Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File:                     2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier:          inoShFoCu+mtZ9JcaCWrh51lm77raJhYXM64z+lf+qw=
Subject key identifier:   0B:BC:16:A4:F4:1A:2D:95:F4:6F:6C:37:B5:7C:1F:C3:34:0D:A3:AB
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer:       /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial:       0194BCE0C1F86D2DCC1686A0A994722FEE13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 15:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:33 +0000
Files and hashes:         1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: e2/1RYU0AiqNlm+zM4ZeQqQYaLRRmWRQSsdgdfN59H8=)
                          2: gsCygs_SprevwXUwS8ZnM-EYuKU.roa (hash: l1XeBh5SOrL7OGe08dB0VGh4WiJBpNY8AdAQ14ebdBA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:c1:f8:6d:2d:cc:16:86:a0:a9:94:72:2f:ee:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
        Validity
            Not Before: Jan 31 15:00:33 2025 GMT
            Not After : Feb  1 15:00:33 2025 GMT
        Subject: CN=0bbc16a4f41a2d95f46f6c37b57c1fc3340da3ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:7c:e4:ac:c3:ee:b3:1d:fa:df:88:86:5e:
                    b5:47:d6:55:a5:7d:8c:69:51:14:db:84:e0:94:8d:
                    81:bb:29:cd:c1:b9:79:c2:d4:de:26:55:6a:b2:ad:
                    b4:a7:27:ec:cb:a5:f1:72:a3:2c:db:3a:d9:1f:b5:
                    94:2a:34:56:c6:69:32:ee:75:79:46:68:66:e2:0b:
                    3b:91:8a:97:1e:61:20:f1:09:fa:5e:08:b1:e7:ee:
                    0f:99:fe:8c:3d:6c:22:ca:cc:d1:b8:0f:1d:5e:da:
                    0c:27:5c:f6:fe:6a:ca:49:fd:ed:3f:57:74:d7:f9:
                    be:16:44:0a:a7:85:3f:41:71:c0:62:e3:af:d4:f1:
                    b8:57:0c:a3:46:f5:83:fa:a4:f5:37:f3:8a:10:58:
                    7f:f9:f9:05:00:10:8e:06:2e:ab:96:fc:c3:7d:fe:
                    33:03:dc:63:f8:f6:6c:39:76:82:d6:28:4f:70:d7:
                    42:d4:9e:fa:29:c0:f2:f1:f8:e8:2c:43:74:a7:5a:
                    27:5e:5f:d6:6e:8f:11:4b:e9:a8:0e:34:f0:63:5f:
                    f2:d5:d3:c1:86:80:b5:05:d3:95:e4:c0:c2:44:5a:
                    d6:00:83:0b:76:55:92:cc:c4:a4:db:1b:29:b6:2a:
                    5b:d7:92:35:07:ce:97:b8:61:fc:a5:ee:24:ac:24:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BC:16:A4:F4:1A:2D:95:F4:6F:6C:37:B5:7C:1F:C3:34:0D:A3:AB
            X509v3 Authority Key Identifier:
                keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b2:00:fc:fb:9b:18:1d:df:a2:3a:4d:dd:f4:2f:37:c1:66:
         30:e4:98:73:45:d4:d3:70:eb:be:c1:56:97:7a:48:1b:87:db:
         7d:96:58:cd:d7:ad:77:8c:fb:c4:c5:3f:66:f4:41:3e:98:37:
         4b:ba:5b:20:5d:24:f4:67:fb:4a:be:5a:1c:c7:bb:5a:59:99:
         67:26:0b:24:9b:ba:07:60:85:2d:2b:c2:8b:43:d9:d5:40:8a:
         cb:ea:5a:7e:7f:c2:30:39:0f:c5:ee:05:c4:9e:d7:4d:fb:f7:
         1b:25:22:22:58:00:b0:28:58:a8:4a:eb:ed:b5:62:fc:b0:b3:
         3d:72:24:33:2e:d6:d1:9d:43:fe:da:c4:13:4d:f4:89:7e:ae:
         6f:c6:ad:0f:0c:3f:cb:68:a8:c4:61:b5:57:db:de:c4:6c:5a:
         e2:78:37:d1:77:e0:4a:9a:02:24:6a:57:87:55:ae:3f:04:ba:
         1e:ea:99:ac:1f:b4:38:68:49:b9:93:04:94:6d:dc:49:1a:9d:
         8a:88:c1:f2:46:df:48:72:9a:84:e4:88:60:06:7f:f0:72:92:
         46:3d:fe:07:37:4d:e8:af:81:f7:af:b5:49:f3:3e:43:d2:e3:
         37:66:a9:34:60:62:a7:68:70:7b:5a:7c:fc:85:46:30:04:e3:
         06:42:d3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:31 2025 by rpki-client