Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
File:                     ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft (raw, json)
Hash identifier:          QAYJI4CrFCCFOYwZBaWpagjAROTnVxxVm2NaXyDu0WM=
Subject key identifier:   CA:82:7D:37:83:21:87:C8:01:A4:DA:6B:79:C9:CF:43:12:39:08:1F
Authority key identifier: A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF
Certificate issuer:       /CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
Certificate serial:       0194BBCDDEB1C749AADEDB87B79F411E7B44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
Manifest number:          095C
Signing time:             Fri 31 Jan 2025 10:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:18 +0000
Files and hashes:         1: FyzxwbgLSadTJLpy9TRdd9F-gGk.roa (hash: iyPnEDozqJhAVhpqbdklx7ETcR+WTKfp9SYU0Q+jnpE=)
                          2: ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl (hash: hfGgHlY7ugSFUjCrfoy6fyABPnjOtPMyGREaR4zx904=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:de:b1:c7:49:aa:de:db:87:b7:9f:41:1e:7b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
        Validity
            Not Before: Jan 31 10:00:18 2025 GMT
            Not After : Feb  1 10:00:18 2025 GMT
        Subject: CN=ca827d37832187c801a4da6b79c9cf431239081f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:0c:0c:f5:c8:6f:c9:36:fe:47:d5:8f:2c:
                    20:90:36:98:c7:9f:da:ad:7e:0c:0b:bf:81:8c:a7:
                    8d:eb:47:8a:f6:ad:7c:b4:4c:df:41:03:2f:7a:a4:
                    45:bd:ca:b0:33:14:f9:aa:35:b6:84:5c:24:26:3e:
                    b0:c3:5c:dd:0d:fd:f5:f1:09:16:72:64:c6:f0:18:
                    fd:1b:67:f6:51:ea:a7:34:37:c2:b2:f2:77:03:08:
                    7e:9d:4a:a4:6b:17:a3:30:8d:36:3b:88:be:db:d3:
                    b2:1e:3b:98:4a:61:dd:93:18:e4:e7:67:09:85:aa:
                    12:bb:c2:27:f1:de:07:be:3a:1c:b6:07:10:73:83:
                    cd:ed:24:b0:d4:32:ac:31:7d:62:d4:b0:7f:9c:c6:
                    a8:9f:5f:44:19:e5:dd:09:62:78:23:e8:5c:49:a8:
                    93:57:3e:a6:d1:55:47:b6:bd:c0:d4:6a:ed:00:6a:
                    3f:f9:9d:dd:84:00:1f:6f:0c:27:f2:92:a8:28:ac:
                    f7:ff:2f:a5:f0:cc:5b:a6:3b:82:7a:b9:93:91:0d:
                    3d:6c:de:e3:50:e9:a0:94:7a:dd:30:61:25:7b:ae:
                    10:84:a2:62:3a:8d:a4:67:79:6c:08:36:27:83:49:
                    96:5b:24:6f:bf:9f:ed:aa:5f:44:6c:b1:c0:3c:9c:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:82:7D:37:83:21:87:C8:01:A4:DA:6B:79:C9:CF:43:12:39:08:1F
            X509v3 Authority Key Identifier:
                keyid:A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0d:1a:fe:ae:d2:f6:68:d3:eb:89:a0:a2:43:88:68:17:64:
         3a:12:b7:43:82:51:65:5c:93:2f:93:2d:bf:ab:56:e8:6d:bd:
         18:80:86:b0:4a:d7:a2:52:05:37:af:90:9d:dc:5b:93:58:b1:
         e6:6a:9f:01:51:54:08:4f:ed:74:c1:81:6f:13:b0:60:db:1b:
         e7:9b:94:66:56:47:53:a3:09:ea:e1:cc:db:a8:83:3b:66:01:
         ac:25:da:16:ee:ab:fd:ba:11:92:5e:e8:43:ab:cf:5c:c9:b5:
         54:1c:e4:68:e9:d9:3f:82:6c:25:78:a5:df:b1:57:d8:23:b4:
         24:58:a5:d7:db:78:f5:5a:1c:45:14:a7:c9:82:93:13:08:93:
         4b:84:48:92:ee:e7:1a:29:c2:dd:83:6c:d3:72:a7:e4:93:01:
         ae:82:7f:98:7f:29:0b:9a:3e:85:6b:bc:5a:a8:60:ec:17:04:
         fe:0d:73:05:4d:bf:58:2e:f4:da:b2:46:b3:03:52:75:23:8f:
         2d:2f:3d:39:85:53:59:75:03:c2:7a:80:85:08:72:fd:ae:27:
         64:db:88:7b:f6:57:fd:2a:66:38:02:b8:1f:76:e3:d2:4d:41:
         2d:19:cb:fb:96:eb:a6:ab:4b:0b:77:d9:2d:e3:e2:0d:0b:b6:
         4c:c4:53:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:24 2025 by rpki-client