Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.mft
File:                     S674BgHHxrBqwfclCB8kLg8GvFE.mft (raw, json)
Hash identifier:          ZmeyAoLs5EAe+OcsdIz/D88lf89RCyFG+SqHZpzbBuc=
Subject key identifier:   6E:0D:72:ED:82:18:02:17:CF:93:29:5A:6B:24:C2:53:18:A4:9D:7E
Authority key identifier: 4B:AE:F8:06:01:C7:C6:B0:6A:C1:F7:25:08:1F:24:2E:0F:06:BC:51
Certificate issuer:       /CN=4baef80601c7c6b06ac1f725081f242e0f06bc51
Certificate serial:       01948F63739A9ECF06776A49A27F0AE70513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S674BgHHxrBqwfclCB8kLg8GvFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.mft
Manifest number:          0657
Signing time:             Wed 22 Jan 2025 19:00:46 +0000
Manifest this update:     Wed 22 Jan 2025 19:00:46 +0000
Manifest next update:     Thu 23 Jan 2025 19:00:46 +0000
Files and hashes:         1: S674BgHHxrBqwfclCB8kLg8GvFE.crl (hash: YX3gbiePK/iQsMKcq7d3XyPGdutsipwQ88Klclb43s4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8f:63:73:9a:9e:cf:06:77:6a:49:a2:7f:0a:e7:05:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4baef80601c7c6b06ac1f725081f242e0f06bc51
        Validity
            Not Before: Jan 22 19:00:46 2025 GMT
            Not After : Jan 23 19:00:46 2025 GMT
        Subject: CN=6e0d72ed82180217cf93295a6b24c25318a49d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:cc:20:55:87:1e:fa:33:fd:25:74:38:31:
                    e3:9c:f6:98:54:90:6f:f1:26:05:bf:88:f7:f7:57:
                    d4:bf:aa:7c:60:9e:72:ab:b1:97:ab:90:a5:f5:83:
                    83:d4:b2:25:05:fe:6a:61:76:33:a7:cf:ac:b0:cf:
                    f2:61:e1:b3:b3:12:be:44:08:6f:97:c1:a9:0d:28:
                    2a:e2:4d:b8:56:bc:c3:61:bd:02:ca:00:89:a1:9c:
                    71:6f:e4:8c:2b:bb:69:30:6a:2c:5a:a4:bb:65:e6:
                    30:82:b6:de:f0:9c:14:e3:19:36:30:cc:65:22:82:
                    36:7c:8a:ca:a6:78:af:51:3b:b3:ba:58:09:12:ef:
                    9e:a2:3b:57:78:7e:9e:7f:8a:dd:d8:80:fa:c1:81:
                    2c:55:c0:af:fb:a6:c3:73:0e:79:51:98:b0:cb:83:
                    d6:e8:af:fb:96:45:e0:55:a5:cf:00:44:cc:f6:dd:
                    5b:02:b1:fe:8a:e4:70:de:5a:b3:8f:ae:64:4b:e4:
                    0e:06:d4:b1:5a:8e:1a:73:92:e1:92:31:db:d8:a4:
                    e7:59:83:78:fd:99:66:1c:ae:74:72:df:ed:96:39:
                    31:a9:ba:d4:c5:84:03:a0:3c:ff:7b:53:2a:12:15:
                    8f:22:00:8f:63:4a:62:61:9c:79:9c:f4:66:69:43:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0D:72:ED:82:18:02:17:CF:93:29:5A:6B:24:C2:53:18:A4:9D:7E
            X509v3 Authority Key Identifier:
                keyid:4B:AE:F8:06:01:C7:C6:B0:6A:C1:F7:25:08:1F:24:2E:0F:06:BC:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S674BgHHxrBqwfclCB8kLg8GvFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c91d7e-1c86-4eb7-b6ff-c66ce3f092a9/1/S674BgHHxrBqwfclCB8kLg8GvFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:25:ba:dd:e3:cc:93:3a:2c:13:4d:66:bd:e1:90:f4:b8:c5:
         75:01:24:c8:cc:bb:f1:81:82:09:41:87:1a:a7:a2:d9:47:67:
         59:60:95:23:00:6b:ec:22:88:00:b2:c3:e3:02:4a:63:b8:07:
         7e:10:4c:ec:e0:7a:0c:ad:11:29:68:bd:ec:39:32:5f:eb:af:
         00:11:ea:04:e9:eb:9a:99:39:d5:88:d8:69:ea:26:53:fe:44:
         47:62:34:ee:47:95:af:35:a8:03:c9:b2:f1:b9:c2:40:7d:d8:
         81:6c:f4:2a:42:42:f3:d0:04:56:17:1f:e2:19:cc:82:1f:f5:
         3f:e7:97:57:1b:36:69:17:c3:0b:9a:7f:af:50:67:71:0c:42:
         4e:3f:ed:ad:19:e3:09:6b:f1:ba:a0:1e:27:68:49:f1:6c:8f:
         45:03:89:c1:6d:33:98:2f:48:fb:ef:f9:ec:4b:2f:4b:5b:e6:
         0b:9d:7d:79:fa:ef:69:3d:be:9e:aa:2f:b2:97:52:39:a8:be:
         ac:fa:f5:c7:f5:cd:55:bc:f1:f1:8f:1c:35:8a:b1:58:47:d7:
         2a:ce:46:ba:f6:6d:dd:a4:46:0a:d5:ec:ea:a9:e7:05:02:73:
         68:22:f4:cd:e7:20:8a:00:e4:0f:a0:52:1a:42:ee:d9:6e:d7:
         ef:4e:ab:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:27 2025 by rpki-client on console.sobornost.net