Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
File:                     eEOlOB3OKHe7w1GmhO_OzdYT46o.mft (raw, json)
Hash identifier:          inLuVUt9e3ZQGFjIeou51P0Yy8fGtN3THuc5fKC9XEI=
Subject key identifier:   3E:28:B7:63:02:76:4D:59:7A:E3:EE:4F:E7:61:99:B4:6C:1E:A8:4A
Authority key identifier: 78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA
Certificate issuer:       /CN=7843a5381dce2877bbc351a684efcecdd613e3aa
Certificate serial:       0194BC3C444D900C47B4EFB3EA71611514A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft
Manifest number:          0F9A
Signing time:             Fri 31 Jan 2025 12:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:53 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:53 +0000
Files and hashes:         1: bb6nncvAhni078ZU5RtarugpVvQ.roa (hash: 6TYoEFu0AnfEraFXjdNI1tT+tX9iNJhtz1VPH2GMI28=)
                          2: eEOlOB3OKHe7w1GmhO_OzdYT46o.crl (hash: 7muaFkdqbtJfYmk4DQBU24m3G7lRyvG9/Wg9h6JF9s8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:44:4d:90:0c:47:b4:ef:b3:ea:71:61:15:14:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7843a5381dce2877bbc351a684efcecdd613e3aa
        Validity
            Not Before: Jan 31 12:00:53 2025 GMT
            Not After : Feb  1 12:00:53 2025 GMT
        Subject: CN=3e28b76302764d597ae3ee4fe76199b46c1ea84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:b3:45:e3:b0:b9:7f:bd:2b:03:9d:d3:1b:
                    bf:0f:14:3d:39:46:f5:76:e0:18:ce:ac:4e:da:7b:
                    41:11:55:91:02:75:63:e6:bc:fc:3e:e5:1b:bb:0e:
                    3b:2c:8f:70:34:b3:c1:03:7c:66:93:09:e0:1a:f9:
                    99:82:cf:bf:31:07:30:d9:f4:44:10:45:8e:6e:fe:
                    8e:ea:33:94:e7:93:e1:98:80:c6:80:d4:13:d4:24:
                    f7:91:4b:d1:c7:2d:56:bd:b0:40:f8:d9:bb:b6:df:
                    48:1a:6a:1e:de:0d:ce:fe:8b:15:8c:e1:e5:4f:e9:
                    eb:98:df:7e:6c:19:e0:10:94:e4:0f:5b:1c:de:0d:
                    1b:54:f3:2c:d1:c0:a2:2d:18:ac:3f:dc:5c:0f:a4:
                    17:a0:e0:ed:75:77:ce:60:27:4c:2a:d3:99:bf:df:
                    2f:08:af:cd:0a:98:f7:25:ea:d1:88:98:1b:36:d2:
                    3f:6a:db:58:a5:a4:5e:f9:1a:51:ba:ce:0c:e1:72:
                    0d:7d:10:81:52:75:df:ab:88:c3:fb:74:ed:ac:b7:
                    a2:37:03:7c:ad:f5:9d:7f:ba:59:90:3d:ca:17:b2:
                    63:b6:22:3c:0d:14:6e:27:98:ac:f1:a3:43:92:62:
                    0c:0f:80:e0:02:c4:2e:34:e9:8a:55:11:ca:23:9a:
                    1a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:28:B7:63:02:76:4D:59:7A:E3:EE:4F:E7:61:99:B4:6C:1E:A8:4A
            X509v3 Authority Key Identifier:
                keyid:78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3c:8d:6f:21:40:32:d2:a0:4f:5b:00:4e:56:ec:05:e2:73:
         02:74:08:10:d8:51:ff:62:65:54:53:18:8b:a5:8b:88:b0:cd:
         0d:c1:04:39:0c:d0:24:ee:de:1f:bb:8c:01:d0:cc:92:bf:6e:
         d8:ae:11:77:36:30:e1:1d:d8:12:0c:25:7f:94:a2:c4:8d:70:
         f8:81:39:3a:7c:79:db:26:2a:09:ab:f1:8b:23:fc:52:15:70:
         2c:dd:a7:1b:02:26:ff:10:61:2f:90:bf:7b:53:d4:6c:0f:38:
         02:f0:a2:4e:7e:b7:52:7a:12:07:09:e4:b5:76:e4:b0:66:bd:
         3e:d6:23:04:66:33:09:33:30:9b:bd:84:04:37:23:ae:79:a3:
         c2:c3:e2:5e:23:d8:e0:03:d7:7c:a8:ed:aa:74:cf:dc:ab:40:
         d8:b7:71:c5:7e:0e:df:99:99:ad:2d:5a:e2:44:50:b3:f2:3d:
         61:fe:9d:10:ae:dd:f2:12:6a:d1:39:58:81:4e:f1:68:ad:e0:
         13:68:b9:47:b7:cc:93:9d:98:f0:f1:b7:a2:1c:ac:8f:1f:0a:
         bf:ef:8f:6a:ba:ba:51:8c:c0:3e:b3:c9:e8:e8:a4:0c:cb:ca:
         e0:68:ad:0e:e5:59:9f:f3:6d:9d:0b:56:b0:95:0a:c6:1f:af:
         27:ff:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:28 2025 by rpki-client