Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
File:                     vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json)
Hash identifier:          LtRRO4yUwQrfVKRx5rqjLjilzdAlW9jXl151YRrPx2o=
Subject key identifier:   83:34:CB:45:D6:C9:D4:21:A6:2F:01:AD:21:F8:A6:EB:66:F8:AE:6A
Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
Certificate issuer:       /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Certificate serial:       0194BC3BF2370543AB2A74048B7E58D034BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 12:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:32 +0000
Files and hashes:         1: PtAXY24lYtkFRHade4pTjXormLM.roa (hash: 1elZ7b8fLDvNPO81SeVzVwIAYPfLoIwWb4acP64QkQU=)
                          2: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: 1f/HgIAOI3W+4F+3hDl0lhIXMGZKVbLIpMM7vgVsTCA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:f2:37:05:43:ab:2a:74:04:8b:7e:58:d0:34:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
        Validity
            Not Before: Jan 31 12:00:32 2025 GMT
            Not After : Feb  1 12:00:32 2025 GMT
        Subject: CN=8334cb45d6c9d421a62f01ad21f8a6eb66f8ae6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:91:f1:fb:be:90:52:c8:cd:21:bc:3d:c6:72:
                    50:d6:c4:85:b1:0d:35:3d:65:9e:89:aa:b7:6e:08:
                    6d:59:d1:f5:e9:c8:51:3f:49:40:c5:91:a3:a8:56:
                    26:b8:6d:3c:c5:b3:28:cc:2a:8b:3f:64:1a:85:68:
                    eb:94:85:46:e5:09:90:8e:64:a4:78:ea:0f:9a:17:
                    16:ce:bb:3c:8a:08:a3:42:48:d7:16:ca:1f:0d:69:
                    76:fb:de:ba:12:16:1a:6b:20:20:73:db:ce:57:8d:
                    d0:88:8b:64:bb:c8:76:1f:1f:9c:cb:f4:9c:a7:5a:
                    81:b6:c3:23:3c:14:de:54:ec:a0:94:ba:17:99:03:
                    e3:db:ba:73:01:69:ae:83:ed:a1:5e:79:15:cd:de:
                    9e:ef:e7:32:8f:55:90:4c:a5:22:cb:55:88:8d:d4:
                    78:23:ae:7c:81:df:35:8f:c4:e5:f8:47:5a:ff:0d:
                    c7:95:74:6d:48:bd:94:38:b6:56:c0:32:c1:96:b9:
                    f4:6f:14:86:bd:ac:74:ac:17:48:a1:8a:31:fb:47:
                    3a:d8:bf:c5:a0:89:44:27:c4:26:76:7d:aa:bb:71:
                    57:4a:fd:f4:92:db:3e:96:86:05:5b:ef:75:56:5e:
                    2f:fc:1d:35:13:cf:3c:74:8d:83:d5:fa:a3:e9:b0:
                    ae:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:34:CB:45:D6:C9:D4:21:A6:2F:01:AD:21:F8:A6:EB:66:F8:AE:6A
            X509v3 Authority Key Identifier:
                keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:6d:2d:cd:e5:a3:34:27:df:79:5a:6a:24:6e:6b:b9:cc:36:
         8a:05:d4:39:c2:c8:e4:df:ad:b3:77:dd:cd:45:a1:a7:f3:6f:
         8c:27:0c:a0:58:cf:ce:42:50:41:08:53:c3:98:2b:8b:b2:57:
         a0:51:08:3d:33:ac:10:f5:f6:9d:a7:40:d7:d5:90:ad:da:7d:
         d2:37:b6:b0:e5:d1:e3:26:35:b7:eb:da:69:e4:2a:8d:19:7c:
         a1:28:a9:90:60:b5:c3:91:92:a9:1d:c3:3e:99:ab:0c:c0:bb:
         59:93:be:64:a3:29:a1:3a:1a:33:96:63:78:57:02:c5:3e:b6:
         90:f4:cb:fd:ef:e7:c3:fb:e4:26:6b:d3:97:c6:23:6c:e8:39:
         5a:30:0a:0a:6d:81:7d:b3:a6:14:98:20:0a:db:87:a6:5b:97:
         a0:ff:2a:80:86:c4:12:a1:44:41:3f:41:8d:14:00:b1:07:0c:
         2c:97:a2:31:66:6b:84:fd:95:fd:a9:a9:64:9d:7c:ca:9a:bb:
         b1:db:83:0a:10:f2:67:68:62:f9:cb:5d:e3:3b:9a:a7:4a:4f:
         6c:6f:45:22:d6:7d:7a:cc:42:85:2a:55:40:c3:4c:c1:45:35:
         4a:29:8e:97:ad:00:f9:70:1f:48:37:28:f4:e2:a9:f3:60:8a:
         bf:d7:76:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:30 2025 by rpki-client