Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.mft
File:                     7DY9SPPeihkcuHZyYDLyWF-gZw8.mft (raw, json)
Hash identifier:          Zqdz5PmVwGluQ2wz4sV2PMqfKQm4RkuuspqasFQaeyA=
Subject key identifier:   6E:DD:C6:23:AF:67:21:03:30:43:BA:D5:EF:2B:C3:4C:62:23:A1:A9
Authority key identifier: EC:36:3D:48:F3:DE:8A:19:1C:B8:76:72:60:32:F2:58:5F:A0:67:0F
Certificate issuer:       /CN=ec363d48f3de8a191cb876726032f2585fa0670f
Certificate serial:       019546D9F8E29F878AEB10F70BC63EEF4BD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DY9SPPeihkcuHZyYDLyWF-gZw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.mft
Manifest number:          0A2E
Signing time:             Thu 27 Feb 2025 10:00:44 +0000
Manifest this update:     Thu 27 Feb 2025 10:00:44 +0000
Manifest next update:     Fri 28 Feb 2025 10:00:44 +0000
Files and hashes:         1: 7DY9SPPeihkcuHZyYDLyWF-gZw8.crl (hash: lIrDkCdvQF98TdiD5LmMtDxtmMuWwtrIsBbUn+EeNlU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:46:d9:f8:e2:9f:87:8a:eb:10:f7:0b:c6:3e:ef:4b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec363d48f3de8a191cb876726032f2585fa0670f
        Validity
            Not Before: Feb 27 10:00:44 2025 GMT
            Not After : Feb 28 10:00:44 2025 GMT
        Subject: CN=6eddc623af6721033043bad5ef2bc34c6223a1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:82:af:78:d5:c1:7b:79:c1:64:60:46:f7:31:
                    d1:7d:55:a0:cc:fc:9f:f9:ad:9f:19:2c:67:62:15:
                    1f:eb:dd:7f:25:bf:ab:fe:64:23:e0:5d:e3:4a:c2:
                    31:65:8e:a7:8e:c7:9b:cc:ca:2b:c5:c3:05:be:1b:
                    53:c4:23:e9:91:35:f4:f0:37:7f:76:9c:ef:3e:f3:
                    1e:d2:34:b2:fd:da:8a:7a:1b:31:56:90:b8:b0:74:
                    cd:e9:5d:10:bd:31:39:ce:bf:e1:20:4c:a3:22:46:
                    9d:c4:fc:07:bb:20:f3:53:10:0a:71:eb:ec:56:43:
                    ed:e6:f5:88:8d:d3:e6:1f:fc:88:02:e4:57:3b:f6:
                    c2:81:fc:69:81:f0:30:a9:32:09:fc:12:1a:d9:7d:
                    99:a2:40:72:55:9f:d5:3f:5b:d5:a9:3c:eb:2a:54:
                    4f:47:8e:57:59:5d:d0:a7:ec:9c:d9:c5:32:a9:c6:
                    f7:42:3b:ae:f8:a0:7c:cb:44:94:96:02:47:d5:73:
                    81:a0:cc:c9:2e:d2:ba:0a:9a:f7:17:44:6c:54:e5:
                    78:c6:4f:4d:b4:03:c8:59:6f:b4:4e:68:c6:23:d3:
                    f4:93:5f:ad:2c:73:c4:53:2c:1a:55:ec:57:cf:41:
                    7d:33:ef:b3:a7:67:b2:bd:25:b5:c3:be:02:2b:7b:
                    7a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DD:C6:23:AF:67:21:03:30:43:BA:D5:EF:2B:C3:4C:62:23:A1:A9
            X509v3 Authority Key Identifier:
                keyid:EC:36:3D:48:F3:DE:8A:19:1C:B8:76:72:60:32:F2:58:5F:A0:67:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DY9SPPeihkcuHZyYDLyWF-gZw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/493a6d-bd94-4af6-b562-e174aeb1dfad/1/7DY9SPPeihkcuHZyYDLyWF-gZw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:87:b4:2d:69:9f:ee:66:e9:14:1a:d2:ce:e5:d7:64:a9:5b:
         bb:01:97:1c:55:38:af:2f:47:f4:26:5c:64:ba:e0:12:74:cf:
         ee:34:6d:3a:50:10:55:df:a0:98:2f:3e:52:97:2c:fb:f3:9f:
         58:e6:c7:9b:f4:9d:6b:f4:cc:9c:b4:9f:8a:dc:4c:c7:c6:06:
         55:1f:3a:7e:95:c5:2d:54:2d:50:c5:d3:6b:23:53:ae:94:79:
         18:a2:fb:5c:b7:08:f6:80:3b:77:8a:15:72:fc:7f:5c:23:84:
         00:67:b6:3a:79:fd:cd:1f:3c:8b:2b:b8:4d:9d:5a:82:4a:4d:
         74:92:d8:58:f6:4f:b7:e9:e7:f0:b1:96:4b:d2:9f:aa:38:88:
         44:52:8a:ef:d4:44:20:79:6c:85:c1:b8:d5:23:73:ab:35:ad:
         57:2a:84:63:ba:4b:d6:d3:7c:df:5f:cd:ef:54:f7:28:25:3d:
         3a:22:f2:84:95:87:5b:7f:27:48:31:a2:50:29:48:46:89:5f:
         5f:f1:c1:43:a2:a1:f2:b8:42:a4:2b:ed:0b:95:ad:ed:20:d4:
         fe:70:31:21:a0:8d:02:c0:8f:92:db:a2:c0:c8:b4:2e:49:a7:
         fc:92:be:21:be:89:11:0c:71:dc:0c:fe:d0:ba:9d:c2:0f:08:
         97:d5:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:51:43 2025 by rpki-client on console.sobornost.net