Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/855115-6ba7-4a9a-b99f-f423c40d186a/1/BaTyDYOMb0niXaqX-kjICDMLQmY.mft
File:                     BaTyDYOMb0niXaqX-kjICDMLQmY.mft (raw, json)
Hash identifier:          FZKbKRGAuic3GY6dpvW/pWrOv2C0/OVf3ApkAPrKtjc=
Subject key identifier:   4B:CC:27:15:5C:64:82:24:8A:60:61:95:16:F6:56:31:B3:0C:E2:42
Authority key identifier: 05:A4:F2:0D:83:8C:6F:49:E2:5D:AA:97:FA:48:C8:08:33:0B:42:66
Certificate issuer:       /CN=05a4f20d838c6f49e25daa97fa48c808330b4266
Certificate serial:       018C57AE15B482B2CE081B23683AD7699B70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BaTyDYOMb0niXaqX-kjICDMLQmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/855115-6ba7-4a9a-b99f-f423c40d186a/1/BaTyDYOMb0niXaqX-kjICDMLQmY.mft
Manifest number:          03E3
Signing time:             Mon 11 Dec 2023 07:01:15 +0000
Manifest this update:     Mon 11 Dec 2023 07:01:15 +0000
Manifest next update:     Tue 12 Dec 2023 07:01:15 +0000
Files and hashes:         1: BaTyDYOMb0niXaqX-kjICDMLQmY.crl (hash: izIjKSOEegFRagldnBrgnu1ZGxFPcbzxAIh1djoRJsQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:57:ae:15:b4:82:b2:ce:08:1b:23:68:3a:d7:69:9b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a4f20d838c6f49e25daa97fa48c808330b4266
        Validity
            Not Before: Dec 11 07:01:15 2023 GMT
            Not After : Dec 12 07:01:15 2023 GMT
        Subject: CN=4bcc27155c6482248a60619516f65631b30ce242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bc:89:29:7f:6e:04:d3:25:01:78:25:f7:cc:
                    d2:4f:dc:7c:fd:2d:13:c5:c8:9e:75:8c:fc:6b:de:
                    ee:7c:37:43:f3:bd:0f:94:cf:ae:c3:39:ca:a7:c1:
                    f6:2b:d2:07:23:bb:9f:bd:db:c9:d6:ce:f1:6c:7a:
                    63:17:bf:2d:f3:c1:3f:c5:e5:dd:22:30:99:b9:6f:
                    d4:65:89:8d:e3:24:ec:59:9c:e6:2b:9d:82:03:8b:
                    32:57:2c:db:9b:8d:9d:c5:fa:95:22:39:12:fd:eb:
                    60:ea:20:dc:37:05:40:2c:0d:d2:d6:9e:e6:45:31:
                    ad:21:6b:25:a7:f2:cc:d4:bd:39:aa:52:33:64:03:
                    5b:e5:32:fa:62:1e:bf:03:a9:0e:1c:64:43:21:77:
                    0d:52:8d:f7:7b:3e:fe:bc:68:02:0a:5e:1a:dc:39:
                    e3:04:09:8b:31:6b:74:7f:97:bd:0d:f4:35:e3:68:
                    2b:bb:26:fd:71:49:4f:f0:8f:0f:a8:59:74:51:df:
                    76:06:1e:02:1b:ec:6c:e6:76:30:6f:2d:2a:09:e4:
                    1a:b5:3c:c2:5a:5f:4e:5e:70:c6:f0:55:78:87:c9:
                    d0:1e:c0:ac:34:31:7e:90:ea:0e:5b:61:e2:fb:33:
                    32:f8:4d:80:fc:3a:2a:78:96:a3:26:87:2a:8d:b9:
                    0e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CC:27:15:5C:64:82:24:8A:60:61:95:16:F6:56:31:B3:0C:E2:42
            X509v3 Authority Key Identifier:
                keyid:05:A4:F2:0D:83:8C:6F:49:E2:5D:AA:97:FA:48:C8:08:33:0B:42:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaTyDYOMb0niXaqX-kjICDMLQmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/855115-6ba7-4a9a-b99f-f423c40d186a/1/BaTyDYOMb0niXaqX-kjICDMLQmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/855115-6ba7-4a9a-b99f-f423c40d186a/1/BaTyDYOMb0niXaqX-kjICDMLQmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ec:69:e6:fc:41:be:db:9e:3e:80:1a:dc:f4:5a:03:c7:ca:
         9a:2e:18:0a:b1:b3:c9:1c:35:d6:30:90:42:f5:aa:a7:c3:0e:
         79:23:96:5b:ec:c5:67:90:26:4c:27:07:8c:49:2a:b5:2b:ed:
         11:d9:62:3a:38:df:2d:73:cd:cd:5a:15:5c:66:db:e8:43:0f:
         b8:6d:5d:d3:c3:49:cc:d2:b3:fd:62:9a:51:ad:7f:4f:73:ad:
         f8:11:d1:c0:93:dd:11:c5:35:98:a0:56:2c:94:fa:ec:a2:af:
         89:37:57:56:6f:41:02:c9:cd:04:42:5a:75:78:d1:f2:ae:05:
         fa:a3:27:7c:40:94:67:4a:7e:f7:58:24:0a:95:bc:0a:c3:16:
         6a:0e:e3:3a:9e:87:13:be:a1:f1:cb:74:13:97:44:a4:e2:84:
         f9:b7:05:f9:9c:de:4a:51:38:99:7a:dd:8f:75:62:c3:a4:f0:
         5b:13:22:86:cf:19:8a:cf:46:f1:34:a0:21:be:f8:c8:51:30:
         da:da:bf:c7:0f:ba:66:8b:ff:3b:9f:64:44:00:70:d8:94:82:
         b2:d9:82:f8:09:62:bc:f2:82:b6:a9:03:01:d3:85:7a:06:01:
         44:b3:28:c5:e0:61:32:a3:8e:a7:c6:c9:c0:5c:be:40:ea:74:
         3b:c3:83:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:10:33 2025 by rpki-client