Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
File:                     jLz5N0OA69GF0hGPVRyFWa4jNUE.mft (raw, json)
Hash identifier:          WjReMWKW4m1YuGoS3Dp7H8h3uHtLK2EwVRr2+cDbnvA=
Subject key identifier:   0F:10:BB:19:FE:96:D6:13:CC:6B:84:9C:99:AB:23:68:85:28:99:2A
Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
Certificate issuer:       /CN=8cbcf9374380ebd185d2118f551c8559ae233541
Certificate serial:       0194BD85575B5867B9BC392FC349B38A70D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
Manifest number:          0A0F
Signing time:             Fri 31 Jan 2025 18:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:19 +0000
Files and hashes:         1: LPHVyLxlu99zLZ120cTfoB_tDV0.roa (hash: k/MXZCSTh36/WgnxNvkdeF42fCURyZYfQlnOWMA/duo=)
                          2: jLz5N0OA69GF0hGPVRyFWa4jNUE.crl (hash: mWySe2LSNfvkUhU6lXkAbsZLhtAX5zCiLojbWgEfuFk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:57:5b:58:67:b9:bc:39:2f:c3:49:b3:8a:70:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541
        Validity
            Not Before: Jan 31 18:00:19 2025 GMT
            Not After : Feb  1 18:00:19 2025 GMT
        Subject: CN=0f10bb19fe96d613cc6b849c99ab23688528992a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:27:97:c8:a5:39:41:78:8a:10:cd:59:d9:
                    90:08:fe:2f:bc:e6:ec:a3:06:75:1d:09:d2:91:89:
                    c6:2c:05:59:d5:79:6a:e9:13:6f:87:3d:9b:6b:ff:
                    2e:d2:bb:59:ea:68:fc:97:b9:38:10:3d:39:0b:21:
                    0a:99:5c:a4:b0:4a:dd:2d:1c:1f:5c:1a:64:43:33:
                    8b:2c:a3:09:71:79:64:cd:51:d4:ec:e6:7b:07:77:
                    fe:01:a7:e1:3a:9f:2a:79:e5:13:97:6b:34:06:9f:
                    0e:f6:d9:fa:16:e5:f4:1e:c4:a8:93:2e:11:3e:9f:
                    9a:b3:63:0a:c9:53:e1:da:44:2f:08:cf:ba:6a:ec:
                    24:0f:21:a7:06:91:4d:4a:ba:61:9b:a4:2d:ea:86:
                    22:15:35:75:c3:f7:db:4e:8c:b4:98:67:5a:23:9f:
                    04:ba:de:1e:c8:fe:40:6d:28:0b:2a:20:83:02:c1:
                    a9:49:fe:c4:fc:a3:65:f8:fa:27:90:5b:05:0d:7c:
                    25:f0:fe:03:50:eb:23:07:f3:05:e7:f2:23:bd:5e:
                    9a:b2:3d:df:85:97:aa:99:f2:2a:b2:45:9e:7a:31:
                    cb:7f:a7:07:de:f5:5c:08:8e:06:ec:db:61:cf:50:
                    4e:d4:46:1b:82:0d:c7:51:50:43:63:24:85:7c:77:
                    7d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:10:BB:19:FE:96:D6:13:CC:6B:84:9C:99:AB:23:68:85:28:99:2A
            X509v3 Authority Key Identifier:
                keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:26:08:b2:b0:6f:fe:20:e9:d8:ed:7e:4a:92:1b:27:72:83:
         90:e6:d1:b1:48:74:8f:dd:35:8e:3a:c1:45:ee:80:c8:86:6a:
         87:11:f8:9c:2b:c1:b8:36:73:2a:bf:b0:38:49:d7:5f:af:04:
         8f:59:ba:a1:1c:3c:7b:e7:33:ca:90:9a:0d:cf:a2:e4:6c:8a:
         bf:49:66:2c:5e:8c:02:0c:5b:b7:9b:0f:b5:5a:5e:e2:8d:93:
         ae:c2:e9:61:7b:08:31:de:ea:3d:49:61:aa:10:bf:05:16:0b:
         61:0b:f4:f3:60:0c:93:3f:a4:51:31:92:da:c3:03:82:22:f3:
         60:82:0b:6a:a3:09:4f:12:20:5b:4b:05:cb:05:ab:d4:5e:dc:
         a6:e0:f6:61:cd:d6:25:33:8e:4a:7e:1d:02:fc:f7:be:b3:7f:
         7e:81:07:d7:ff:a8:24:c4:8e:cd:86:5c:91:f1:04:30:2b:d1:
         63:69:94:86:93:c6:03:80:c7:89:97:cd:ee:e4:25:35:da:91:
         6e:55:4e:ea:02:14:d6:92:7c:0b:59:a3:84:b0:6b:e1:42:ac:
         40:96:43:e1:2f:78:1d:e2:bf:d5:74:7b:c2:88:f9:40:a7:34:
         af:b9:94:70:14:a3:c3:03:b5:8d:20:3a:10:4c:e0:11:16:d0:
         86:f1:06:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:55 2025 by rpki-client