Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
File:                     pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json)
Hash identifier:          0rD/Qh/+GZpe0pdRzfQ/bwO+J9Fmsu90C+E3NEMFJlM=
Subject key identifier:   D9:18:58:85:B7:99:C6:3F:CB:41:33:ED:F2:5B:FB:9C:1C:40:C7:C2
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Certificate issuer:       /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial:       0194BBCEEF1E3EB046A4FC6FA750E33AC639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
Manifest number:          0B15
Signing time:             Fri 31 Jan 2025 10:01:28 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:28 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:28 +0000
Files and hashes:         1: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: k0o2HPZ1D7Tv5+Wb36dpGQ7YZQtCD14jpWkveMDPMvk=)
                          2: z4rUk_E4AGcR7M7P_EXqaAGwIrE.roa (hash: vdPESCF/t7U31UD2O57fuph7iNy0Hlzj8MYZvwZ4bj4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:ef:1e:3e:b0:46:a4:fc:6f:a7:50:e3:3a:c6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
        Validity
            Not Before: Jan 31 10:01:28 2025 GMT
            Not After : Feb  1 10:01:28 2025 GMT
        Subject: CN=d9185885b799c63fcb4133edf25bfb9c1c40c7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:c6:f4:c7:2b:01:de:b2:d4:21:e3:f0:90:
                    7e:ed:04:e3:a2:b5:e5:75:61:77:8c:73:64:ff:42:
                    d1:2f:fc:23:dd:5a:c1:fe:00:ea:de:df:f9:52:80:
                    bd:79:3e:80:e7:23:82:40:02:d0:f2:79:62:f8:fd:
                    dc:9f:fc:e4:81:e7:ce:5d:0e:77:1d:c4:0f:5e:d8:
                    b4:31:f3:47:5a:fe:01:71:57:a2:1a:15:42:ad:57:
                    08:fe:5f:d1:f0:ea:30:4d:1d:89:4a:52:db:e7:47:
                    24:05:b9:0d:e6:af:99:15:aa:47:0d:76:78:88:61:
                    fd:2b:f3:da:08:b9:9c:df:b6:f4:66:82:04:b2:e4:
                    a5:09:5f:e4:b7:63:c9:ad:56:08:1c:7d:8f:89:9a:
                    01:c4:4f:07:0f:72:31:3e:01:1d:ea:29:76:0d:a4:
                    de:3f:e9:3d:cb:fd:ae:b3:3f:aa:b5:c5:b2:51:f8:
                    64:42:b8:cf:9e:5e:66:0e:de:ff:c9:60:e9:7a:e8:
                    bb:5e:de:3a:1f:a9:1a:2d:13:8f:2f:07:ad:4b:d8:
                    bf:1e:9d:f4:89:79:5f:fe:9a:68:32:8c:3a:5f:62:
                    33:c7:2c:e5:e1:a2:ca:8e:aa:cf:c9:27:19:45:93:
                    28:94:d0:5a:2c:60:5a:bb:4c:8f:88:3d:c0:ef:f4:
                    ed:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:18:58:85:B7:99:C6:3F:CB:41:33:ED:F2:5B:FB:9C:1C:40:C7:C2
            X509v3 Authority Key Identifier:
                keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f3:81:cb:4b:eb:91:d1:fe:32:75:20:b8:18:64:75:e6:63:
         80:e5:a9:d2:cf:e5:b3:6b:c9:a6:8d:d7:27:10:f8:b6:af:57:
         5a:40:fa:49:35:d1:ff:6f:48:ca:b8:9d:30:25:14:0c:5c:00:
         31:a6:68:9f:20:23:cf:d9:2b:58:50:34:c5:c6:9c:f8:ba:d6:
         32:50:73:96:8a:a6:e7:14:75:5b:a6:5d:68:fd:b0:09:cb:f9:
         62:3b:a3:b2:48:35:df:80:80:53:45:48:f8:18:13:ab:e3:09:
         9b:26:de:b3:a7:e3:9c:dc:30:f5:54:43:c6:00:d6:f5:65:9d:
         39:0d:83:81:5e:b9:e0:02:6f:ca:5b:c0:2d:bd:78:ff:24:6a:
         ba:68:88:cd:23:91:db:54:a3:22:6c:fc:b0:23:ea:6d:ef:86:
         18:a5:e3:a4:48:a0:a0:2a:eb:c8:78:4d:9f:47:b0:9b:0a:8f:
         34:65:fc:a2:1d:63:0f:89:df:97:0e:86:9d:1e:2f:3d:e1:23:
         7c:c0:e8:3a:69:25:3e:9c:3f:f8:e6:73:bc:eb:1a:4a:ce:90:
         cb:59:ba:36:49:57:a9:14:fa:60:83:fa:3a:ad:68:e0:b3:6b:
         b7:75:ba:90:8d:92:a2:b2:d9:74:04:08:0b:72:3b:9b:97:d1:
         e0:b7:00:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:17 2025 by rpki-client