Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File:                     xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier:          9R/MbHMWfXDu2bPwsz8j5Q8fM+6EyIXt8IX8A3D0tV4=
Subject key identifier:   F6:C8:01:5F:BC:38:61:53:4F:EA:42:C5:00:3B:B7:B6:BD:6C:92:B1
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer:       /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial:       0194BC729AE43C1372C6B53E7D430212913B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 13:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:14 +0000
Files and hashes:         1: 2qJcuD6QXgpix9mcKSP7QtCl_p8.roa (hash: rCHaYO4zvtNWG/Tx66L/I7h/Oz9Nk+n5nXOPZ6MU2Us=)
                          2: 8GwFBjMlZs9zvniW53JhhsnvBso.roa (hash: qTLnle1OUXCO2W6fCQcBbItxyYrDsAdEAQkBEhvJh1M=)
                          3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: YHNNrF2SkWGGCU8oWNslaUdlRJTPS00ngFJ6F3ZbAXg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:9a:e4:3c:13:72:c6:b5:3e:7d:43:02:12:91:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
        Validity
            Not Before: Jan 31 13:00:14 2025 GMT
            Not After : Feb  1 13:00:14 2025 GMT
        Subject: CN=f6c8015fbc3861534fea42c5003bb7b6bd6c92b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:1c:cc:72:10:8d:41:e9:36:60:67:2b:06:
                    0c:4d:67:b8:da:f6:e5:a0:9a:20:43:c2:ac:a9:86:
                    6d:66:16:59:d1:5e:30:31:23:61:63:69:78:6c:73:
                    93:6e:cf:9f:06:07:7d:b3:25:37:9e:03:de:29:7a:
                    15:cf:05:80:99:7f:25:13:a3:16:e6:c4:e1:e4:84:
                    70:78:68:d1:26:b2:b4:ba:16:ee:82:94:b8:79:77:
                    8f:92:6b:af:da:76:b4:e8:90:05:dd:37:fe:6c:e0:
                    22:47:61:c0:3e:98:70:b8:ee:ff:2e:53:3a:6d:39:
                    cd:bb:42:ae:e4:23:5f:79:2a:99:88:56:27:26:94:
                    0a:89:36:76:20:75:b6:fc:49:e7:88:02:06:7c:81:
                    f3:ba:1d:67:aa:80:74:4b:35:23:aa:13:57:9c:6b:
                    61:54:fa:85:75:12:0a:7e:99:b0:a8:e4:37:86:03:
                    df:4a:00:bf:18:a0:8f:da:89:20:f5:06:1f:65:54:
                    04:a2:b1:1e:bf:b9:d8:53:e9:08:de:8f:1d:90:fd:
                    cd:51:11:88:57:dd:e5:a5:2a:a9:59:ed:54:49:a1:
                    99:cb:c0:bc:df:4d:9f:d2:f0:9f:49:1d:7c:60:34:
                    6b:3f:8b:86:fd:91:c2:00:a3:c9:0b:84:59:14:8b:
                    a9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C8:01:5F:BC:38:61:53:4F:EA:42:C5:00:3B:B7:B6:BD:6C:92:B1
            X509v3 Authority Key Identifier:
                keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:83:0b:f2:35:98:59:48:b2:0a:e9:f1:b4:c0:69:25:2a:8b:
         cf:38:80:0d:86:cc:ef:66:4d:95:9a:d8:99:8b:f1:c9:05:6b:
         e1:1f:5f:b5:8c:1c:ef:99:64:6b:b9:2d:1e:9a:87:ef:4c:db:
         3b:ec:2b:ef:96:5c:40:a2:78:fd:53:4a:42:6b:db:25:3b:a3:
         b0:66:2d:98:52:29:38:85:d0:48:8f:17:e6:46:6b:b4:e8:e3:
         9b:7f:2c:3c:48:91:a7:3e:cc:c8:2e:08:8a:4c:96:41:02:10:
         2a:28:e2:31:8d:31:6d:72:ad:54:55:b3:c4:1a:bf:62:48:1e:
         2e:f7:14:91:36:86:ed:56:33:c4:2e:fe:97:d2:35:d1:b0:0a:
         81:8c:a0:f1:a3:13:5b:bd:0b:62:c9:d3:2d:c3:98:9b:b0:97:
         f4:17:06:ee:8c:fa:81:af:b9:db:6a:b2:5e:0a:2e:51:71:cf:
         b2:48:08:e8:c5:e2:80:ff:d7:92:80:63:38:ac:d0:a7:90:d6:
         db:7a:95:68:bc:f6:9c:16:28:79:da:aa:43:a9:2b:43:85:21:
         99:5a:e5:af:b8:2c:dc:f6:97:78:ad:73:a3:2f:72:26:b5:05:
         dc:bf:cd:11:2e:11:e7:31:4c:6c:7b:f1:35:66:88:a0:6c:f4:
         dd:bf:34:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:15:47 2025 by rpki-client