Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
File:                     4ram_1lpoV0l3cO73da-uU9Ipfk.mft (raw, json)
Hash identifier:          Qv5WC1OwRkXHxgDlJr/A2DR1pkyxw1RIX+yxrk1wTrI=
Subject key identifier:   52:A3:99:77:60:3C:94:98:54:EF:FE:4B:33:E1:C9:DF:46:19:14:9C
Authority key identifier: E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9
Certificate issuer:       /CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9
Certificate serial:       0194BC04EDF6285323967607D513DD99DEC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 11:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:27 +0000
Files and hashes:         1: 4ram_1lpoV0l3cO73da-uU9Ipfk.crl (hash: WvufYp95MeB7kCqFZL7cO2k7yZ+4nVn3TJ0kUc0zYe4=)
                          2: Jw977rRbSBm1vkOFCP_ZwqthNts.roa (hash: pZc4mT999KgIePYxSGeV1dkG1LyeuUgVh98eZi0P55s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:ed:f6:28:53:23:96:76:07:d5:13:dd:99:de:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b6a6ff5969a15d25ddc3bbddd6beb94f48a5f9
        Validity
            Not Before: Jan 31 11:00:27 2025 GMT
            Not After : Feb  1 11:00:27 2025 GMT
        Subject: CN=52a39977603c949854effe4b33e1c9df4619149c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9d:70:df:60:44:b7:62:7b:90:93:e9:d4:84:
                    ca:df:df:d5:3b:a3:38:05:8e:99:8c:e5:75:fc:72:
                    84:af:96:0e:fe:9a:56:69:d0:0b:0c:de:8c:c6:37:
                    5e:74:5b:57:14:45:b1:40:f1:60:a9:00:ae:4c:11:
                    b3:fd:8a:23:31:32:94:dc:19:82:1d:cc:92:fa:9c:
                    37:35:6b:e0:3e:f0:9a:8d:6d:9e:2f:b8:76:f5:59:
                    a0:d7:83:ba:83:2e:a9:04:ad:52:76:69:17:61:9b:
                    f5:3b:f6:7e:98:0e:90:a6:c6:64:7f:c5:f3:aa:b8:
                    76:18:76:09:71:93:90:cc:1c:9d:dd:00:3e:25:b1:
                    77:47:94:e3:3b:15:7d:e4:c7:67:dc:75:e2:ea:fb:
                    04:40:a4:0c:7d:2d:32:69:88:e7:e4:93:23:c5:bc:
                    19:2e:a1:f8:26:af:ab:49:75:c9:d8:4a:5c:b9:aa:
                    61:d0:06:49:a5:ca:8a:fe:cc:20:51:33:1f:92:91:
                    63:f7:12:62:6a:49:62:5b:50:16:d0:b5:30:8f:1e:
                    a7:6c:42:15:28:d4:60:15:b5:2f:ed:7b:e8:6e:87:
                    f2:7f:c7:04:4a:20:93:81:55:b7:dc:4a:2a:79:7b:
                    3c:cb:48:af:af:25:ca:3d:4d:7d:65:f0:e0:92:94:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A3:99:77:60:3C:94:98:54:EF:FE:4B:33:E1:C9:DF:46:19:14:9C
            X509v3 Authority Key Identifier:
                keyid:E2:B6:A6:FF:59:69:A1:5D:25:DD:C3:BB:DD:D6:BE:B9:4F:48:A5:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ram_1lpoV0l3cO73da-uU9Ipfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/80c0a0-8539-46ed-b122-fe0ca1a7d35d/1/4ram_1lpoV0l3cO73da-uU9Ipfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:62:87:ce:b7:6d:f1:ab:3d:f1:9b:ce:79:bb:45:c1:00:ba:
         bc:cb:af:3e:01:ac:c6:9a:1a:6e:7b:80:e4:12:ef:52:65:00:
         e7:65:fc:be:e1:79:54:a9:d9:56:cc:58:6a:32:cb:fc:42:49:
         fe:f5:ae:a5:eb:88:86:06:a4:05:69:2b:c2:69:02:a9:d3:33:
         ce:b0:ea:7a:d9:d6:9e:74:5a:fd:64:79:41:96:a8:8a:97:4b:
         0f:b8:58:db:cb:49:62:00:0c:51:4a:5d:d1:7f:95:54:e0:09:
         8b:3c:d0:03:48:bf:ef:b4:f5:7b:86:7f:dd:03:d9:98:7a:dd:
         7d:c1:c7:16:22:02:dc:9d:c1:c2:ec:bf:41:a1:32:7e:be:42:
         ce:f7:a3:0b:29:8c:8c:70:3c:d3:17:96:59:35:c0:49:3a:13:
         3b:86:8f:d8:b2:1a:8b:2c:20:01:7c:76:86:7a:fe:95:84:ff:
         ca:10:68:b6:dc:55:ba:b1:9f:a0:ec:d7:a2:8c:40:d2:d3:52:
         04:77:b7:38:55:f0:d0:24:99:5c:ec:16:97:72:a6:f5:5f:fa:
         5f:0a:94:3d:9e:14:9d:96:8f:14:ae:b2:2e:4e:94:fb:c4:fe:
         86:63:59:90:32:40:f2:1a:fc:76:fe:de:9c:1a:54:44:90:d7:
         47:03:85:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:55:25 2025 by rpki-client