Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.mft
File:                     rTJ65_Wz_ACCZJcfqBpZCpvfIjg.mft (raw, json)
Hash identifier:          fE9OUBfnTt2QF+UhAe91lxW5qEqyD/kvr0ngIdFoeew=
Subject key identifier:   7C:8A:3E:2A:5D:DE:F2:90:01:9E:CB:C6:03:6F:E5:CE:DC:C6:C6:70
Authority key identifier: AD:32:7A:E7:F5:B3:FC:00:82:64:97:1F:A8:1A:59:0A:9B:DF:22:38
Certificate issuer:       /CN=ad327ae7f5b3fc008264971fa81a590a9bdf2238
Certificate serial:       0194BD4E749241D9D9EA4E57A587030A7803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.mft
Manifest number:          03D3
Signing time:             Fri 31 Jan 2025 17:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:22 +0000
Files and hashes:         1: p6qthrN8_e6stt0izeQsC_H8i0s.roa (hash: xtnHMRFtTRaKU4NhAA9P2QlXHUkeUgYSEJTI5w51nTw=)
                          2: rTJ65_Wz_ACCZJcfqBpZCpvfIjg.crl (hash: D4EjmD6q4UFW9AKu3zXjQrP2dAar7paZmZ0fNvL7HMI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:74:92:41:d9:d9:ea:4e:57:a5:87:03:0a:78:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad327ae7f5b3fc008264971fa81a590a9bdf2238
        Validity
            Not Before: Jan 31 17:00:22 2025 GMT
            Not After : Feb  1 17:00:22 2025 GMT
        Subject: CN=7c8a3e2a5ddef290019ecbc6036fe5cedcc6c670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:2c:1c:3d:11:45:a4:e2:d8:55:57:5e:42:
                    03:76:7e:3d:cf:e6:81:29:b8:a4:13:c7:a8:39:85:
                    32:0d:d0:b9:64:c7:06:3b:cf:e4:6d:60:68:84:41:
                    4b:92:8a:fe:7d:a7:61:1f:38:d7:4d:8d:1b:2f:dc:
                    5e:67:48:1b:7c:2a:14:d0:f3:7f:24:70:ec:5c:75:
                    76:83:2b:90:9f:c0:a6:d4:e6:18:19:21:28:75:03:
                    4f:01:5f:39:be:aa:9b:62:0a:36:b0:c8:99:a2:59:
                    91:ff:d0:34:c7:88:a9:fd:39:a8:83:ca:18:c0:55:
                    d9:ad:2a:14:a7:b2:af:7a:f1:f3:8f:36:5d:fe:33:
                    7d:e2:0c:2a:35:8a:26:31:7d:cb:0c:0c:a1:23:bc:
                    b0:94:a8:8c:80:a3:1d:9f:c7:56:e4:cd:8e:71:52:
                    f1:a9:92:c8:6a:7b:22:84:09:ce:44:fe:6d:b9:ef:
                    3d:5a:8f:2b:c2:e7:6f:9a:43:88:34:59:bc:f8:95:
                    d4:e1:e4:af:ce:31:d9:9e:48:5f:54:96:c3:a7:ce:
                    94:e1:32:14:a3:31:14:2c:2b:1d:9d:e7:2b:56:92:
                    2a:b2:9c:09:cc:57:7f:b5:c2:48:bb:85:86:cd:a3:
                    75:61:29:38:27:95:f9:7a:f8:1d:d1:f0:51:05:e8:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8A:3E:2A:5D:DE:F2:90:01:9E:CB:C6:03:6F:E5:CE:DC:C6:C6:70
            X509v3 Authority Key Identifier:
                keyid:AD:32:7A:E7:F5:B3:FC:00:82:64:97:1F:A8:1A:59:0A:9B:DF:22:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/683d3d-f362-4cb5-92d9-5bd1a71679c1/1/rTJ65_Wz_ACCZJcfqBpZCpvfIjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:26:ab:53:8a:98:65:a5:21:35:03:7c:94:d5:29:82:71:95:
         fe:40:13:77:e9:d6:22:f8:86:eb:82:ae:96:57:2a:a1:b0:c7:
         25:23:0e:63:d3:59:ec:d0:24:20:87:18:55:6c:bf:cc:d8:d2:
         f1:f0:4b:e3:f2:0d:74:85:47:67:38:c4:fc:ce:eb:a6:52:19:
         5c:95:ad:6f:a5:00:31:13:62:1c:01:fc:fa:b8:4c:a6:95:60:
         2b:a1:38:0b:23:cc:43:be:65:d2:c8:47:50:3c:09:f0:d2:eb:
         09:c6:22:27:56:c5:84:75:76:39:a2:f3:48:4a:c1:0c:7f:32:
         7a:7d:97:e6:4c:c8:51:85:10:73:cd:59:9a:6f:88:70:10:0d:
         6d:18:ba:33:f2:ac:4d:4c:c0:76:4f:94:65:22:4b:78:7b:5e:
         43:83:5f:ec:73:f9:ab:e6:8a:e7:fc:f6:3a:f9:ba:51:2a:92:
         a8:dd:29:11:c1:b3:7e:45:a0:c9:68:f6:bb:04:54:51:ee:b8:
         71:dc:c5:60:ba:74:01:45:c3:02:23:47:13:45:0d:12:0e:1f:
         c9:7d:ed:a4:40:1d:84:66:ad:c1:42:39:a8:f1:92:51:d8:13:
         b5:09:7b:5b:bd:55:3a:3c:e0:f2:1d:b8:57:5c:1e:41:ab:c7:
         84:78:1c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 23:36:26 2025 by rpki-client