Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File:                     sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier:          IyJF/b4s93u1xFbglTMI+bF9oRQ5X1YWgyDjSFPMzh4=
Subject key identifier:   74:7A:0D:DD:62:86:31:D5:2B:E4:49:17:42:4A:C3:1E:D2:43:E2:C4
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer:       /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial:       0194BC04D94F0FE6AD25B5B6883DA7AE55BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 11:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:21 +0000
Files and hashes:         1: 3y9VMN9BUcZB2fmchyviGBmGtxw.roa (hash: WvArAvEQlUAHpEjB63U5q0z8PqLe+6GgRYCWBvbd2yM=)
                          2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: KpEd8v+ZHzbke/rhpVTLElf3DHQ9Pk3fghMaC6M+9Cg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:d9:4f:0f:e6:ad:25:b5:b6:88:3d:a7:ae:55:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
        Validity
            Not Before: Jan 31 11:00:21 2025 GMT
            Not After : Feb  1 11:00:21 2025 GMT
        Subject: CN=747a0ddd628631d52be44917424ac31ed243e2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:b7:32:7a:e1:77:e6:a1:dd:94:fe:c0:03:
                    74:ab:4d:dc:b8:d4:8b:3f:98:6c:f3:25:85:89:78:
                    df:07:ac:06:b5:ab:e9:f0:13:62:72:d7:65:4d:85:
                    e5:05:c8:a5:60:a5:ae:ef:6c:55:bb:32:d6:46:ad:
                    86:c4:40:20:6c:a5:1d:f4:3c:de:b4:69:e3:9e:2a:
                    4c:4b:b4:ea:f6:71:84:50:3f:17:5f:c8:5c:2d:31:
                    2b:de:08:8b:90:2c:28:4f:2a:bd:dd:3d:54:9c:47:
                    10:fe:47:29:e4:8f:a3:a3:6b:8d:45:1d:fa:18:3e:
                    6b:f7:52:5e:de:f2:ed:b9:ca:f1:65:31:c5:a6:12:
                    e7:e7:51:88:2b:72:e9:05:12:e8:e1:e8:fc:aa:bd:
                    e1:80:9d:f6:42:a8:54:c2:28:ae:2b:93:f2:8e:33:
                    4a:a3:95:cd:8c:ef:02:fa:eb:17:50:88:84:9b:ba:
                    0c:32:46:0e:bc:7a:2b:f4:0e:b5:ec:f0:bb:31:2f:
                    c6:86:66:09:98:8a:3a:62:c1:0c:3a:23:69:29:90:
                    b5:63:e5:09:6f:5c:f5:15:c2:51:ee:a6:8e:59:f5:
                    71:5d:60:11:f1:10:f1:6f:e1:8a:ff:d8:59:c3:bd:
                    a5:9f:c1:98:bf:59:ee:b1:02:d8:c8:df:46:54:85:
                    53:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7A:0D:DD:62:86:31:D5:2B:E4:49:17:42:4A:C3:1E:D2:43:E2:C4
            X509v3 Authority Key Identifier:
                keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9f:a9:7c:8b:83:22:2c:c9:fc:d1:a5:70:99:06:ae:c3:03:
         eb:90:ae:40:00:53:91:85:1e:74:29:84:51:8e:43:72:d3:ad:
         ac:7c:0d:0d:f0:19:0a:27:1e:e4:2e:8b:a2:e8:2c:c3:d1:b0:
         f0:fe:e8:de:c5:69:27:2d:66:a7:68:3f:a8:26:db:31:d1:8f:
         91:d1:5b:58:54:ca:06:cc:97:fb:eb:46:2f:df:a9:6b:fd:62:
         a9:89:39:7d:7c:4a:ed:e6:a0:db:91:a6:ce:d9:3c:e7:6c:ec:
         39:fc:de:81:19:b0:f3:46:38:7c:19:b5:ae:3f:78:8f:0e:ec:
         93:dd:ad:9b:93:e5:a6:07:41:60:0a:e3:6e:d0:7e:40:8e:ba:
         74:fa:4f:6c:85:fc:74:de:42:af:04:d1:d3:bb:cf:d3:48:53:
         b2:1f:30:fd:72:1b:91:fa:2a:01:6b:48:31:f0:a9:8c:5c:08:
         ca:56:37:81:35:67:94:42:06:fc:aa:2a:66:aa:93:57:ec:bc:
         c1:6f:06:9c:25:03:4e:cd:48:94:d4:44:68:4b:82:f3:00:aa:
         09:c3:14:9a:03:d7:4e:2b:f1:cc:8c:06:a8:8a:a3:67:af:94:
         cd:0e:2b:5f:08:cd:df:b4:53:0f:c7:cb:04:9c:26:de:fd:c5:
         b4:c7:de:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:12 2025 by rpki-client