Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
File:                     Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft (raw, json)
Hash identifier:          yiqbaUCfBJOEd6c5dgXlnQB95ZusFksN67/GxBt+Dq8=
Subject key identifier:   FE:FB:B1:58:B6:66:E9:E5:BA:53:F4:24:B7:1D:78:40:64:B4:35:98
Authority key identifier: 49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
Certificate issuer:       /CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Certificate serial:       0194BD17EA8D23720B588DF30050ADFB8336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
Manifest number:          1010
Signing time:             Fri 31 Jan 2025 16:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:48 +0000
Files and hashes:         1: NSiBzROOhgmJ9ypJm8Za0IGQ3F0.roa (hash: o2v8vxJ4hYMUAZbmBnTv+Psah74MuG6cFMK+pUBuCMg=)
                          2: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl (hash: PLBcylxxQkbmJxhwAJUVCANYgL5JacEpKcE02qABK8s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:ea:8d:23:72:0b:58:8d:f3:00:50:ad:fb:83:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
        Validity
            Not Before: Jan 31 16:00:48 2025 GMT
            Not After : Feb  1 16:00:48 2025 GMT
        Subject: CN=fefbb158b666e9e5ba53f424b71d784064b43598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:a1:ef:8f:36:83:81:a2:c9:8f:07:72:d4:
                    9c:90:0a:80:ae:0b:7a:18:40:1c:94:21:a0:4a:e2:
                    58:42:57:89:69:0e:4e:c7:49:37:b8:16:1f:5b:fc:
                    8b:c4:79:c6:db:5a:9f:2c:ff:d3:b9:9a:5b:4f:4d:
                    8a:76:8d:41:2d:71:61:52:a3:ad:3c:37:ee:fb:1f:
                    07:b0:80:e8:76:4a:49:48:ce:75:f1:f3:29:39:7c:
                    f6:a5:eb:54:35:91:52:15:b7:4a:10:b4:7f:27:a5:
                    6b:14:05:cc:eb:b8:e9:98:8a:eb:39:e1:3e:39:ce:
                    85:5c:37:49:2a:64:a6:0c:1b:7b:d1:65:17:a8:6a:
                    d1:8c:75:07:2a:e2:91:dc:9b:69:1f:71:24:a1:06:
                    3c:11:9b:21:ad:5b:f1:23:58:15:db:9c:49:68:67:
                    3d:ef:f2:d0:71:06:e5:9a:61:e9:f0:fc:eb:bd:77:
                    cf:2f:3f:e7:e4:7e:5e:68:46:7e:05:d9:80:68:12:
                    1c:25:b6:bd:b9:ea:ae:3e:f5:66:d8:8d:d3:70:b7:
                    8b:81:f7:14:dc:41:92:78:1f:d9:db:44:2a:99:a2:
                    2f:98:f9:42:30:53:a6:85:cc:16:8a:46:d4:81:1e:
                    01:30:ac:dc:e6:b1:1d:8c:a0:84:24:4f:8c:90:99:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FB:B1:58:B6:66:E9:E5:BA:53:F4:24:B7:1D:78:40:64:B4:35:98
            X509v3 Authority Key Identifier:
                keyid:49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5f:0f:33:9c:27:ec:23:b1:d2:c5:cc:cb:e5:b6:4d:df:e1:
         a2:64:5a:0f:9b:6e:4f:8b:60:68:1f:d1:a4:d4:5e:67:d8:ae:
         56:89:95:be:81:22:38:d4:b3:b8:ed:b4:19:57:e7:ef:7a:7f:
         1f:07:71:1b:41:21:33:02:f1:56:c4:1f:fe:28:f6:39:4e:0f:
         db:fe:ff:12:6b:65:e9:05:5b:e4:7c:ac:72:28:b5:64:9c:59:
         e8:14:24:21:ac:92:49:ee:b8:63:97:e9:aa:ff:46:a6:b5:1c:
         c0:a5:22:a5:5c:8b:5a:74:d1:85:48:ff:12:b7:ad:89:d0:be:
         4e:b8:91:98:87:85:a6:d2:51:97:d0:53:28:a5:77:b8:ed:87:
         3d:41:43:c7:89:f2:41:a1:f2:93:0b:64:86:c3:3a:68:24:d2:
         f4:93:02:09:32:d0:9d:06:ac:0b:b7:fa:a1:1f:6d:32:ba:86:
         d8:b4:e3:7f:f2:c1:5d:9a:1e:0b:2d:45:9f:93:a3:12:cd:92:
         39:33:e9:f5:50:e2:c3:cb:03:69:a7:5a:d9:0b:f9:11:c8:bf:
         89:d9:b3:e4:d9:5e:5f:73:bd:4e:24:2b:6e:bd:7d:fc:02:2b:
         d9:e3:ca:24:2b:bc:9e:5e:d1:70:dd:6e:45:75:04:25:6e:ad:
         87:06:54:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:58 2025 by rpki-client