Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
File:                     jDutauSRZD0HXiHLqFnvKOJuPHk.mft (raw, json)
Hash identifier:          AMCxPMo0RCh/QrRlsQYny7f52frkimDBCeQAowRyT7I=
Subject key identifier:   DB:0D:BC:C5:CB:08:A7:23:10:84:97:90:5D:37:50:F8:62:4C:0B:E7
Authority key identifier: 8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79
Certificate issuer:       /CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
Certificate serial:       0194BCA9817676097BBABA23BA54B27C17C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
Manifest number:          10D1
Signing time:             Fri 31 Jan 2025 14:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:12 +0000
Files and hashes:         1: Q9DwS1QYdCXG_TZ3Zx_W06dNw9Q.roa (hash: PyoWrDBozM9pi7C6rpjZaVEl3kgNUqzqzcKl0+NVZC0=)
                          2: jDutauSRZD0HXiHLqFnvKOJuPHk.crl (hash: qCeOpFb/+zXF1PlGii59aA5gf3K89m22FbmEsVgt7ik=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:81:76:76:09:7b:ba:ba:23:ba:54:b2:7c:17:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
        Validity
            Not Before: Jan 31 14:00:12 2025 GMT
            Not After : Feb  1 14:00:12 2025 GMT
        Subject: CN=db0dbcc5cb08a723108497905d3750f8624c0be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:49:0b:76:c2:82:a4:41:66:db:a9:08:f2:2a:
                    e5:b1:9f:91:86:9d:e7:fc:5e:b4:1f:91:8e:b6:bf:
                    2c:e1:69:4b:7e:ed:38:5f:d4:80:be:d6:6a:cf:bc:
                    51:b6:1d:3e:13:ba:26:2e:01:f4:b8:e1:9c:d6:38:
                    af:4d:18:67:12:4c:02:33:d0:8d:58:86:61:c7:02:
                    df:3d:84:bc:52:a8:48:0e:02:53:b4:b8:03:65:0c:
                    46:e2:4b:7b:30:89:f3:ff:fe:0c:a0:c3:94:0c:5c:
                    06:24:de:2f:fe:39:73:13:de:c0:22:70:df:e9:43:
                    de:80:72:09:ce:c0:54:9c:bd:46:fd:c8:e2:cb:f1:
                    7a:20:e4:eb:c6:fe:da:46:5d:13:b6:de:5c:7c:72:
                    18:77:fa:e7:53:98:c0:d3:43:a8:8e:a8:c2:c1:e0:
                    02:a7:43:8b:36:95:f5:05:97:9a:5e:01:ab:65:7a:
                    fa:e5:71:9d:21:86:16:4a:44:5e:6b:a9:58:b2:a5:
                    f2:a4:53:0c:31:3e:b1:19:d2:fb:f0:a5:3d:be:0c:
                    7b:9a:fe:82:cf:57:11:86:ed:37:7f:ec:94:25:14:
                    15:24:4d:22:46:06:12:d3:e6:4e:b4:c1:a6:00:4e:
                    76:38:e8:40:e3:24:d3:a9:05:db:73:52:81:a1:4c:
                    03:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0D:BC:C5:CB:08:A7:23:10:84:97:90:5D:37:50:F8:62:4C:0B:E7
            X509v3 Authority Key Identifier:
                keyid:8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:27:2a:c4:a3:36:54:ac:27:e7:b7:14:bc:97:8e:52:48:27:
         75:8d:41:b1:a4:60:45:10:3e:84:b1:e2:2b:35:bc:d0:38:d3:
         ca:ec:0e:65:2b:12:ec:00:38:36:9b:c9:31:48:fd:48:26:b8:
         12:78:b3:97:67:23:27:aa:cc:6c:a6:bd:fb:16:24:12:a1:4b:
         ca:c9:f7:8a:e1:7d:01:e1:b2:c3:27:97:f1:77:cd:35:58:c6:
         e5:8c:71:1d:dd:b0:db:cc:08:67:ce:26:d5:d3:ae:20:ea:80:
         19:6f:fa:ff:a8:9f:e8:dd:ef:b9:c9:12:95:c1:5a:47:cf:69:
         bb:06:8c:89:f9:f0:76:c7:78:cc:eb:d1:2b:1d:b1:60:f4:41:
         a2:87:2b:c9:63:79:12:8b:de:2c:21:9c:e6:c2:4a:a0:08:ac:
         19:99:ba:1e:d7:55:80:49:5f:1f:bd:b3:ac:32:c3:2b:07:b8:
         ac:98:78:3f:c0:01:ed:ef:80:ae:c6:66:ca:a0:3e:64:73:59:
         e4:9b:ab:f9:dc:2b:e4:46:d2:59:b9:f4:33:40:0d:a9:68:45:
         88:0f:47:84:47:24:7a:4d:af:ec:45:26:52:37:39:fe:7b:fa:
         64:25:84:df:20:1f:91:58:78:e3:8e:60:cd:e9:51:30:53:de:
         9a:f1:6c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:31 2025 by rpki-client