Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
File:                     e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft (raw, json)
Hash identifier:          67dzGogNTC7YLnpVbkR8k6JciOd3QQoI6DeNbDCIDYg=
Subject key identifier:   6F:D8:E2:9D:CE:0E:2F:C8:E4:4E:43:6A:AE:5D:7E:81:F7:FE:77:7C
Authority key identifier: 7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F
Certificate issuer:       /CN=7b89385c0002330b096567b21514d8e1bc09689f
Certificate serial:       0194BC3BCC7EA8985204B19A1686C2FDD6B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 12:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:23 +0000
Files and hashes:         1: cLYB6l9FZL9zQXyfpqoagDuHdic.roa (hash: bfsqI0s1izdNOdCWZ5Wt/vOuavl9t3l+ssIuSAYSQTY=)
                          2: e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl (hash: 945VsSfokBTTbLiXxaUQfu4q91HKGiFjZ9g3NT/NimY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:cc:7e:a8:98:52:04:b1:9a:16:86:c2:fd:d6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b89385c0002330b096567b21514d8e1bc09689f
        Validity
            Not Before: Jan 31 12:00:23 2025 GMT
            Not After : Feb  1 12:00:23 2025 GMT
        Subject: CN=6fd8e29dce0e2fc8e44e436aae5d7e81f7fe777c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a7:79:57:39:c4:af:2b:c1:91:d2:f5:70:f0:
                    26:1d:3d:a9:d1:20:31:18:cc:74:af:40:10:d6:3c:
                    2f:93:11:ef:e7:f1:ac:3f:73:6f:8f:b8:66:9d:ca:
                    1f:13:7e:9b:4b:f4:5c:72:ae:95:e1:7c:33:a4:9a:
                    10:e9:8c:05:52:b5:21:4c:27:e9:47:93:82:de:e4:
                    1a:69:d8:5f:c2:56:69:94:02:e0:9d:3e:81:5e:bf:
                    b7:27:d6:80:d3:97:c3:c1:da:9e:fa:a5:73:7b:6c:
                    e9:ed:d9:be:54:f8:42:d7:be:3d:e7:8d:b9:c1:0d:
                    8a:c7:e7:81:80:de:14:e5:bf:7d:e4:cc:3a:07:85:
                    66:e8:14:32:fd:bb:d5:c0:ba:ad:47:f2:a6:0a:ef:
                    12:35:a5:d1:fc:a0:75:00:cc:8e:66:bf:f5:6a:f4:
                    81:38:f0:8c:6b:f5:2c:f4:ee:df:a2:52:7f:dc:0b:
                    6f:55:fc:d0:85:44:7a:10:21:22:31:af:93:46:b9:
                    94:d9:e9:8b:d0:35:65:c3:b4:bc:b7:cc:ed:72:59:
                    d6:c9:6a:8a:5d:9d:e5:14:e2:a8:16:be:88:e6:43:
                    22:25:35:78:4b:d6:3a:93:53:0b:ce:61:e3:fb:bb:
                    17:97:29:93:c6:aa:72:cc:71:c9:f9:8d:5b:1c:1c:
                    df:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D8:E2:9D:CE:0E:2F:C8:E4:4E:43:6A:AE:5D:7E:81:F7:FE:77:7C
            X509v3 Authority Key Identifier:
                keyid:7B:89:38:5C:00:02:33:0B:09:65:67:B2:15:14:D8:E1:BC:09:68:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4k4XAACMwsJZWeyFRTY4bwJaJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/379816-d6b4-42b5-95ad-fe27921e1542/1/e4k4XAACMwsJZWeyFRTY4bwJaJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f1:86:6a:e4:f3:4e:b1:15:b8:a9:23:fd:7c:92:69:2d:b5:
         73:ec:f8:c7:ff:86:4e:3f:c0:cc:56:32:59:c4:47:cf:c4:05:
         4c:d8:3c:42:c8:e8:fd:32:eb:2e:22:cd:09:c7:cb:87:b5:0a:
         8d:64:95:67:f5:92:43:11:a5:b2:06:09:bc:a5:9c:69:71:2f:
         42:f6:e9:b6:48:b9:16:26:06:f6:ff:3f:52:2e:b5:5a:8e:37:
         45:6f:13:4b:9b:3d:ed:1d:93:ec:6a:ea:a2:37:3e:80:62:dd:
         c1:35:0d:dd:65:29:eb:39:05:51:0a:3f:7f:d9:2d:e8:92:a9:
         20:cd:b7:85:fb:5c:78:a2:7a:98:5f:3f:db:12:02:50:35:3f:
         79:25:b6:bc:46:2e:e4:47:9c:38:09:34:f0:9f:5d:22:f5:d3:
         6b:61:7b:5f:d4:8b:58:da:7c:21:47:31:f5:a8:c2:93:6a:3b:
         6e:b0:39:59:71:82:56:2c:ab:7c:e1:6e:0e:72:04:59:d7:5e:
         1d:c6:f4:1b:e0:c4:34:51:32:25:56:e8:39:46:18:18:92:d7:
         ec:29:33:a4:e2:6c:a2:f7:2b:b3:c0:9a:ad:f0:04:08:ae:7c:
         1b:5b:4c:19:de:7e:fe:7c:64:93:26:94:c8:62:d5:68:0a:a4:
         0d:1c:b9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:56 2025 by rpki-client