Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File:                     ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier:          rMTeb7CGnc6Hn3Ps4/sEv2KowXzh1/N0waAoyrVhqAc=
Subject key identifier:   24:3D:4C:B0:5E:59:8A:7E:54:83:34:9A:52:E8:CC:F3:E5:7E:0F:35
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer:       /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial:       0194BC72EF28EA45E8169D09CACF442B0DB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number:          1039
Signing time:             Fri 31 Jan 2025 13:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:36 +0000
Files and hashes:         1: Te1smkaZFoPIXpDeDnkA_3SYuF4.roa (hash: fsg7fcR1+A1zfqsZoPgI6UandEUlSTg2/PWpSOpOTeg=)
                          2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: Yh3NjCW1/t/QuUU90K10DPX9ZCO67BaBEgcLrCiiKew=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:ef:28:ea:45:e8:16:9d:09:ca:cf:44:2b:0d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
        Validity
            Not Before: Jan 31 13:00:36 2025 GMT
            Not After : Feb  1 13:00:36 2025 GMT
        Subject: CN=243d4cb05e598a7e5483349a52e8ccf3e57e0f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:34:20:0f:6d:10:a0:86:4f:2a:7c:ac:16:
                    61:c1:af:7d:cf:fa:c6:b4:df:8e:a8:04:9d:bc:bf:
                    f7:39:5b:46:6b:7d:21:ae:ac:48:9f:d7:1e:87:78:
                    ae:54:ac:ac:f8:3b:c8:ca:ff:c1:af:2f:71:f0:fa:
                    4a:79:12:67:78:f8:51:06:6c:f6:eb:4e:cc:09:76:
                    41:f9:aa:5e:72:6e:90:9d:bd:34:8b:88:08:49:37:
                    dd:5d:ed:df:88:c9:38:53:37:66:4b:bd:29:9e:ec:
                    33:5d:02:eb:42:07:59:ad:33:1d:73:a9:6c:62:44:
                    58:a1:07:e5:84:bd:3b:e9:69:ce:86:78:98:b4:01:
                    58:0c:24:41:bf:bc:17:77:7f:a9:b6:72:16:41:ed:
                    f9:66:8d:ad:09:db:da:1d:f9:be:1a:66:96:c3:0f:
                    16:42:37:a0:a3:86:b4:55:e3:aa:d1:d4:43:bc:60:
                    d3:dd:3b:4e:0d:ce:64:f7:7a:75:d3:20:ee:64:d2:
                    43:87:e6:20:8a:f4:0b:2e:51:1d:db:b4:f6:37:df:
                    3f:ab:02:ea:7f:59:a3:0b:ce:85:06:2b:16:10:6c:
                    2c:70:78:14:b1:6d:37:b2:fd:08:05:49:a7:1d:09:
                    7c:8e:98:09:69:e3:96:ea:07:88:8c:ce:80:59:6f:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3D:4C:B0:5E:59:8A:7E:54:83:34:9A:52:E8:CC:F3:E5:7E:0F:35
            X509v3 Authority Key Identifier:
                keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:db:41:bf:3b:d7:83:23:36:38:2b:3a:a0:f4:6a:0f:12:4c:
         8d:19:ea:55:cf:30:a1:38:19:d9:5d:40:3f:16:5f:2c:45:6c:
         2e:cf:dd:b1:ad:7b:8d:34:3f:77:e5:40:c6:78:68:53:1a:3b:
         40:50:98:a9:0e:9e:62:3c:63:b2:b4:f8:af:d2:e0:b0:66:d6:
         e6:04:43:09:10:02:aa:0a:98:7a:cf:ef:ba:f6:72:e8:88:c2:
         31:0a:06:b8:af:f2:9b:f7:14:1f:5c:98:72:62:c4:5c:9b:3e:
         39:14:43:1b:91:a0:2b:85:b9:5e:0b:a0:e0:95:5f:43:53:8e:
         4d:72:03:cf:73:b0:a8:35:29:b3:84:da:38:33:3a:bb:89:8b:
         8a:60:f7:93:d6:b1:a0:66:2f:78:34:09:c9:36:be:a0:96:c6:
         45:f1:54:cb:45:c0:84:2a:f4:36:22:20:81:96:b9:47:24:c7:
         7e:70:03:ac:d1:7a:be:61:b5:1c:02:18:ee:22:0a:ac:c3:f5:
         d7:f4:19:88:06:e7:55:16:8d:8f:d3:6a:81:9e:82:ce:d4:ae:
         f3:53:e2:7a:f3:96:53:1b:ee:45:df:1d:d9:dd:d8:0b:52:d7:
         c7:26:84:87:70:86:73:17:98:f7:26:a4:9d:6a:8a:d6:b5:bb:
         0c:39:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:25 2025 by rpki-client