Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File:                     vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier:          pY8Bd3O0oSIOpFFqDEGQa1Zw0MQcuPU1o3wbYIhnvug=
Subject key identifier:   7A:95:D6:37:21:11:EB:11:FF:E6:CF:C1:02:30:75:3C:99:2B:E4:10
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer:       /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial:       0194BC0501186B852564954C67AC38EDF9A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 11:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:32 +0000
Files and hashes:         1: irXjb7CbWugP3w5JDOFWDswYhlc.roa (hash: xfc5cfeM1faq3Raf49DNOnepZD3IOLsHNfYtcKklaZE=)
                          2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: Ywolk/SQHO18rW9CfaQBlINDhyvXhUIjSLSRIVRQoGY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:01:18:6b:85:25:64:95:4c:67:ac:38:ed:f9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
        Validity
            Not Before: Jan 31 11:00:32 2025 GMT
            Not After : Feb  1 11:00:32 2025 GMT
        Subject: CN=7a95d6372111eb11ffe6cfc10230753c992be410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:64:66:67:21:34:4d:f6:72:be:fc:2d:ef:
                    61:d7:8f:11:2b:99:78:a1:58:ad:f0:2e:83:b1:45:
                    b4:d4:4a:29:51:26:65:2b:8f:e4:45:f9:af:23:21:
                    77:98:46:65:6f:79:3a:1a:c5:da:79:dd:9a:73:24:
                    64:05:5a:a3:f8:f9:55:2a:07:c2:8c:2a:14:84:d0:
                    11:e8:cc:41:61:dd:29:fa:3b:8a:56:6e:e1:16:62:
                    1d:2c:67:40:68:57:4d:28:f7:df:23:e4:90:c1:35:
                    eb:d3:71:4f:93:97:8a:1f:13:de:c3:f8:14:aa:69:
                    4c:40:e9:9b:61:8d:03:f6:05:18:b9:0f:89:4a:d5:
                    1f:8b:27:8f:3a:18:db:91:3f:94:74:9f:1b:80:8c:
                    b5:ff:7c:e8:ff:ab:d8:23:0a:53:05:38:35:6b:85:
                    bf:d0:32:67:b9:35:71:02:96:31:db:e6:ad:d6:be:
                    fc:9a:90:cf:3d:26:0d:98:ed:88:5f:43:2e:ef:63:
                    78:e2:2f:16:a7:56:fc:35:07:91:63:ed:e6:b5:15:
                    98:a2:fc:1f:c6:b3:05:a7:1a:5d:90:ae:cd:d6:7a:
                    43:67:71:81:ed:3e:a6:0d:e9:3b:8e:52:e0:5a:fc:
                    90:fe:28:c7:45:20:34:cb:13:11:14:f9:e3:97:9a:
                    57:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:95:D6:37:21:11:EB:11:FF:E6:CF:C1:02:30:75:3C:99:2B:E4:10
            X509v3 Authority Key Identifier:
                keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:53:13:65:07:18:3b:a3:3e:9c:fa:3c:6a:82:e0:7e:44:be:
         56:1f:d7:96:ce:bc:27:99:35:95:56:8f:d1:e1:7f:ec:b7:6a:
         05:07:45:29:f2:df:52:5a:f7:0d:6b:93:f5:5b:8c:c2:15:e6:
         75:62:87:d1:3d:e0:58:96:b3:66:b6:ec:32:db:49:30:24:89:
         c5:51:61:65:f5:74:3a:f2:08:f9:d0:89:a7:2c:ed:e9:ef:ed:
         3e:b9:60:22:2d:3d:4a:aa:d7:df:1c:35:01:0f:81:8e:f9:14:
         2c:85:5d:25:9f:d1:50:2e:fd:97:5d:b5:ce:98:d5:15:e7:1a:
         ae:fd:df:b2:75:9b:5d:df:7c:01:2e:fb:98:e3:7b:bd:5e:76:
         86:31:08:bd:d4:2c:f1:67:eb:68:8b:b9:66:7b:43:19:6b:24:
         5d:e1:62:ca:ef:c7:1c:2b:5b:75:85:3d:17:8b:0e:24:f9:82:
         c3:31:9c:0d:dc:48:8e:a9:4f:52:cb:ba:f0:19:11:f1:23:d2:
         4e:5e:b0:a1:8b:85:06:d7:c2:42:d0:5d:ea:31:b2:71:c5:94:
         58:8a:99:f7:e7:a0:87:f6:51:98:84:59:d8:e0:80:2d:20:94:
         74:b6:75:25:90:b7:be:90:68:32:73:ca:77:9a:44:eb:d5:2a:
         bc:d1:28:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:08 2025 by rpki-client