Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft
File:                     kiluMEh7qUY-S2rcgat9pkfDn-c.mft (raw, json)
Hash identifier:          7OjGFyodpoGsbdwFbsTD3ztGSxog6SLa/IoMj5FIBzA=
Subject key identifier:   02:A0:2D:C4:09:21:B3:CA:8E:64:89:B9:1C:AE:D5:6F:89:F8:2B:AD
Authority key identifier: 92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7
Certificate issuer:       /CN=92296e30487ba9463e4b6adc81ab7da647c39fe7
Certificate serial:       0194BC72D474612BC9BC1950190D0DEE6D61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 13:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:29 +0000
Files and hashes:         1: i-OzQF2bcpPJxDcOX5kIL87LKyE.roa (hash: y62UPCmvVteCyYBr7OynuTmwVuaAEnPLTcqTccWvdJo=)
                          2: kiluMEh7qUY-S2rcgat9pkfDn-c.crl (hash: ZV3PrWNS7LCoPzQIt+zAEBl/0ljiW0CtFXhF2g07kqA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:d4:74:61:2b:c9:bc:19:50:19:0d:0d:ee:6d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92296e30487ba9463e4b6adc81ab7da647c39fe7
        Validity
            Not Before: Jan 31 13:00:29 2025 GMT
            Not After : Feb  1 13:00:29 2025 GMT
        Subject: CN=02a02dc40921b3ca8e6489b91caed56f89f82bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:52:62:5c:82:99:db:f1:d4:53:55:63:30:
                    1a:e1:57:da:78:a6:d3:5f:54:c9:86:c3:1d:0d:91:
                    b1:08:4a:1a:87:eb:e0:be:8b:30:96:95:50:8b:94:
                    21:6b:ad:57:c3:34:9c:79:f5:e0:58:bc:6f:72:b1:
                    83:21:95:89:47:d3:df:06:d8:60:66:ff:6d:ff:77:
                    5d:29:86:af:ce:ab:a8:3e:5d:da:04:aa:13:e8:d9:
                    dc:ef:a7:20:13:da:85:24:c1:1c:9d:58:45:35:a2:
                    9a:1e:1a:a3:da:58:94:b5:ba:12:6e:79:00:4b:a5:
                    3a:81:08:c1:e5:4d:34:a6:31:32:89:60:28:7a:af:
                    27:c8:63:2f:7d:52:72:ea:51:6d:76:92:8c:85:41:
                    39:74:c6:3e:41:1f:3e:09:40:ab:a8:1b:00:4c:8f:
                    69:da:38:51:80:ba:95:37:62:73:e1:3f:05:1d:aa:
                    2c:8f:ea:4b:b8:76:58:6a:8d:c2:4e:8d:36:61:2f:
                    60:ac:37:85:a2:30:03:b7:f9:69:89:04:14:77:ce:
                    16:7b:ab:51:6a:a9:90:21:99:55:0e:88:bf:f9:16:
                    93:36:cc:c3:d4:fa:f4:c0:4e:1c:cd:cd:70:dd:d5:
                    7b:04:83:7d:df:ce:99:f8:1a:08:d5:02:52:40:3c:
                    13:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A0:2D:C4:09:21:B3:CA:8E:64:89:B9:1C:AE:D5:6F:89:F8:2B:AD
            X509v3 Authority Key Identifier:
                keyid:92:29:6E:30:48:7B:A9:46:3E:4B:6A:DC:81:AB:7D:A6:47:C3:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiluMEh7qUY-S2rcgat9pkfDn-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3bb178-b336-489c-9e8d-0d1164daa1e4/1/kiluMEh7qUY-S2rcgat9pkfDn-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:22:4c:20:8e:f0:26:38:7b:1e:4b:c7:d0:45:9f:52:55:43:
         12:98:67:37:99:22:3d:33:81:1f:fc:eb:51:c4:bf:83:55:ce:
         0f:f2:74:7b:fb:a2:e5:2b:70:99:72:ba:cc:0c:29:66:1b:2c:
         2c:23:5a:1f:f1:c3:02:56:82:d2:b3:c0:7a:f1:3f:0e:4b:39:
         39:d9:23:02:48:ca:34:b5:69:5a:70:2a:bb:8b:b1:01:99:67:
         07:7c:80:89:6a:02:2c:c5:8e:c6:85:11:37:97:63:09:18:a3:
         f1:45:41:04:ee:57:53:68:67:13:15:9d:7d:82:82:d0:0a:fd:
         a2:8c:52:4a:fb:ef:89:1c:a0:1b:6f:0e:42:28:40:8a:49:42:
         d7:c6:80:aa:ec:81:50:1a:b4:9b:09:59:13:e2:50:53:3d:0f:
         78:21:51:26:5c:e7:1a:35:39:60:ff:49:3d:53:59:c0:b1:15:
         63:31:6e:32:5f:a0:54:1c:e2:39:b8:e7:8b:49:ff:9a:0b:25:
         40:a1:45:f6:0a:1b:0a:e2:50:e1:a7:23:49:bd:49:fd:a7:0b:
         ea:11:55:64:8d:e2:cb:11:ce:28:74:e0:f7:53:82:46:63:27:
         9e:23:b2:3a:6f:2f:16:d2:42:fd:49:bc:db:55:f1:be:73:04:
         42:12:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:37 2025 by rpki-client