
                    3e:d8:09:3d:e2:4e:78:e3:2c:02:c7:22:f3:c8:c6:
                    20:54:12:a5:65:f5:da:b8:18:c0:90:7a:b5:d7:85:
                    7c:f2:b0:19:f0:53:29:3f:d6:e7:ab:27:66:7e:95:
                    29:af:b4:11:14:8d:fd:73:6d:20:fc:5d:05:9d:ab:
                    05:f4:a3:da:61:b7:2c:b6:cb:1a:08:71:4e:a1:8b:
                    51:7b:cd:ab:8c:55:62:e9:68:4b:aa:2e:6c:62:f3:
                    ec:50:3d:dd:40:68:53:5f:99:16:4d:78:d1:19:81:
                    81:1a:0e:1e:12:0a:fa:50:24:58:82:3c:8d:71:39:
                    01:cd:7a:c6:56:ec:08:e6:0b:0e:f6:45:ae:be:f4:
                    6a:fe:24:11:2f:82:26:f3:87:ce:7e:ae:c8:d9:90:
                    4b:2b:ca:0b:e7:15:bb:cf:f8:12:02:f7:7c:db:79:
                    8d:63:9b:d7:54:00:b4:1a:c1:13:45:ca:5e:f5:61:
                    a6:56:cf:52:b1:a8:44:0a:b7:f1:88:1c:43:24:09:
                    24:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CA:80:3F:23:7A:F4:30:3F:A9:46:64:5D:BA:59:24:26:DD:BB:83
            X509v3 Authority Key Identifier:
                keyid:22:59:6A:CA:78:27:DA:32:0F:13:5C:61:32:99:E3:5A:2E:22:25:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Illqyngn2jIPE1xhMpnjWi4iJUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d2208e-de32-49de-9457-435ee1de5b9f/1/Illqyngn2jIPE1xhMpnjWi4iJUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:24:ad:a0:8c:d3:45:d7:cd:7e:d3:20:c8:db:79:c0:1e:48:
         ac:f9:c2:6c:ba:fb:c4:8c:8d:22:f6:d2:46:b8:6b:03:5f:60:
         d3:ea:fe:27:41:3e:27:7b:2c:6f:92:a1:8d:cf:6d:52:74:15:
         b6:ba:69:7d:35:46:f3:69:36:92:19:a4:5b:af:6f:fd:09:ee:
         8b:13:db:f1:6a:87:97:89:c9:6d:ff:02:95:11:eb:4a:c2:32:
         68:ec:1f:c3:a5:a5:9b:93:77:48:aa:62:55:03:5c:5d:a3:d2:
         1d:47:bd:0f:14:a9:54:e2:39:f3:d1:cc:4e:73:2d:63:42:d6:
         57:36:fc:48:c0:f4:34:cc:b0:16:23:99:03:fc:5f:08:b4:e7:
         02:d8:e5:cc:31:94:d9:05:a5:28:1f:b2:1e:48:89:d4:84:68:
         6c:49:f4:de:97:b3:74:7d:ec:f5:c8:40:35:53:53:14:a1:88:
         d0:25:dc:c2:20:6b:d1:ba:de:2f:70:67:3b:be:09:95:89:97:
         06:69:87:86:55:b9:b3:f1:58:6c:5b:ec:de:d3:66:92:67:9b:
         d8:4b:ba:2a:dd:85:52:e7:1b:c3:33:65:85:73:df:97:61:4b:
         3f:8d:a5:2d:ac:c4:92:16:c3:ca:4a:33:1e:4d:e1:21:43:ff:
         c5:4c:ed:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:01:09 2025 by rpki-client