Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
File:                     EvG7YR8rejeAD0nGwSXF7pi3GcU.mft (raw, json)
Hash identifier:          3L3hpRT8Kf8n+p9j2/RcFnfCPcLTh03FGhoAHaXgNOc=
Subject key identifier:   15:6C:4E:BE:74:C7:BC:57:6E:81:45:B4:6E:64:F4:58:45:86:54:0D
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Certificate issuer:       /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial:       0194BC052C8ABAD6BBFE136883406852BC89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 11:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:43 +0000
Files and hashes:         1: EvG7YR8rejeAD0nGwSXF7pi3GcU.crl (hash: FoLHTo4Io6aB+SnlKi0VRqjzwP47mkdxmBU1IYEWlz0=)
                          2: IAnrwkjZREz9e2befvDjJt5K894.roa (hash: QbZkDRkpqioEjJh7FseQ0HMDmnK8FziG2mObmGFYiVk=)
                          3: ZUbaqrj_yFTDGp2flKk5KYAWImA.roa (hash: 8sRBl8RMRTSCzITTUP5fI9xbiQWEPVeo/rx5tDOUqn4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:2c:8a:ba:d6:bb:fe:13:68:83:40:68:52:bc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
        Validity
            Not Before: Jan 31 11:00:43 2025 GMT
            Not After : Feb  1 11:00:43 2025 GMT
        Subject: CN=156c4ebe74c7bc576e8145b46e64f4584586540d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:d3:38:8a:ed:c4:7a:f3:ce:9f:a2:21:57:
                    fc:3b:47:00:6a:f5:50:10:48:f7:e5:f7:f1:58:54:
                    d0:fd:ea:a5:ce:11:0a:b1:27:28:17:2a:cf:c2:a1:
                    0f:c5:f9:8f:e6:23:4a:fd:be:6a:a6:27:aa:d4:b8:
                    a0:4b:2a:55:91:77:27:10:33:f6:8b:fb:f1:e4:41:
                    d1:11:d9:e4:ee:ec:cc:bb:0d:ae:92:79:30:c9:dc:
                    e0:fd:0b:a1:58:84:83:a7:8b:d8:25:74:de:df:39:
                    df:51:cc:10:35:7a:8a:62:d9:ac:a5:91:ea:4a:8b:
                    57:98:a0:89:ea:c8:b8:6b:73:d5:43:c3:0b:d7:c9:
                    9c:bf:b1:db:98:45:f5:e8:bd:86:14:ef:18:5e:2d:
                    aa:21:59:f3:1a:f9:ea:4c:87:b6:41:32:16:f4:e3:
                    31:ff:df:d1:b3:d9:ce:83:4c:7b:7b:60:bf:30:bd:
                    35:fd:a9:a2:85:c2:e8:a6:02:22:e0:28:8d:f5:7b:
                    9d:79:5b:fa:10:1d:e8:46:3a:13:b7:ec:2a:50:84:
                    c5:9a:47:5d:7b:da:42:75:16:44:15:dc:a8:8b:2f:
                    b6:26:9f:33:3c:b4:c6:94:3e:48:54:8d:aa:68:40:
                    91:47:f7:85:c2:a2:78:ce:08:62:94:d9:23:b6:a1:
                    f3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6C:4E:BE:74:C7:BC:57:6E:81:45:B4:6E:64:F4:58:45:86:54:0D
            X509v3 Authority Key Identifier:
                keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d1:da:b2:00:c6:63:08:df:10:6e:ca:d6:f6:09:b8:7b:3d:
         bc:a0:9d:64:33:92:70:b6:86:92:3f:6d:fc:15:6b:49:69:1a:
         63:14:65:e1:2d:75:d4:da:37:77:a4:96:6f:2c:fc:11:98:2c:
         3f:dd:0b:35:7a:a6:82:64:3b:46:09:e9:69:bb:d2:97:a5:2b:
         ef:8d:8e:89:63:c1:16:fd:75:8b:be:bc:06:1d:6f:93:5c:ec:
         8d:19:b0:d6:af:54:c0:7f:70:9a:1e:eb:bd:89:b4:dd:5a:0f:
         ff:d6:e3:67:23:e3:16:25:42:75:52:77:94:8b:1f:66:27:33:
         0c:d4:d0:be:94:0b:99:4d:a5:b3:3b:e5:9d:2e:4b:21:36:2e:
         15:3e:9d:2a:23:78:39:4b:8a:89:25:79:6d:43:a4:83:d7:fb:
         10:07:c4:02:fe:71:a2:52:06:a5:94:7f:30:dc:f3:aa:b7:9e:
         9c:be:bb:5d:7d:2f:0d:ff:70:df:30:91:83:01:20:78:62:db:
         67:5a:e1:dd:21:20:8f:c1:a0:0b:8d:a5:15:a4:f5:12:ec:d8:
         09:ba:8c:22:21:4a:ef:d6:3a:26:cd:de:8e:02:54:51:8e:8c:
         c2:fd:cc:76:c2:f4:10:83:83:17:a6:1d:81:11:82:4d:1c:31:
         3f:87:a3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:22 2025 by rpki-client