Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/97e0f7-9c9c-4eea-a650-22ccccd5b8b5/1/d_4HosJ0vbeoiJmH4vgpV12t9R8.mft
File:                     d_4HosJ0vbeoiJmH4vgpV12t9R8.mft (raw, json)
Hash identifier:          AXV00mSVuxHCQ808Ut3FEHjtIBmeOVPuiQYTFT6BXb4=
Subject key identifier:   59:8D:83:6C:DB:D0:0E:9A:1E:DE:4E:A4:95:C8:C6:AD:86:2B:73:94
Authority key identifier: 77:FE:07:A2:C2:74:BD:B7:A8:88:99:87:E2:F8:29:57:5D:AD:F5:1F
Certificate issuer:       /CN=77fe07a2c274bdb7a8889987e2f829575dadf51f
Certificate serial:       0196312C0F825E5A978304B1D0A65E75E403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_4HosJ0vbeoiJmH4vgpV12t9R8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/97e0f7-9c9c-4eea-a650-22ccccd5b8b5/1/d_4HosJ0vbeoiJmH4vgpV12t9R8.mft
Manifest number:          01DF
Signing time:             Sun 13 Apr 2025 22:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 22:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 22:01:33 +0000
Files and hashes:         1: d_4HosJ0vbeoiJmH4vgpV12t9R8.crl (hash: uxG/hgYpzBUEbowotig8X13FtgyUtlCObu8Jq14RF8w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:31:2c:0f:82:5e:5a:97:83:04:b1:d0:a6:5e:75:e4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77fe07a2c274bdb7a8889987e2f829575dadf51f
        Validity
            Not Before: Apr 13 22:01:33 2025 GMT
            Not After : Apr 14 22:01:33 2025 GMT
        Subject: CN=598d836cdbd00e9a1ede4ea495c8c6ad862b7394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:8c:fb:db:dc:31:67:18:de:2c:e6:eb:3a:
                    35:94:77:41:6e:15:c8:b6:4a:48:a9:e3:f2:07:ea:
                    5b:b4:26:02:6e:c0:9e:02:3b:00:85:d6:25:83:bc:
                    f3:ba:0b:eb:c5:3f:db:51:d7:7f:ad:fe:1c:12:f8:
                    f7:2a:9e:58:22:20:44:80:3b:e4:1a:8c:63:49:21:
                    6a:f0:83:98:bc:5c:fe:79:78:32:27:b8:94:36:e0:
                    f9:e4:74:4d:e8:a7:ca:df:05:e3:5c:28:8c:2c:c4:
                    6c:28:79:a6:e9:be:df:07:ce:69:b8:9e:27:67:ec:
                    9f:00:5c:0c:7d:5f:e4:c9:cc:ff:76:c4:41:b6:82:
                    ce:3c:94:ea:f1:7f:85:37:98:1d:b1:f9:94:89:fa:
                    af:30:6a:8e:86:13:70:f3:e6:ed:a8:b3:89:55:19:
                    ba:66:e7:2b:0a:df:d8:cd:c2:73:c7:9a:91:b4:b3:
                    21:68:46:4c:51:d4:d7:92:9a:ca:32:47:61:08:a3:
                    45:22:b0:e6:7b:8d:e7:ea:2b:a3:06:25:3b:cf:18:
                    c0:4d:bc:d9:9b:46:77:04:51:e3:87:4c:e6:c4:68:
                    53:11:74:34:d5:17:46:c7:ea:0e:6e:40:f3:cc:30:
                    21:c9:2c:f0:af:60:e3:27:6d:a1:64:ec:a4:1b:de:
                    2c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8D:83:6C:DB:D0:0E:9A:1E:DE:4E:A4:95:C8:C6:AD:86:2B:73:94
            X509v3 Authority Key Identifier:
                keyid:77:FE:07:A2:C2:74:BD:B7:A8:88:99:87:E2:F8:29:57:5D:AD:F5:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_4HosJ0vbeoiJmH4vgpV12t9R8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/97e0f7-9c9c-4eea-a650-22ccccd5b8b5/1/d_4HosJ0vbeoiJmH4vgpV12t9R8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/97e0f7-9c9c-4eea-a650-22ccccd5b8b5/1/d_4HosJ0vbeoiJmH4vgpV12t9R8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ee:21:bb:81:b6:3f:3b:4a:ca:2e:7d:05:b3:73:44:f0:fd:
         8f:22:41:d4:ad:93:6e:d0:ef:94:db:c0:3c:bd:ac:f6:63:0e:
         2b:13:ec:be:bd:0f:cf:fe:28:5c:38:aa:8d:9d:de:a5:39:1f:
         3e:a0:53:ff:7f:13:4f:9e:40:50:1b:6a:bf:4f:19:42:4b:dc:
         af:b3:bb:6e:62:62:7b:06:59:d2:eb:75:d5:2b:86:c3:0b:3d:
         76:40:37:06:9d:a5:f4:c7:2d:11:e4:33:e3:8c:a2:b9:5b:75:
         21:30:34:7e:32:11:28:7a:a4:64:50:c3:31:02:78:11:b1:cf:
         a2:5a:8b:5d:59:04:8e:ba:d9:d0:dc:f4:16:1e:73:6c:61:82:
         e0:3c:4b:2c:f4:9e:c2:7c:21:88:a0:60:5d:34:80:79:75:71:
         9e:31:2b:e3:99:7d:dc:2c:17:7d:79:ef:09:97:07:3a:ab:2c:
         e7:28:95:21:cd:01:0d:a5:21:01:00:de:b6:cf:20:57:dc:08:
         cf:89:a0:92:2e:a1:f5:e6:75:8b:6f:46:fe:3c:59:5f:46:4d:
         60:92:55:80:23:49:8a:54:a4:84:f0:20:fa:bf:88:bb:52:06:
         87:49:e4:61:f8:74:be:33:71:93:13:ce:fe:7f:3c:4e:e2:f3:
         7a:0e:71:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:54:37 2025 by rpki-client