Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File:                     bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier:          TW01xIPX+J3UCJbvvKHc3FbsQJhoYqk3i8xbm4oOGE8=
Subject key identifier:   E3:19:76:8E:1F:51:5F:20:EC:4F:98:10:C3:96:33:74:27:61:DA:49
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer:       /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial:       0194BC732698CFEAA5FE4C950A0F9D996381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number:          0861
Signing time:             Fri 31 Jan 2025 13:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:50 +0000
Files and hashes:         1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: HXafmvZSYyaGuUt6Fw3Dujt+QeZNXSgQvr5T5k+6+SU=)
                          2: pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa (hash: zv4aepR6TBKlEBTPf/7SbPyiKj3XM1LCzYruoFBSb5I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:26:98:cf:ea:a5:fe:4c:95:0a:0f:9d:99:63:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
        Validity
            Not Before: Jan 31 13:00:50 2025 GMT
            Not After : Feb  1 13:00:50 2025 GMT
        Subject: CN=e319768e1f515f20ec4f9810c39633742761da49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:6d:00:d7:4f:2c:94:c3:43:04:c9:1f:1c:
                    93:70:03:48:d6:37:a2:8e:94:f4:33:c4:99:6f:75:
                    c2:d7:36:96:77:ba:d9:c9:c1:51:0d:d3:22:b4:29:
                    ca:43:54:1b:cb:45:da:15:4a:47:2f:bd:88:5c:d5:
                    ad:ee:dc:67:65:87:77:65:a4:1f:5e:30:50:58:e2:
                    7d:47:96:60:c7:d8:65:4f:a5:61:d3:7b:b1:62:19:
                    62:42:c6:e2:d6:95:65:92:78:fc:a5:8a:10:f1:1d:
                    09:89:2a:c8:71:83:72:28:32:77:0f:40:f2:3e:7e:
                    88:f7:1e:de:85:1b:41:c0:1c:93:1f:e1:b5:d8:5f:
                    d4:2a:2c:bf:8d:3c:8a:07:b5:ca:a2:65:b4:67:da:
                    93:52:d3:11:06:37:5d:cd:77:28:2b:43:57:f7:af:
                    54:3e:38:19:0a:e4:cc:90:9d:98:d8:ad:bc:68:fb:
                    4e:41:7e:22:f1:ff:8d:ed:3a:f3:52:ed:2e:e9:ec:
                    e6:c3:d5:01:e9:64:b4:06:17:76:94:32:12:d3:f5:
                    4f:13:11:0f:ef:5b:a8:be:d5:49:47:a7:43:03:54:
                    a2:81:3f:4c:3f:ea:db:b7:43:d2:36:57:c0:61:03:
                    5d:01:e1:92:ab:a2:f3:fe:0a:45:9f:8c:e5:2b:ee:
                    2c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:19:76:8E:1F:51:5F:20:EC:4F:98:10:C3:96:33:74:27:61:DA:49
            X509v3 Authority Key Identifier:
                keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7b:90:21:1e:93:c2:ed:c4:61:60:12:13:db:a7:6a:16:47:
         0d:7c:b9:71:ab:da:22:6b:5a:f2:68:93:ca:98:82:1f:9a:df:
         2b:8f:87:cd:9a:ff:af:c5:92:09:d6:a2:c9:92:01:c0:40:1d:
         dd:e2:bb:b0:e0:10:2d:99:88:80:1a:5c:48:f5:75:4a:7c:9c:
         39:72:e3:64:c9:38:e8:1d:66:5b:f4:f7:9c:fd:23:0c:60:88:
         b4:88:71:c3:09:10:6f:99:fb:09:92:20:26:a3:c3:01:48:bb:
         ed:91:be:e7:86:d5:90:1c:80:8c:48:26:1c:c9:81:28:27:63:
         ef:83:3a:69:76:01:4d:2f:02:fe:8c:7f:57:97:68:29:d9:3f:
         d1:6b:f4:04:e3:78:2a:96:9e:2a:63:03:e2:cb:67:a3:94:f9:
         3f:23:36:eb:f4:6e:12:5f:4a:a4:7f:99:f7:89:c6:6c:51:36:
         a6:47:18:8d:bb:c3:fa:ce:23:6e:e6:67:95:6d:58:4c:d3:0f:
         79:ca:b1:f3:17:54:b3:a5:f4:93:ee:6f:57:50:b5:9e:c2:77:
         fe:54:90:43:7d:2f:09:c0:62:f4:12:76:41:e6:dc:54:92:ad:
         17:12:db:f5:2c:33:4b:58:bb:18:6c:e8:2a:e8:eb:70:1c:68:
         36:01:06:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:18 2025 by rpki-client