Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
File:                     Od2goAlTA6kfOOQ6tNN7YZw76h0.mft (raw, json)
Hash identifier:          Hr4rUb4/skn+yvlyZt+LrPjndQ8m0gwnhAMl770mHEg=
Subject key identifier:   5C:1A:6A:3D:90:C7:B5:0D:8E:70:9D:4F:E3:4F:79:52:E1:5A:D5:62
Authority key identifier: 39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D
Certificate issuer:       /CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
Certificate serial:       0194BD859F570BB0AADBBFAFC31ED6B248F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 18:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:38 +0000
Files and hashes:         1: EzYELBbdECMUd5jL00V2yecSQYs.roa (hash: GVtwH5pzCQ3ejlHuG6nu4gzTRA6JPrykk4d+btWS9mI=)
                          2: Od2goAlTA6kfOOQ6tNN7YZw76h0.crl (hash: oBHGtlqZdiRkrcc0Wm/jHZiD97vIwsDAMscmaKz6o9Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:9f:57:0b:b0:aa:db:bf:af:c3:1e:d6:b2:48:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39dda0a0095303a91f38e43ab4d37b619c3bea1d
        Validity
            Not Before: Jan 31 18:00:38 2025 GMT
            Not After : Feb  1 18:00:38 2025 GMT
        Subject: CN=5c1a6a3d90c7b50d8e709d4fe34f7952e15ad562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:4b:73:b4:59:38:c1:e3:27:2b:b6:ed:8c:
                    a5:53:2f:7a:97:e1:42:c8:15:1b:74:35:5e:23:74:
                    f7:a1:4e:f3:89:3e:b1:fd:bb:e0:06:d9:79:99:84:
                    18:e4:75:f5:71:5b:e0:c3:73:ab:7b:71:ab:ee:bf:
                    21:3f:b4:3f:9c:9d:13:eb:7c:78:32:c0:c1:07:34:
                    d6:8d:67:a4:97:06:c1:89:8e:81:35:d0:50:f8:d5:
                    df:ce:25:76:3f:7f:c9:fd:f3:be:e5:5c:5c:91:5c:
                    c4:ab:19:de:70:6d:6d:df:48:32:a4:e1:89:a9:e7:
                    ee:30:59:cc:a8:8d:c4:d0:fe:6f:23:d5:f2:32:f4:
                    2f:42:68:4c:c4:28:c4:8d:49:9a:21:32:0f:39:8d:
                    49:ff:57:7b:19:89:12:d8:14:b8:dc:fb:0e:df:e3:
                    62:7d:90:a5:b9:fb:75:64:4c:c5:4b:1a:f7:eb:d1:
                    37:6c:25:6b:c2:ba:94:85:e5:83:27:d0:f2:fc:72:
                    cf:5c:dc:48:70:b7:c1:c2:0c:19:30:f3:68:db:1b:
                    6f:b0:e4:b1:60:24:a5:93:fd:12:d4:12:ed:f3:f3:
                    80:38:72:ab:3d:6c:95:eb:42:7c:2b:d7:7d:b4:2a:
                    73:49:46:4d:54:25:43:4e:56:0d:a3:4a:5f:fc:d6:
                    67:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1A:6A:3D:90:C7:B5:0D:8E:70:9D:4F:E3:4F:79:52:E1:5A:D5:62
            X509v3 Authority Key Identifier:
                keyid:39:DD:A0:A0:09:53:03:A9:1F:38:E4:3A:B4:D3:7B:61:9C:3B:EA:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Od2goAlTA6kfOOQ6tNN7YZw76h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/897876-da72-40bc-8d5c-7ca9b8e91ac7/1/Od2goAlTA6kfOOQ6tNN7YZw76h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:67:89:3c:1b:57:51:7b:6a:07:b5:92:a1:8c:f0:b2:78:1e:
         8a:02:29:be:0e:c1:b4:22:15:b3:65:81:3e:ce:cd:4f:44:83:
         0c:ef:58:d1:d3:a6:69:89:50:4f:25:c1:c4:04:f2:8a:21:31:
         ff:52:49:bc:a8:e5:f4:e7:69:7b:44:68:8b:b2:2b:db:d3:99:
         6c:26:d9:51:48:0c:ba:e8:34:7b:b0:69:f2:59:9b:b2:7d:9d:
         02:03:e1:6b:38:3f:e5:2f:ca:9e:e6:eb:f5:36:a0:5e:55:21:
         fe:33:4e:64:6c:8f:1a:48:2b:42:b7:93:86:31:3c:27:0b:92:
         26:70:9e:6b:d8:db:fa:1e:a3:da:8d:5e:87:b6:73:9f:a9:fe:
         72:87:58:a5:20:e9:f7:67:fc:33:80:84:ff:48:74:1a:3e:ad:
         cc:13:25:27:f1:3b:8d:04:a2:56:ee:66:d5:11:d4:23:3c:bb:
         8e:02:52:80:49:c1:21:d9:94:05:0e:26:23:21:2e:77:d2:33:
         d2:05:d5:a0:4a:a1:a9:1e:68:1f:33:8b:97:97:76:ae:b8:7c:
         9d:31:de:7f:e9:f3:e3:16:81:74:c0:9c:b3:5a:da:eb:82:73:
         2a:ac:59:df:7b:45:04:5c:75:61:59:e9:51:89:19:e2:62:75:
         3c:bb:e9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:23 2025 by rpki-client