Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File:                     4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier:          hpnjei0tqKgTzBizpPwVVfqyiGXIWDylqWKPqR28Ao8=
Subject key identifier:   7C:2F:5A:9D:59:62:C2:81:0D:66:5E:FD:5D:DA:01:81:4F:7F:A1:B4
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer:       /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial:       0194BC04BD43E07F6752BE0969E77DDC9EE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 11:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:14 +0000
Files and hashes:         1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: gEpy3VVaTMwqjA40NG0izXlTojw6RcIuixtMkQiFg+c=)
                          2: aWUQzBuRutK2_qLKMIBREYhWNS0.roa (hash: EEbZn4pmevKGtGGTKH3kqnYuG7haulAx42CNa2YJjd0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:bd:43:e0:7f:67:52:be:09:69:e7:7d:dc:9e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
        Validity
            Not Before: Jan 31 11:00:14 2025 GMT
            Not After : Feb  1 11:00:14 2025 GMT
        Subject: CN=7c2f5a9d5962c2810d665efd5dda01814f7fa1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bb:fa:ea:04:7d:69:f8:ad:ce:00:8e:8d:15:
                    1d:0f:5f:c9:58:8e:68:45:fe:9a:eb:40:55:a8:a4:
                    d8:e3:3b:b7:8a:e9:95:e8:b0:b4:48:0a:fa:d0:91:
                    b3:0f:64:be:9d:fb:6d:c2:ea:55:62:df:7b:70:48:
                    94:ca:8a:13:16:1b:dd:60:dd:e7:bf:06:4a:3d:11:
                    4c:7b:b6:a7:b3:ed:3d:14:e1:dd:35:fd:c5:e4:9a:
                    cb:25:75:88:8f:2b:0d:a0:17:4d:55:9b:47:b9:01:
                    a8:3f:3f:9c:3b:ed:c6:ef:07:93:42:7c:05:53:87:
                    cd:7c:ef:69:04:1a:23:01:6b:04:94:7b:d9:3d:34:
                    cb:ec:cb:36:dd:fc:c4:d1:07:eb:2c:e5:9d:36:2f:
                    4b:28:83:e1:9d:ba:6a:1d:e0:54:4f:1d:f1:3f:c1:
                    4f:67:7f:a5:ea:ea:db:19:9a:b3:ab:cb:d4:f2:02:
                    5f:d4:f0:b3:ee:2f:0d:32:cb:92:61:a5:43:78:f4:
                    de:95:63:e1:87:30:b4:2f:e7:d2:73:f9:d7:71:59:
                    55:3f:5d:ef:01:c9:5c:5d:b3:34:b6:8c:1e:55:dc:
                    a2:c5:b2:d9:74:2a:89:b8:a4:bf:4d:28:b8:1e:ad:
                    ab:32:b7:d8:6a:32:fc:57:20:90:53:1f:ba:c8:0c:
                    44:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2F:5A:9D:59:62:C2:81:0D:66:5E:FD:5D:DA:01:81:4F:7F:A1:B4
            X509v3 Authority Key Identifier:
                keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:cb:6b:b3:85:17:82:d2:e5:29:32:c0:be:cd:5f:39:53:9e:
         94:42:42:f6:cd:84:63:70:80:83:ce:e3:61:e7:ab:e5:30:a2:
         3a:d5:e1:5c:20:c3:4a:2c:41:7e:91:88:6e:c1:10:ee:ce:cf:
         e1:73:e2:b7:45:f0:ad:35:f3:c8:e3:4b:38:28:5d:3d:d3:3d:
         70:91:81:27:22:6a:6a:c6:69:fe:ef:ae:c3:82:bb:27:11:63:
         b6:c8:3b:d6:09:38:d3:5f:9c:11:6f:af:01:86:13:a7:e4:bd:
         2f:fb:e0:40:49:16:1f:f9:ba:83:ae:cb:b2:04:a2:d3:75:a7:
         11:9c:11:07:4c:fa:23:6b:60:0f:74:0c:3d:2a:9b:9b:be:8a:
         67:09:47:c5:f2:0a:98:07:03:02:fd:5b:e3:33:c7:98:93:83:
         f1:06:db:26:0f:b1:b2:98:d0:d4:f2:04:9f:06:47:aa:23:e0:
         ef:a6:88:f9:5b:a8:79:f0:8d:22:46:65:c3:ce:a7:23:9f:40:
         89:21:af:ad:67:51:f2:d3:87:21:fe:d6:30:f8:1c:b4:d4:ba:
         39:e2:2e:a6:97:be:a3:fb:7b:5c:e4:73:2e:9c:8e:8c:1a:a5:
         ce:1b:3a:d6:0b:2b:af:cf:62:2a:2f:aa:5e:ec:d0:db:52:18:
         ba:fb:1e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:43:17 2025 by rpki-client