Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/97bc6c-349f-4374-9e98-864911d6d31b/1/c4ISPo5kUEq7qBA5tsdBj2qrVl0.mft
File:                     c4ISPo5kUEq7qBA5tsdBj2qrVl0.mft (raw, json)
Hash identifier:          ufeYcV5GL40U/hvMwISysqMZuGYwDwsJl2R/W20vW1o=
Subject key identifier:   E8:F2:42:C2:D1:D2:31:32:D3:E1:FD:B4:CA:0C:13:39:7C:B1:D4:17
Authority key identifier: 73:82:12:3E:8E:64:50:4A:BB:A8:10:39:B6:C7:41:8F:6A:AB:56:5D
Certificate issuer:       /CN=7382123e8e64504abba81039b6c7418f6aab565d
Certificate serial:       019560D0F1D1C0F18B1772E5AA1316D07C5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4ISPo5kUEq7qBA5tsdBj2qrVl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/97bc6c-349f-4374-9e98-864911d6d31b/1/c4ISPo5kUEq7qBA5tsdBj2qrVl0.mft
Manifest number:          0939
Signing time:             Tue 04 Mar 2025 11:01:00 +0000
Manifest this update:     Tue 04 Mar 2025 11:01:00 +0000
Manifest next update:     Wed 05 Mar 2025 11:01:00 +0000
Files and hashes:         1: c4ISPo5kUEq7qBA5tsdBj2qrVl0.crl (hash: mkf68CGPFSuK5E2wTGcKYT+rUgXlL/puO0GYRFEKYu0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:60:d0:f1:d1:c0:f1:8b:17:72:e5:aa:13:16:d0:7c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7382123e8e64504abba81039b6c7418f6aab565d
        Validity
            Not Before: Mar  4 11:01:00 2025 GMT
            Not After : Mar  5 11:01:00 2025 GMT
        Subject: CN=e8f242c2d1d23132d3e1fdb4ca0c13397cb1d417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:19:f2:fa:1d:94:35:21:ee:63:cf:15:7f:69:
                    39:5a:85:60:0e:60:36:1a:f0:fd:63:01:67:a8:bf:
                    b6:1d:fb:44:7e:95:86:89:e5:06:6b:00:2d:2e:c9:
                    b4:c7:9d:31:4e:b8:5c:21:aa:c6:79:22:99:56:9a:
                    85:5d:00:51:28:f5:04:a2:31:3a:ab:4e:a4:13:1b:
                    5e:96:c9:e1:56:cb:74:51:26:16:f3:d6:93:a9:20:
                    90:89:c3:f5:21:64:55:f5:10:6e:31:db:bf:3b:0b:
                    94:f1:ec:db:a1:69:16:e3:8b:c6:f3:42:d1:8a:56:
                    c1:c0:f1:3d:e8:e4:51:6a:cf:ce:ef:ab:e3:58:0e:
                    c7:1d:c9:26:d9:c5:48:4b:db:7c:a4:75:eb:ef:25:
                    61:07:b1:d8:65:1c:cd:fc:9e:c2:3b:15:24:bf:04:
                    38:7c:49:33:6b:67:40:e7:f1:2e:19:68:a8:3a:d9:
                    89:39:96:6b:69:d6:97:84:e6:87:10:fa:88:8d:1a:
                    44:f3:45:ae:56:6f:53:ff:3e:4f:c4:f2:30:49:99:
                    2f:04:20:13:36:e0:7d:2e:07:54:97:69:55:f4:64:
                    05:09:b8:a9:cd:c4:98:88:5e:68:48:ff:35:5d:9e:
                    fc:41:90:90:40:49:cd:01:e7:be:cc:a6:f1:a0:c2:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F2:42:C2:D1:D2:31:32:D3:E1:FD:B4:CA:0C:13:39:7C:B1:D4:17
            X509v3 Authority Key Identifier:
                keyid:73:82:12:3E:8E:64:50:4A:BB:A8:10:39:B6:C7:41:8F:6A:AB:56:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4ISPo5kUEq7qBA5tsdBj2qrVl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/97bc6c-349f-4374-9e98-864911d6d31b/1/c4ISPo5kUEq7qBA5tsdBj2qrVl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/97bc6c-349f-4374-9e98-864911d6d31b/1/c4ISPo5kUEq7qBA5tsdBj2qrVl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:00:e2:d1:24:4c:42:bb:bd:76:66:e3:3f:72:b1:e2:42:
         b0:0b:7d:4f:49:44:eb:83:9e:7b:67:ca:a4:e6:dd:7d:47:50:
         85:bb:04:5e:59:18:70:e8:2f:72:08:85:8b:df:5b:f2:d9:15:
         41:ef:f4:05:68:43:fc:e2:9e:3c:33:e5:2a:86:39:b8:87:46:
         29:bf:e3:56:77:64:c6:0f:de:b5:2c:92:d5:d4:59:d9:2c:28:
         dd:63:50:97:0e:16:a1:42:7c:cd:a3:6e:ec:ff:e0:fa:d8:2f:
         77:6d:bb:ad:46:d8:36:c3:32:30:12:20:58:6a:9d:2d:05:cb:
         15:50:58:3e:60:62:c4:12:cc:82:a8:b7:1b:a2:75:c7:0d:87:
         45:c4:65:64:1f:e9:f0:be:25:f4:69:26:2a:e1:c2:8a:97:17:
         b6:b4:e1:50:1c:59:44:9c:a5:a3:2e:ab:07:b9:e7:86:ee:4c:
         e0:94:06:fe:b5:c5:da:4f:b2:54:46:08:82:77:71:67:f4:2a:
         80:89:b8:cf:25:f1:95:50:f5:69:49:d8:09:f8:19:dd:ee:54:
         64:07:73:59:87:3f:91:16:76:5c:c5:a0:ba:e2:fe:e1:a4:5c:
         ef:e4:a9:21:db:12:d1:4e:93:e5:8d:90:af:9d:1e:45:71:a9:
         54:02:af:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:06:55 2025 by rpki-client