Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
File:                     IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft (raw, json)
Hash identifier:          UcAtzsUWRzXbZ8vqcruJc87k+dmozMRX2en3EqCkH20=
Subject key identifier:   BA:DD:27:C9:D1:C6:B5:26:60:8A:BF:71:03:DB:71:F2:D4:BD:6D:00
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Certificate issuer:       /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial:       0194BC3C67B2EC3F24D9C4EE658C2FBB0CD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft
Manifest number:          1435
Signing time:             Fri 31 Jan 2025 12:01:02 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:02 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:02 +0000
Files and hashes:         1: GJD8bfj7CDyDTZI2kUpgDK-LxFE.roa (hash: PT10MFBUB5fp5Yrzzf9K0jem6hIintZDoPzR+wZ8gys=)
                          2: IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl (hash: Dksu28K42H6O6SMm4/c6jRIdicmnGP5K7foN41InCyc=)
                          3: V7WmFU14m96odb0vJ_cBmWZw2cs.roa (hash: g1WGH66JpNY1RGeN31ErEvWouzTCVBle7InxeJwxaqk=)
                          4: eONOPQ5n9JaZY7K4E7eT4n3N7wU.roa (hash: ZCm89d0bFZWMMw8HJ3JqNzZcAFRBcFRa0dAA/NZScrg=)
                          5: n_McsRwMAppe2QEjAWvImC1dtto.roa (hash: 4gg/YZ3I+XdE5pvPvdQgTIHFrAIC/xo67M5TPSaWEso=)
                          6: uNRCg8RCGt-29v-27BZf_7lsI44.roa (hash: m/0/iSBb82vllm7VEgSPbCCwHT8ih3iEdCYjt2pJKGw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:67:b2:ec:3f:24:d9:c4:ee:65:8c:2f:bb:0c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
        Validity
            Not Before: Jan 31 12:01:02 2025 GMT
            Not After : Feb  1 12:01:02 2025 GMT
        Subject: CN=badd27c9d1c6b526608abf7103db71f2d4bd6d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7d:40:f0:18:b9:0f:50:ca:f9:ee:fd:1f:ee:
                    b5:3a:ad:52:00:26:44:67:80:75:78:a3:00:4a:f0:
                    05:f8:f6:5d:59:42:06:f8:35:a7:d4:33:12:4d:a5:
                    37:81:10:49:23:38:b4:03:4e:42:6c:75:38:4b:a3:
                    b4:79:c6:f7:14:06:ae:9e:7c:df:51:33:fb:34:8a:
                    6d:29:bf:07:0d:87:3f:d6:a0:a5:18:c0:49:ba:0e:
                    39:70:32:fa:f4:aa:f2:26:7a:7e:33:c0:d9:1e:66:
                    f3:9b:f9:4c:91:a0:bd:3b:42:88:fa:6b:0d:ae:9f:
                    d2:e4:83:72:62:f9:8a:84:99:f6:3c:02:6a:e0:ff:
                    65:e3:90:7f:bc:8a:70:5f:b2:01:dc:6d:1f:fb:a7:
                    98:5b:ea:98:61:dc:e7:ad:b3:81:eb:df:73:09:a0:
                    fb:ab:7a:68:c7:93:55:cf:a0:e5:13:7e:12:c8:60:
                    92:98:e2:86:95:27:78:a2:ca:8e:95:ef:14:7e:92:
                    5d:f4:e4:63:44:a6:09:36:9f:e9:c3:77:79:46:29:
                    45:df:1e:5a:b6:20:57:9e:d2:e6:d6:72:99:80:2c:
                    a6:21:74:26:48:03:f8:b8:ef:c9:c8:6c:ab:1b:80:
                    b2:4f:1e:ba:9c:86:cb:87:8e:80:b0:72:75:3e:37:
                    36:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DD:27:C9:D1:C6:B5:26:60:8A:BF:71:03:DB:71:F2:D4:BD:6D:00
            X509v3 Authority Key Identifier:
                keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:32:d4:0a:1c:00:9a:7c:a7:7f:3e:1c:0a:67:15:a1:5a:25:
         72:de:8b:1b:66:1f:d0:1c:d8:35:51:61:12:f4:fb:0e:01:9c:
         af:ec:23:80:03:96:bc:13:e4:5b:34:19:4c:cd:50:3a:37:07:
         00:d5:55:82:0f:cb:fb:b5:43:b5:e9:0a:5a:98:7f:0f:61:c8:
         83:ab:ad:61:8a:7d:76:88:b3:c4:d8:14:c1:cc:27:14:32:3d:
         56:1e:73:42:68:d7:f0:9f:3b:fe:21:46:d2:dc:df:5a:33:fa:
         59:04:4f:b1:5c:7e:8e:30:a0:d2:78:3d:13:f5:8a:57:77:73:
         9c:ef:8c:79:f1:1a:c0:8a:c9:4e:a2:05:ca:00:e2:79:ed:81:
         8e:ea:0a:07:0c:1e:6e:27:99:9a:07:20:f9:c4:53:b5:53:5d:
         91:64:f1:db:d5:60:90:12:00:22:5e:36:f5:81:76:56:97:ff:
         9b:a5:d6:67:83:dc:f8:66:4b:09:83:91:ed:ae:74:b0:53:a4:
         10:80:e3:d3:40:88:05:e0:c5:99:41:ff:3b:39:ba:a1:26:61:
         b9:4f:11:37:ff:b9:93:93:c3:a4:6a:05:2a:06:60:66:c5:cc:
         01:bd:a7:a4:82:b5:b3:47:e9:c5:9d:bb:f1:73:b4:3c:18:84:
         51:3d:ec:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:11 2025 by rpki-client