Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File:                     d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier:          qikjeqNFotPn2KTZPLRuQhlQ/yJovgCCOUF+h1BnF5Q=
Subject key identifier:   FC:F1:00:6E:4B:D9:E3:3A:B5:C2:61:A3:8B:30:0A:CD:F3:16:80:A1
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer:       /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial:       0194BBCE064396DF700980AC1F876E1078C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 10:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:28 +0000
Files and hashes:         1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: xWiyRYfe1bSyb0NTwCAcxO/sHRgvNvsAWtwxGgRUUmA=)
                          2: dl3PAMO_cjTEN-X9xexRuh-Chb4.roa (hash: EybA63Tgz5VJ0tdqhdyDgjCCTh9UVwGU3vK+Wpg2GJ4=)
                          3: lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa (hash: UW3HI87+Tvs0vPfpNH93w8VClrUvFKCrCGbfw0Tz9ZU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:06:43:96:df:70:09:80:ac:1f:87:6e:10:78:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
        Validity
            Not Before: Jan 31 10:00:28 2025 GMT
            Not After : Feb  1 10:00:28 2025 GMT
        Subject: CN=fcf1006e4bd9e33ab5c261a38b300acdf31680a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:68:7e:04:5b:2e:a4:2a:0b:04:57:7a:aa:
                    3e:e9:c9:43:f8:95:93:20:6b:11:a4:0a:19:b6:d0:
                    7a:4c:85:e4:de:96:af:4e:70:71:76:51:19:fe:52:
                    e5:f1:ea:90:fc:41:39:c7:a7:a5:7c:f3:f5:b4:5e:
                    ad:2b:84:59:21:7d:12:1d:f5:38:86:6c:27:19:00:
                    0e:70:a4:65:12:91:20:2c:af:5e:89:92:10:3e:1b:
                    72:66:ae:f7:68:13:13:ea:ae:6a:6c:49:c5:c8:a4:
                    e4:1c:ad:d0:fe:de:78:82:11:50:24:02:de:9d:1e:
                    99:90:97:1f:02:fb:e7:35:ad:52:81:a0:65:fd:d6:
                    46:9e:f0:28:93:fe:24:b1:07:84:d8:c8:d5:3a:f6:
                    76:d6:b2:6e:b1:f1:f8:fd:04:84:4a:e9:38:5c:87:
                    5b:1b:d4:f7:cc:7d:67:d0:5c:3c:cf:9f:7c:20:b5:
                    ae:68:b3:dc:7f:d0:d1:94:a6:56:18:60:57:ca:1c:
                    5a:15:cf:96:d6:59:82:f7:35:7d:22:ea:30:f4:f0:
                    b7:99:a0:25:3f:51:d6:d3:d2:b0:f8:c0:bf:53:1d:
                    d8:a5:64:db:3f:be:fd:05:26:dd:aa:78:9b:f3:c9:
                    fc:cc:75:be:8e:b3:90:3a:fa:c8:1f:b7:a9:1e:5b:
                    6a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F1:00:6E:4B:D9:E3:3A:B5:C2:61:A3:8B:30:0A:CD:F3:16:80:A1
            X509v3 Authority Key Identifier:
                keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:dc:c1:43:ae:83:42:ad:5e:ba:23:e0:03:f8:d3:f5:70:b4:
         ba:6e:21:b8:ed:87:a6:fa:bc:ec:86:51:46:8c:bb:74:78:90:
         ef:2b:14:6c:aa:38:89:18:ec:3b:96:e6:75:5e:8c:1c:d6:ad:
         36:94:da:b8:61:d7:e3:62:55:81:84:2a:2e:bc:5e:09:6a:d7:
         1d:77:a9:f2:7f:ac:53:ac:5a:42:87:41:4a:97:8f:aa:ab:f9:
         4a:6c:fe:3f:58:ae:41:c5:24:32:e7:9a:25:d1:42:99:81:ac:
         a6:b8:de:03:1d:c1:5c:88:b3:65:56:9d:82:19:42:38:0f:87:
         1d:4c:82:f4:15:b6:f0:81:6f:ec:12:6e:53:c0:7c:4b:8f:38:
         46:07:fb:57:0a:f5:ef:59:2f:7b:e6:53:4d:45:fb:00:68:39:
         d9:b9:47:85:3f:de:f7:5e:27:4f:6e:31:86:6e:d3:5d:bb:4e:
         b4:f1:49:ee:58:6f:3f:a0:61:e3:76:8f:35:c8:a9:4c:c1:a6:
         c7:30:64:17:9e:63:b7:52:cd:64:ea:45:b9:23:58:f9:81:d2:
         c4:1e:6a:70:f6:f0:aa:89:0d:87:c0:2d:d1:03:20:51:ed:9a:
         57:de:9f:4c:95:0e:08:30:87:8a:55:bb:e8:a4:79:9d:43:e7:
         a5:c2:fd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:51 2025 by rpki-client