Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File:                     AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier:          4ubPc4u3eO3sdhFkYbpbucFk3oate61zZJOdXUHlt5E=
Subject key identifier:   05:A5:E5:5C:5D:A8:10:48:DA:1E:8E:77:34:11:AA:53:48:E6:3A:AB
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer:       /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial:       0194BCE08217EF86E2C85B41C99FE1D46B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number:          064B
Signing time:             Fri 31 Jan 2025 15:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:17 +0000
Files and hashes:         1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: QwcNLEgGFscMt5lz/1qYcZqWh0vtd3fHsWJtvitC7sM=)
                          2: qZ_vGww3miBwhmiPJQ4AD0HWpSo.roa (hash: /yOCjsEAUpbowyN4y+pICuqKMk+5ErunDXEzQRSdLQQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:82:17:ef:86:e2:c8:5b:41:c9:9f:e1:d4:6b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
        Validity
            Not Before: Jan 31 15:00:17 2025 GMT
            Not After : Feb  1 15:00:17 2025 GMT
        Subject: CN=05a5e55c5da81048da1e8e773411aa5348e63aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:52:27:df:fb:e0:d6:8e:80:2d:a0:b1:c8:
                    0e:e0:da:ec:67:ca:a9:d2:08:fb:d5:32:a9:ec:89:
                    c9:53:a1:ac:5a:53:65:9a:33:6b:a3:d5:23:a2:8c:
                    ae:ec:f3:88:52:9f:b9:93:cf:02:03:48:68:8d:8e:
                    ff:f2:6c:8e:3b:87:1c:53:e2:2d:4a:a3:8e:6d:ae:
                    8c:38:fd:4b:99:8f:6c:53:4d:75:86:f5:e4:42:36:
                    4c:5a:a6:ec:52:43:f4:21:b3:a2:66:83:dd:a2:01:
                    08:cf:fb:35:34:5a:48:f2:e4:00:54:7e:8c:75:13:
                    4d:2b:bf:2a:d3:3b:23:b4:a7:25:1d:f4:2d:f2:09:
                    22:07:12:96:52:4d:3d:f4:e5:33:38:5c:78:1a:7f:
                    a4:8c:f6:eb:cf:10:36:f3:b5:b1:45:68:ee:8b:85:
                    88:a7:5d:89:b3:2e:b0:b8:4f:95:c8:cf:c1:b0:4a:
                    b9:ec:23:85:d7:e3:c4:38:b0:24:44:83:c7:af:05:
                    c1:c5:8a:d0:28:61:3d:e0:62:28:33:eb:1f:9a:4f:
                    99:78:6d:b2:37:e7:40:d7:91:dc:3c:39:4a:09:7f:
                    d4:95:07:6d:ae:ca:c8:c3:98:54:3a:09:86:72:be:
                    de:ca:71:91:03:1d:af:ad:7e:a2:c1:aa:08:e6:1a:
                    6f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A5:E5:5C:5D:A8:10:48:DA:1E:8E:77:34:11:AA:53:48:E6:3A:AB
            X509v3 Authority Key Identifier:
                keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a5:ce:f5:5e:3f:b8:a4:f9:08:f3:2f:4d:80:34:8f:34:0b:
         e2:6a:96:07:e1:4d:6c:c5:71:be:14:99:7e:5c:d4:6a:70:91:
         77:27:f5:e0:97:64:68:84:e3:50:05:64:ac:38:07:99:47:eb:
         2a:2e:d8:58:60:ee:a8:01:12:4f:10:84:5d:1f:c8:67:39:c9:
         12:f5:70:b3:53:ea:74:0b:33:37:1d:a7:59:cf:97:35:b7:ae:
         d3:6c:da:c7:d5:c5:a3:cf:6d:83:af:01:30:ad:53:90:27:fd:
         33:e7:d3:0f:66:6d:17:89:77:36:10:ee:d7:e3:15:45:e4:3c:
         ce:19:db:42:8b:a5:89:ad:51:e2:5f:5f:07:e6:eb:b8:47:a3:
         b1:b4:f3:5f:64:73:a8:2f:59:38:39:94:75:33:67:11:c4:05:
         86:ef:35:74:90:53:1e:b2:50:be:f8:b8:73:70:2d:1f:03:96:
         f8:7a:08:78:2d:75:fe:f4:ec:69:5e:95:19:ed:8d:8f:65:df:
         e7:a1:0d:dc:69:29:79:33:21:18:44:64:d5:2c:78:32:77:10:
         7a:ed:1b:a0:de:8b:c5:c5:3b:5e:e3:15:4a:87:69:03:5d:0e:
         1a:89:a9:e5:75:81:b7:02:56:42:51:e9:41:f1:89:0f:1b:66:
         44:07:10:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:08 2025 by rpki-client