Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
File:                     BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft (raw, json)
Hash identifier:          KOYe0DVgmshXNvbS7gSQ/Uyq4DIgUPN/HCqe1+v0g38=
Subject key identifier:   1C:B2:54:6F:94:EA:7B:A3:EE:70:78:C0:24:9E:EE:C5:0A:8E:79:D0
Authority key identifier: 04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
Certificate issuer:       /CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Certificate serial:       01962E9872A983FE53E1BC9C1664C7E34183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
Manifest number:          09DB
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl (hash: d1forIWKgmOvXXZFwaq9fsGkdDbcREVu1c5sZrJ2IVQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:72:a9:83:fe:53:e1:bc:9c:16:64:c7:e3:41:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=1cb2546f94ea7ba3ee7078c0249eeec50a8e79d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:33:19:13:b6:cd:da:93:eb:83:b7:54:8c:
                    e1:f0:c8:a2:8c:ff:2c:44:5f:76:ce:de:bf:dd:30:
                    56:4f:54:7f:16:e6:14:a6:8c:c9:a3:b0:53:c3:6d:
                    3d:e0:84:83:91:2d:3e:b9:ff:da:07:49:79:5c:cc:
                    08:6d:8b:a9:22:ee:98:ab:75:eb:fc:6b:06:97:ca:
                    88:64:fa:21:8d:2c:7c:23:4d:e3:90:7e:c7:2e:42:
                    0f:c9:0b:1e:8d:b4:ec:17:25:8c:b1:6e:ba:56:b8:
                    d6:c8:66:80:4c:4f:df:95:83:b2:09:b0:e9:65:15:
                    f1:a8:f9:f6:bf:ca:e5:9a:d4:7a:bf:4b:ff:e2:dc:
                    38:b1:6d:7d:4c:29:7b:b2:fb:04:9a:50:13:22:25:
                    27:18:91:a2:18:5b:cc:aa:0a:bf:c7:e8:f2:1d:a1:
                    77:da:fc:9c:c8:fb:56:8f:f5:04:11:92:be:ec:00:
                    05:dd:e1:52:5f:48:6e:a4:ac:25:6d:cb:26:e0:c2:
                    e1:ad:fd:88:fe:9f:27:e2:dc:74:48:ea:7f:56:22:
                    fb:42:3f:43:e5:e1:24:38:71:1d:c5:9c:b3:e5:7c:
                    19:a9:06:ab:f3:54:de:9b:69:a1:d3:18:0f:03:93:
                    bf:d9:c6:b9:b0:c9:ec:5a:3e:47:c1:f5:cb:9a:e2:
                    cb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B2:54:6F:94:EA:7B:A3:EE:70:78:C0:24:9E:EE:C5:0A:8E:79:D0
            X509v3 Authority Key Identifier:
                keyid:04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:9d:34:de:2a:56:30:b9:d6:95:6d:90:4a:58:c3:99:8c:61:
         8e:fa:fe:b6:17:93:3c:bc:72:b5:f8:c4:ca:11:8d:38:b7:6b:
         07:e9:a9:38:0e:27:29:a0:be:81:de:b2:a9:05:67:d5:d5:06:
         8d:9f:f1:dd:14:98:20:9b:bb:18:6d:b7:de:ab:14:60:18:d7:
         55:5b:a5:5a:c5:d2:a8:3f:6e:dd:e6:2c:fb:46:cc:93:d8:25:
         89:96:3e:50:41:52:38:08:e3:0c:6c:90:c5:a5:1c:b5:57:64:
         42:56:4f:9f:e4:8e:4c:1f:1b:f3:b7:7e:22:8f:d8:46:ab:10:
         12:a5:5c:0b:be:c9:bf:10:6b:b5:be:69:22:8a:e7:da:1f:ce:
         94:5b:ad:93:2d:d7:58:f1:7f:10:e6:49:b1:8d:23:b3:52:4d:
         fc:4d:bb:c8:ab:67:17:de:2e:42:b1:9d:62:c3:3e:d7:30:f4:
         e3:3f:09:fd:60:0d:34:c6:78:c1:d7:b8:8b:da:1f:9c:1f:a4:
         ce:2a:80:b1:2d:21:4d:46:83:5f:f7:7d:9c:db:ee:61:28:46:
         47:be:21:04:24:e0:8a:e0:5c:a6:5b:89:7c:78:9e:01:7b:b2:
         70:b0:0c:32:ce:a4:a8:81:9c:b2:58:47:a9:ae:54:16:8e:92:
         90:3a:e2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net