Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File:                     1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier:          D/AYyeeZL25S7Gu5/Q13jyrpObUdKCgapIp61XPC/H0=
Subject key identifier:   42:92:FB:12:F1:88:E5:1D:28:4F:99:C1:38:45:24:77:09:9C:8D:08
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer:       /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial:       0194BC049FE914B20E8DCD95AF9F433EB6A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number:          03AD
Signing time:             Fri 31 Jan 2025 11:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:07 +0000
Files and hashes:         1: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: zsJFM9kxBhbekaSftVpUJTzFXSoliwiLXXRC0zGI7h8=)
                          2: oKBWeiCdr72OFTmQ9qAC_2ODyWc.roa (hash: S0rlxTkwKd8+RpY5lx0VofPErbqrcMDFmRtkG28exLA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:9f:e9:14:b2:0e:8d:cd:95:af:9f:43:3e:b6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
        Validity
            Not Before: Jan 31 11:00:07 2025 GMT
            Not After : Feb  1 11:00:07 2025 GMT
        Subject: CN=4292fb12f188e51d284f99c138452477099c8d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ea:c7:69:16:b9:a7:83:4b:e5:a4:b9:9d:bb:
                    2d:46:96:6d:0e:b9:67:44:23:8a:e6:f2:12:0e:50:
                    1f:6c:cc:4b:fd:de:f4:f3:9b:c2:09:bd:59:3a:77:
                    c7:dd:24:b6:7b:34:b2:4e:78:b7:be:cc:c3:94:ac:
                    9f:5b:b9:7b:99:95:36:24:36:e2:58:11:ce:5b:72:
                    d5:38:d9:2e:db:7f:6b:a9:c1:cc:13:7f:4c:f7:47:
                    5b:87:1c:5e:99:eb:8c:4f:0f:fe:25:dd:26:cf:a5:
                    f7:dd:c1:4b:19:9a:8e:c0:7d:ec:31:9e:14:a6:55:
                    72:b2:19:e6:85:33:4d:bf:a5:9f:1f:d5:e8:08:1d:
                    b9:73:05:18:40:2f:ad:e6:a9:97:bf:38:ea:90:e7:
                    1e:60:7a:c4:11:01:a5:14:2d:23:1b:b9:77:3c:af:
                    28:49:1e:21:76:a8:95:d0:7e:85:a6:d2:de:33:f7:
                    b6:f5:99:8b:9a:5f:1f:93:ee:98:fa:e2:f3:76:b8:
                    e7:88:5e:7e:cf:06:83:fc:af:4b:05:50:16:86:b2:
                    84:0f:5e:c3:1e:0d:1c:95:9f:10:01:06:39:ef:06:
                    07:4f:e1:5d:dc:1c:c0:cd:70:03:12:26:24:6b:cc:
                    eb:9a:79:78:21:3f:20:c9:a0:cd:f3:52:c3:e5:51:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:92:FB:12:F1:88:E5:1D:28:4F:99:C1:38:45:24:77:09:9C:8D:08
            X509v3 Authority Key Identifier:
                keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:2a:11:f5:e8:06:f4:5d:8a:f5:98:51:0a:36:84:9d:3e:79:
         bd:cf:5b:44:a3:d8:32:64:76:2d:ce:a5:5e:d9:fd:5f:e8:29:
         82:ef:f1:85:8e:1c:51:51:99:d7:ca:c4:2e:61:6d:de:9e:bd:
         3a:bb:7f:59:37:28:d7:01:e4:4e:d5:03:ff:ac:99:f4:7b:45:
         7e:b2:a2:1f:81:cb:7b:57:d9:d7:55:e2:60:2e:8d:cb:a8:41:
         13:fb:d6:95:2d:70:8f:8f:2b:13:bc:4f:9f:78:ef:18:f8:68:
         93:1a:05:94:f4:3c:a3:f0:e0:9e:a9:7e:4c:7f:dd:4b:c1:f8:
         90:29:1d:80:a5:90:8c:b6:aa:dc:29:40:23:30:d0:57:a1:dd:
         e5:19:2f:70:84:62:a2:1d:33:dc:23:62:1b:69:21:64:f3:39:
         bb:5a:ad:4a:46:b7:16:c8:7e:94:91:05:02:79:9f:fa:3f:cf:
         b4:81:7a:ed:18:be:1c:d6:e0:33:a6:b5:38:b6:ff:a3:55:a4:
         a8:4a:05:83:5c:ed:3b:05:e4:1b:e7:8d:12:9c:e2:9d:95:2b:
         56:b5:a4:63:e5:bc:bb:f5:27:40:42:91:dd:76:27:cf:15:c6:
         67:37:d4:fa:d1:97:ea:75:29:89:0d:c3:0b:fd:35:55:f5:61:
         4c:4f:33:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:37:09 2025 by rpki-client