Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
File:                     4qv2099Tm7fBaE-09GF50NoGsIM.mft (raw, json)
Hash identifier:          fLGEHucZsew0dwSy0I7bxT/xz7WfL2Doe2+UfM4XCWs=
Subject key identifier:   80:6E:4F:6A:D1:85:F3:58:06:32:44:97:EA:79:09:91:77:94:C5:AE
Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
Certificate issuer:       /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Certificate serial:       0194BCE084A1B9D47BB6879BFABA88D2411F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
Manifest number:          0B0B
Signing time:             Fri 31 Jan 2025 15:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:18 +0000
Files and hashes:         1: 4qv2099Tm7fBaE-09GF50NoGsIM.crl (hash: MYDruWZ6bOUhcNOSw/X+YTBlpJeaucm9NI7My24FTd4=)
                          2: ILMIPoeAh6Mp9Q-FEoKjBIMPdAM.roa (hash: 5aktyEB76Rn5TuWGXiVEAOmlZjNF43pV1TNogR1WVfw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:84:a1:b9:d4:7b:b6:87:9b:fa:ba:88:d2:41:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
        Validity
            Not Before: Jan 31 15:00:18 2025 GMT
            Not After : Feb  1 15:00:18 2025 GMT
        Subject: CN=806e4f6ad185f35806324497ea7909917794c5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:e7:7f:a1:62:bc:ff:85:d1:e6:24:7d:f9:
                    49:b2:21:cf:ba:a7:a3:82:ed:39:bf:3b:4c:bd:ef:
                    2e:37:cf:b7:56:aa:6d:fd:04:b8:08:96:38:40:c3:
                    13:a1:17:fb:32:f2:a5:44:0c:01:fa:4e:22:32:19:
                    c2:d3:aa:e1:22:8d:ad:82:6b:b9:3e:7f:cd:c8:3e:
                    02:ae:48:78:61:ab:98:ab:9f:04:f1:d2:af:44:bb:
                    0c:ac:8a:03:98:5d:e1:e8:12:d7:b1:70:ef:67:4b:
                    02:58:03:72:4e:a3:11:d6:de:8d:24:92:7c:5b:68:
                    98:7b:ee:39:ea:09:09:19:df:7d:4d:a7:6f:45:b6:
                    f5:6e:57:7e:fa:ce:02:05:81:19:88:54:96:0a:20:
                    50:cd:ff:02:39:63:13:c8:f3:45:4c:8f:e6:e2:2e:
                    33:66:fd:42:67:d4:75:8a:0a:8a:dc:82:6b:a2:ee:
                    9c:73:bf:28:09:1f:03:9b:fb:93:10:97:2f:c6:72:
                    22:1c:7f:48:df:b0:88:6f:21:46:93:7f:15:5e:e1:
                    d5:56:af:7e:f1:52:a2:ec:5f:42:20:bf:5e:d3:6b:
                    bf:06:00:dd:27:3e:05:ff:5f:d2:ad:ab:82:59:bf:
                    1f:bb:1f:43:6f:6d:ad:7e:98:c5:1b:15:2b:e9:3a:
                    e1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6E:4F:6A:D1:85:F3:58:06:32:44:97:EA:79:09:91:77:94:C5:AE
            X509v3 Authority Key Identifier:
                keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9f:f0:04:13:28:4d:37:a7:38:f7:05:82:5c:f0:cc:82:b2:
         b8:a5:17:99:53:11:f3:7b:db:a0:51:47:4d:5c:da:03:1d:8c:
         cb:3e:cc:de:e0:58:0e:29:39:7a:4b:8d:20:6d:86:94:d1:a0:
         fc:99:1b:c9:3c:55:09:05:cc:34:a3:4e:30:31:bd:34:e3:d8:
         5c:a2:ad:67:a0:6b:89:6f:6b:c4:66:18:3d:7b:eb:25:fc:dc:
         09:ca:3d:1e:a7:02:17:ac:19:c2:d1:c9:69:a1:39:87:29:7a:
         b6:99:06:57:8f:31:fa:0b:41:08:d3:c8:44:10:47:00:99:e0:
         54:ce:4c:83:eb:b5:5e:03:6b:4f:bf:70:d4:a7:c4:cc:53:ac:
         f6:f3:25:b3:21:e3:17:cb:09:7c:0b:44:b1:cc:1c:9b:bf:85:
         4e:d9:22:6e:cc:42:53:6e:55:c9:8c:1d:56:cf:81:a6:d4:8a:
         4f:8a:09:ff:a7:08:cf:c5:54:18:2f:8b:75:31:86:c6:7f:00:
         11:12:04:7e:6a:d5:db:f8:34:02:e2:e6:0f:a5:46:c5:a8:07:
         c7:33:cd:55:fd:35:b8:06:95:07:1b:5d:7a:a9:bf:c0:29:b2:
         51:86:32:1d:49:b5:06:45:da:4c:4a:c6:71:84:bf:b6:90:c5:
         d4:2f:d0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:52 2025 by rpki-client