Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File:                     6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier:          bCttfmLy2rXEqM2O9y/3z43ARX5DOKjPJtz0vjgq/jM=
Subject key identifier:   37:20:8C:15:2F:71:34:11:55:29:4C:BE:F9:EB:E6:19:37:45:51:C9
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer:       /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial:       0194BC04CDD88EAFC8CDAC4D070FE1023A18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number:          0C27
Signing time:             Fri 31 Jan 2025 11:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:18 +0000
Files and hashes:         1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: lPim2HiGCHUq8R6XiZYCVKDeJbEIu29n1fsrUPTWmW4=)
                          2: ProilHJF12XNjqluZhoel5qmzGE.roa (hash: vqODFTpOMw/oRhmj5asnKLbaDrVfLd9DrvwDm7QE1Gw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:cd:d8:8e:af:c8:cd:ac:4d:07:0f:e1:02:3a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
        Validity
            Not Before: Jan 31 11:00:18 2025 GMT
            Not After : Feb  1 11:00:18 2025 GMT
        Subject: CN=37208c152f71341155294cbef9ebe619374551c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d6:1b:65:1f:fd:dc:42:2e:3e:58:82:84:96:
                    06:6c:8a:77:02:53:1e:18:e1:c2:d2:ed:61:80:79:
                    b9:58:fb:f3:72:b2:ae:22:12:6c:15:33:be:9a:c8:
                    0d:f6:fd:75:32:c3:33:d6:07:99:6c:8c:cd:b7:e1:
                    61:14:1d:80:81:c6:48:12:80:09:69:e4:27:c5:2d:
                    6e:31:eb:59:18:8a:f2:12:41:72:b9:42:d9:60:38:
                    28:82:b8:10:fd:cb:82:87:a8:da:36:fb:16:22:07:
                    7a:0f:e5:ea:d9:46:07:e7:3e:c4:4f:6b:10:6e:f1:
                    a2:9c:e6:32:10:7b:03:ed:85:c8:a6:7c:09:b1:9d:
                    fb:78:20:1e:22:76:a0:97:9a:99:60:10:86:89:0e:
                    72:14:4d:71:58:33:29:b3:f4:2c:25:5c:e9:50:40:
                    70:3b:90:03:39:c6:24:67:0f:57:7b:da:86:38:90:
                    66:a9:36:25:9f:13:e1:a6:b8:ec:a4:32:a1:f6:28:
                    f0:c9:8c:f9:80:92:6c:15:7f:83:68:14:b7:3d:65:
                    9e:ec:cd:ef:0a:8e:36:e2:d2:ca:5e:55:ae:42:ec:
                    d3:e0:c2:9f:1e:c6:b6:2a:e0:29:c5:a4:03:70:61:
                    dd:c9:ec:a6:9a:f7:4e:2e:8a:10:16:34:1e:fe:37:
                    d0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:20:8C:15:2F:71:34:11:55:29:4C:BE:F9:EB:E6:19:37:45:51:C9
            X509v3 Authority Key Identifier:
                keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1d:53:de:05:41:b9:7f:c3:5e:6c:09:49:e7:75:df:a3:90:
         b3:bb:16:f4:de:6d:8c:b2:b2:31:06:e6:b1:f2:b4:81:58:f4:
         cf:34:78:50:ba:22:83:f2:cc:24:a5:32:5c:72:38:cd:7a:33:
         9c:78:31:3b:d2:f4:24:a2:6d:ad:55:d8:31:c2:b0:cd:32:82:
         78:63:c7:5e:5a:72:29:fb:fd:77:dd:82:24:1f:fd:06:10:c5:
         d1:d7:9f:70:dc:c7:05:cc:9f:07:a2:7d:f1:06:fe:53:37:9e:
         d9:47:74:73:05:08:3a:61:14:76:c4:36:f8:17:6d:8d:cd:0c:
         49:5f:62:67:fb:9d:6c:a8:75:6d:2c:c0:89:96:4c:06:2d:3b:
         ef:3f:a1:72:70:35:2c:d2:5b:6c:58:f8:83:8d:8a:fa:d9:af:
         5d:b2:58:1d:2c:8e:d8:20:e3:43:9f:24:cf:67:ff:85:ea:b0:
         b0:43:22:9b:25:8f:c2:70:8e:65:d5:e7:3b:09:55:eb:f3:f2:
         8a:5b:75:d9:12:58:11:16:e0:89:a2:71:f6:1d:37:88:e5:a9:
         1a:52:1c:3c:82:ab:2a:a7:2e:00:e7:62:85:d4:23:b4:16:41:
         21:4d:9a:bd:42:d2:64:b0:6e:2c:5a:9a:c3:3d:53:65:b7:da:
         91:07:2e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:28 2025 by rpki-client