Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File:                     tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier:          VwPlXTZ7Bnb1bG2K2AXNmTnFpvly6r+qc8uKaHACAnA=
Subject key identifier:   E4:0D:C2:BF:F6:13:01:21:1B:8D:87:EB:2D:D3:9E:CB:A8:47:39:3A
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer:       /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial:       0194BBCE45F8D6BFB8B21060D6FD7EC5AF1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number:          0501
Signing time:             Fri 31 Jan 2025 10:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:45 +0000
Files and hashes:         1: G4FFwIyiIU29W95QZk9-MWiLljM.roa (hash: iDaSzS67wgh1om9NMNs4mTJZEfMH7AGf6ifeuTsPDRg=)
                          2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: fRG9/K9O8ET8SK8a2O7o6CaQdTeQb8/M0Vo0nRT50cY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:45:f8:d6:bf:b8:b2:10:60:d6:fd:7e:c5:af:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
        Validity
            Not Before: Jan 31 10:00:45 2025 GMT
            Not After : Feb  1 10:00:45 2025 GMT
        Subject: CN=e40dc2bff61301211b8d87eb2dd39ecba847393a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:52:db:b2:25:88:4c:d5:01:c9:00:71:30:73:
                    a4:26:10:88:07:c7:da:5a:96:cd:5e:5e:e9:4d:c1:
                    86:77:e4:43:9e:df:46:d5:19:df:e8:41:24:0b:0c:
                    9f:40:ad:d8:a7:74:6b:a7:91:04:ff:64:53:ae:40:
                    a6:c3:7a:49:6f:be:4d:05:de:df:c7:d5:ba:b2:9c:
                    ba:b8:80:6a:14:a5:c4:23:06:87:f1:09:25:c1:57:
                    56:54:aa:c4:23:a1:16:cd:48:05:7d:b2:c2:a7:9f:
                    51:58:b6:23:2c:e0:f6:ba:e3:b5:af:74:fa:2c:bb:
                    76:7d:63:e5:38:72:65:fb:7c:fc:31:5e:3a:12:3c:
                    a8:48:1f:a3:87:56:c2:81:3e:1c:c1:b2:bf:fa:da:
                    12:c1:47:48:a8:6a:11:9d:3a:4d:1e:38:7c:94:03:
                    15:52:51:3f:48:72:8c:b3:aa:92:dc:08:7c:a2:b7:
                    2e:2d:47:74:8e:aa:42:3d:2c:30:59:d2:62:68:e8:
                    f8:f7:1b:0a:75:36:02:d3:bc:5a:02:9c:60:43:c9:
                    76:84:93:cf:ac:9b:a0:82:af:2a:4f:c8:7d:72:5b:
                    88:ea:fc:8d:b4:f3:ed:55:9d:15:71:d3:77:dd:7f:
                    bc:3f:bd:5a:2c:0b:18:9e:fa:b6:71:f3:79:8b:ca:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0D:C2:BF:F6:13:01:21:1B:8D:87:EB:2D:D3:9E:CB:A8:47:39:3A
            X509v3 Authority Key Identifier:
                keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:34:2e:62:6f:32:63:dd:67:dc:de:bc:8c:a1:f1:98:33:4d:
         ba:d0:8d:b0:19:68:74:03:c1:99:f8:23:79:2e:db:a2:a7:5a:
         b3:34:b0:be:b0:5f:a8:b7:27:28:bc:99:f4:e2:29:02:4b:e0:
         fe:2c:b7:56:a7:0b:87:63:2a:fc:7c:e9:9a:42:ed:9c:2d:41:
         ff:cc:f7:71:88:9d:3e:69:e0:66:ae:cf:2c:77:0f:2e:22:fb:
         e4:bd:31:60:08:60:8a:7d:b3:ab:c6:7e:e0:83:8e:17:2d:38:
         fd:3f:ec:e4:e0:f2:82:b8:0d:dc:dd:48:82:94:4c:3f:8e:14:
         81:81:73:bf:b1:25:b4:da:00:ee:cc:e3:fe:50:c3:fa:9e:4e:
         31:ab:f2:72:b7:db:ed:e3:9c:6e:c3:95:4a:31:8d:3b:ce:a4:
         af:1a:27:70:96:32:2b:80:5a:c9:4d:3a:dc:e4:16:95:79:84:
         c0:01:69:35:4b:60:ce:78:35:b0:d6:d3:f9:cd:6e:cf:dd:44:
         16:72:2d:ae:70:12:37:6e:06:cc:44:c6:63:3a:f5:07:c7:76:
         ed:85:1b:09:5e:f2:f8:fd:1f:49:5e:06:99:c7:a2:46:3b:ce:
         0b:7b:87:7f:1f:d4:6f:86:9e:60:c9:dd:c1:2b:37:03:29:f2:
         6d:8f:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:38:06 2025 by rpki-client