Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
File:                     977TP_AejgncT-3NAROcDneFSq4.mft (raw, json)
Hash identifier:          2HRVx+qzORhDrAx/N08BzuFQYShvBxZ8/ltnm2q3Dyk=
Subject key identifier:   AC:76:1B:29:F4:A5:2C:DE:6F:23:66:03:DE:CF:1B:E8:8A:93:A9:68
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Certificate issuer:       /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial:       0194BBCEF2C34E53E755230F4425132CAE5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 10:01:29 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:29 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:29 +0000
Files and hashes:         1: 977TP_AejgncT-3NAROcDneFSq4.crl (hash: 52dOdmxElUAUSNwKy67pPCPJ8cG606i2pCLBpk8IPWw=)
                          2: _lgnGISO0ktGS-TS3jHHuxqlGcc.roa (hash: 2bgXxxG8FQEtolmgRr2kuRhZKybBJ/pEC6iODZDta6M=)
                          3: yIVyJLl1EpKKS9GoVS2g6EtcfKo.roa (hash: +BexIZ1+iniEPsBZlKynSCHhy877ZiICabmi/L0fbr0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:f2:c3:4e:53:e7:55:23:0f:44:25:13:2c:ae:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
        Validity
            Not Before: Jan 31 10:01:29 2025 GMT
            Not After : Feb  1 10:01:29 2025 GMT
        Subject: CN=ac761b29f4a52cde6f236603decf1be88a93a968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:72:63:64:42:fb:1c:81:25:a2:d3:7e:0f:
                    d8:62:a3:9f:7e:68:24:80:77:e6:2b:46:f6:26:33:
                    33:3b:3d:f1:f1:31:0d:10:73:7c:b1:4f:b5:1d:7e:
                    4c:05:87:18:3c:ad:ab:37:86:5f:b7:3b:a1:f8:c2:
                    f5:0c:8d:c6:e1:90:41:c3:81:9c:ef:bd:e3:4f:89:
                    41:a9:ec:22:a1:d0:77:d8:53:7d:bc:06:eb:9d:40:
                    da:da:49:09:ad:08:c1:23:46:bc:65:95:b3:05:b1:
                    6a:bc:17:19:17:68:eb:71:5a:59:d9:0b:c8:e4:8d:
                    91:6b:e1:6b:00:99:92:d0:a8:24:04:89:f3:4c:a2:
                    45:6d:c2:79:71:27:6d:74:d2:e1:2e:83:0d:46:d0:
                    03:d1:2e:b1:1e:3d:b7:57:99:62:47:51:53:0e:90:
                    04:1d:bd:52:0f:f7:c7:ee:6f:f0:04:7f:b4:dd:9b:
                    97:0f:b0:22:eb:3f:32:22:e0:6a:60:fe:cf:64:3f:
                    34:36:51:c3:8b:82:aa:50:1d:16:50:cb:25:b7:2c:
                    61:81:d2:2d:06:40:b9:2d:7f:68:a1:bb:3c:08:e1:
                    b0:c0:19:ce:7e:0c:80:b7:37:8b:48:ea:f9:df:b1:
                    99:d8:a6:64:c5:4a:1a:a1:b7:94:ac:c5:03:8b:60:
                    c7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:76:1B:29:F4:A5:2C:DE:6F:23:66:03:DE:CF:1B:E8:8A:93:A9:68
            X509v3 Authority Key Identifier:
                keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:91:e6:5f:8d:87:05:a2:6d:10:75:75:cd:88:e5:f3:ff:91:
         22:9b:18:32:cf:83:22:d0:c9:7e:85:d5:8d:22:63:5f:95:08:
         81:77:3a:73:8e:07:86:0b:e1:6d:a7:d3:86:70:79:cd:82:02:
         7f:24:28:d5:99:69:65:a3:d7:99:48:35:b9:c4:94:6d:59:25:
         ec:50:99:7a:7d:61:1e:f8:5e:96:98:84:c6:e2:e6:e9:29:bd:
         e5:c2:4f:c3:c5:57:f3:15:c7:a7:9a:13:ac:8c:47:db:7b:b3:
         7d:4b:62:96:13:1f:b8:0f:8c:29:8c:5a:13:11:50:da:8a:44:
         27:87:ff:6f:1c:a4:f6:24:6e:28:5a:03:0d:73:6d:6c:b7:a4:
         87:71:1a:7a:42:d1:d9:df:af:0e:9a:3f:35:62:d5:d5:c8:75:
         ef:f8:e8:b9:c2:40:4f:4d:c0:d8:ce:5f:f7:d4:7e:c8:6a:dc:
         ed:a9:4f:63:54:fe:c3:32:97:73:20:c8:8a:b0:b8:f0:76:9d:
         39:ee:af:84:2f:ea:a2:91:09:08:9d:dd:ec:0e:19:c8:e7:28:
         e0:01:e5:2a:ba:9f:5d:d9:c4:06:a9:8b:36:2b:81:7b:94:7b:
         fd:89:65:c8:79:b6:09:f7:bd:23:a1:19:0a:f1:4a:ba:41:10:
         3c:77:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:27 2025 by rpki-client