Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File:                     pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier:          tk29EG8wSDrUk9Y7e2/uXXwNcLtwLXsiY4VIuviWmjs=
Subject key identifier:   47:54:6B:BD:79:EA:08:D7:A1:46:EE:A1:CC:A6:12:9B:1A:BA:20:BD
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer:       /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial:       0194BBCDF720417BB61A180270714F8ADB92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number:          06B0
Signing time:             Fri 31 Jan 2025 10:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:24 +0000
Files and hashes:         1: 2JNRo-dtGNGJcp7kMDpk5VpUcF4.roa (hash: sJo6COvD7U5zSVoX5aZ2ujJN+R6hvJF0qpAtUrijnZ0=)
                          2: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: 6x+ftT+NwJkkb+b9cvZiZ06XYnWeN4psxrlY4eTOow4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:f7:20:41:7b:b6:1a:18:02:70:71:4f:8a:db:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
        Validity
            Not Before: Jan 31 10:00:24 2025 GMT
            Not After : Feb  1 10:00:24 2025 GMT
        Subject: CN=47546bbd79ea08d7a146eea1cca6129b1aba20bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:3a:fd:ef:e3:3d:31:7b:9b:36:74:62:91:
                    86:c9:2d:0b:47:0a:81:5c:3c:19:b7:0c:e0:4d:4b:
                    58:b5:b2:9a:15:d9:4c:16:32:aa:b6:68:f2:5c:32:
                    4b:61:8c:20:84:5c:98:88:37:48:59:cd:98:c7:1f:
                    50:d6:22:8a:02:51:2f:4e:9b:6f:c3:8b:b7:a4:87:
                    c8:8f:89:ba:0e:c2:6f:23:2d:02:f3:75:dd:4a:7a:
                    1e:1e:fc:d9:5a:8b:da:c2:37:ff:e0:a1:2e:59:30:
                    26:76:56:41:f3:17:d8:11:36:5f:30:80:3c:d7:11:
                    e2:36:3a:0e:2f:d0:f9:f4:c1:32:19:88:54:c6:6a:
                    77:ff:05:0c:3f:9b:1d:f0:10:82:ed:80:36:80:ad:
                    27:61:82:2a:8a:a7:e3:81:fb:aa:14:3e:d5:37:27:
                    db:04:13:ed:27:dd:3f:8d:d4:1f:6d:75:a1:bf:a6:
                    30:96:f9:c7:04:cd:d0:09:c9:b8:84:1f:61:1c:f8:
                    93:67:81:c2:17:1a:50:3f:7b:1b:bd:e3:30:9c:dc:
                    2f:8c:a7:77:cc:ca:5c:aa:c5:77:df:f3:8a:1c:56:
                    8e:c1:3d:97:c3:40:e3:8c:4b:8c:69:ca:7c:df:8b:
                    2a:21:73:1a:eb:d6:60:2e:a4:9c:f6:43:93:60:9d:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:54:6B:BD:79:EA:08:D7:A1:46:EE:A1:CC:A6:12:9B:1A:BA:20:BD
            X509v3 Authority Key Identifier:
                keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:71:76:df:18:c5:f1:a6:ac:a3:19:a8:e7:16:80:81:0d:ba:
         67:97:fc:a5:1a:f4:76:c3:9f:58:e6:cb:e4:fb:d8:3b:db:b6:
         c2:7c:ba:af:d2:80:a9:fa:15:22:6b:6a:7e:ad:c0:3d:fb:71:
         09:22:62:e7:8e:0a:9d:2d:b3:23:67:3b:60:e1:b5:07:48:36:
         e6:88:eb:fb:79:96:ae:9a:db:9a:10:23:c6:50:65:5d:6f:83:
         4b:1d:94:05:1e:b0:92:69:1c:ee:91:a5:01:44:df:ac:fa:9d:
         65:85:35:08:26:3f:15:33:3a:ef:77:b0:42:f3:95:b0:10:4b:
         99:fe:17:e2:16:f5:8c:70:8b:f0:52:79:72:43:7f:6b:ca:c2:
         92:5f:bd:18:22:72:e5:a1:d1:ea:e4:ef:9b:c4:b8:c2:ec:69:
         64:11:6f:3a:01:65:db:ae:16:de:6a:98:b7:5e:4a:3b:e7:cd:
         97:33:f5:e1:cc:de:fa:a0:bf:06:6a:2b:0f:87:60:40:99:0e:
         ad:d4:86:1c:56:e8:b0:d2:fa:15:f8:fb:16:be:6a:63:d6:8c:
         16:c4:3e:ac:31:79:96:96:ef:b0:a1:e2:0c:e5:f1:62:67:90:
         05:70:d5:dd:5c:c9:6b:72:8c:bc:c1:9f:06:90:fc:62:ab:d4:
         90:63:fb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:25 2025 by rpki-client