Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
File:                     mIoB4lJuOVBBksMCcvOAs5rj8qY.mft (raw, json)
Hash identifier:          mWALeeDhSN5NkmSh0/JvEpZv6bpXAGLZnVsr0HzjVBc=
Subject key identifier:   E2:10:13:8F:28:FC:2F:9A:A8:8C:92:1D:0E:A6:BA:63:1D:25:77:F2
Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Certificate issuer:       /CN=988a01e2526e39504192c30272f380b39ae3f2a6
Certificate serial:       0194BC3BD94692206DDFA8B91267AE37ED30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
Manifest number:          0405
Signing time:             Fri 31 Jan 2025 12:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:26 +0000
Files and hashes:         1: 6XCTUSOWxa7WsKwz6cNlndXeK8c.roa (hash: xRjajkiMCGOYK8K3wQjBK4JDfm1qhykgYmXpSadPeMg=)
                          2: mIoB4lJuOVBBksMCcvOAs5rj8qY.crl (hash: FYvM92NMCV1NvkgwcYbtIh2IJVIQhR4a/OKfLkCKjE0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:d9:46:92:20:6d:df:a8:b9:12:67:ae:37:ed:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6
        Validity
            Not Before: Jan 31 12:00:26 2025 GMT
            Not After : Feb  1 12:00:26 2025 GMT
        Subject: CN=e210138f28fc2f9aa88c921d0ea6ba631d2577f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:57:3e:aa:5b:fa:79:82:0b:b8:4a:82:27:
                    ea:22:b5:61:33:f3:61:3c:4b:b5:19:54:59:1c:21:
                    6a:11:38:1a:6f:31:ae:92:bd:aa:26:b9:fd:86:f4:
                    38:c2:8c:30:b4:2f:a5:35:fa:a1:6a:81:4f:66:aa:
                    7e:25:42:23:e9:d9:a8:2b:d5:4d:a2:51:f2:ec:36:
                    ba:47:72:51:8e:63:d2:2b:a9:a9:f5:73:5c:06:4f:
                    86:b4:aa:5a:31:12:93:0e:3a:3f:6a:4d:5c:be:05:
                    c7:0f:fa:ec:32:c4:ce:6b:40:6e:26:8a:f6:fd:66:
                    c0:ad:9c:77:95:c0:4b:c4:bc:1e:16:ef:e8:42:91:
                    f9:ff:72:f1:21:9a:9d:77:d9:f0:44:3e:fa:5a:c6:
                    9a:7e:b0:74:8c:66:24:ec:42:9e:d9:8d:26:f4:e8:
                    ac:a0:b8:81:2c:c8:4c:0e:ae:08:a0:e3:8e:53:72:
                    b8:55:61:4c:ef:83:31:5d:6e:7d:93:ab:2a:4a:2c:
                    df:e4:77:02:c3:06:8a:a9:e4:3b:19:46:f3:77:98:
                    0c:eb:f2:01:79:6e:14:4c:e0:00:ca:4b:6b:a9:9b:
                    be:e7:b4:b5:70:8d:08:eb:10:d5:00:48:7f:35:80:
                    9e:a9:88:21:53:d8:54:3b:aa:55:da:f0:37:91:8c:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:10:13:8F:28:FC:2F:9A:A8:8C:92:1D:0E:A6:BA:63:1D:25:77:F2
            X509v3 Authority Key Identifier:
                keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:39:94:a0:6f:2a:1c:ef:e4:b3:e6:50:ab:ce:dd:78:50:c6:
         39:bd:4a:5f:63:a7:58:b1:58:58:10:9c:01:95:78:2c:10:b2:
         1f:58:8d:d9:ac:a3:71:96:b7:d6:2c:a4:75:4a:1f:c6:e7:fe:
         12:09:3c:fc:a4:58:63:d9:31:e6:f2:1b:19:5d:e9:c0:84:c8:
         9a:5d:a1:ff:cb:b1:f1:70:12:2f:c5:03:8c:3b:31:11:1a:c1:
         93:ee:ac:f7:fe:d3:79:10:05:bb:ce:c7:1e:e6:5a:de:bf:59:
         29:0d:9f:22:a2:8f:d2:30:bc:60:f1:41:42:0b:d0:c5:12:8a:
         7f:c0:4e:82:b0:1e:d3:63:3c:9a:c5:80:d3:8b:db:e7:3b:6d:
         34:51:a6:fa:16:b7:c1:77:93:4a:0e:03:1a:82:cb:b2:53:e1:
         c9:d8:02:0d:3b:e5:60:a9:d0:fa:ea:28:e0:75:c1:05:b6:61:
         ef:2b:d6:46:99:27:7b:af:c5:1c:1f:0c:1b:61:69:0d:7a:e1:
         6c:c3:48:b0:d7:f3:f5:d8:c2:20:b3:3b:ac:2b:07:7f:83:b8:
         56:dd:d8:4f:a5:a9:85:0b:e2:d5:c2:b7:d1:de:c5:42:e7:56:
         a4:67:c5:fc:bb:65:cf:75:d5:38:58:6a:9f:5b:f9:ac:10:79:
         8a:27:11:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:47 2025 by rpki-client