Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
File:                     ejvLQKHIyPn3WNzeHCkHk42GhS8.mft (raw, json)
Hash identifier:          rtGdjKQCkSHwg57YiLreeCxwjKfLIl8IdoMB6jptQTg=
Subject key identifier:   05:0A:74:83:C1:14:89:6A:1F:FC:3E:7D:A7:53:B5:E8:13:A8:FF:FF
Authority key identifier: 7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F
Certificate issuer:       /CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
Certificate serial:       0194BCE0F8BB64788B7574C3B467F01FA8C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
Manifest number:          0642
Signing time:             Fri 31 Jan 2025 15:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:47 +0000
Files and hashes:         1: ejvLQKHIyPn3WNzeHCkHk42GhS8.crl (hash: nCtqmrKX6YQwG32TQ84n9RZQ+sJD8VilxpDY7AbX6+A=)
                          2: npO31UQ6MgQb_KXFRuB5cseCGq0.roa (hash: g4JN4BNjztb4rOd5YFRTGak1PKL3E9KOaxMHM6ZlfJ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:f8:bb:64:78:8b:75:74:c3:b4:67:f0:1f:a8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
        Validity
            Not Before: Jan 31 15:00:47 2025 GMT
            Not After : Feb  1 15:00:47 2025 GMT
        Subject: CN=050a7483c114896a1ffc3e7da753b5e813a8ffff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e4:2f:64:5e:28:8b:74:2c:91:33:db:c7:54:
                    df:97:d3:f2:c4:9a:39:4f:6d:2b:5a:cb:13:49:82:
                    e6:cd:a4:05:f4:3e:54:46:e0:93:61:03:2d:19:cd:
                    5b:e5:8c:87:d7:90:07:87:bf:70:19:10:ec:66:5a:
                    50:0f:06:3d:3a:b4:60:c0:b7:18:65:57:e3:51:16:
                    2f:4b:06:2b:cb:7f:d8:b7:0e:04:3a:48:ca:cd:ee:
                    a4:24:61:9d:0f:b7:b1:e1:cf:f9:b5:5a:54:0f:c5:
                    3f:af:e1:85:57:d1:c1:d9:ee:e8:f1:e8:c0:93:97:
                    d4:c9:4d:3b:84:8d:50:2c:59:88:13:c2:8b:29:58:
                    fa:1e:ee:1c:97:c2:32:13:43:99:dc:d4:b1:de:25:
                    93:6f:66:58:fe:e6:8c:33:5d:47:17:8c:05:0c:a0:
                    e3:52:3f:57:f8:c1:04:fd:01:b1:84:9a:a4:f3:d5:
                    cd:6a:c9:04:96:6c:63:62:1c:a0:25:a4:2b:5c:4c:
                    83:b9:52:b9:26:e2:85:8b:b6:ac:0f:83:f9:48:a3:
                    4c:ac:73:80:b3:ce:4a:df:ef:14:3f:ac:3a:60:3c:
                    4c:0a:ec:ce:73:ce:b3:9a:c9:63:a9:13:74:03:a4:
                    e0:c1:5b:52:73:df:c7:69:85:10:fc:be:40:7f:74:
                    2c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0A:74:83:C1:14:89:6A:1F:FC:3E:7D:A7:53:B5:E8:13:A8:FF:FF
            X509v3 Authority Key Identifier:
                keyid:7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cc:ff:8e:05:5e:be:10:06:93:f8:12:f3:7c:38:fb:1b:13:
         7d:e0:1b:15:e7:a2:d2:d7:a5:8b:4a:a5:61:8b:77:2b:eb:49:
         be:b6:85:78:cb:a4:c6:6e:90:8d:d1:36:d4:61:b1:a7:19:a4:
         a4:ef:bb:ca:52:45:61:82:6e:5b:a9:28:d7:84:1e:9a:59:4f:
         4e:6e:f4:c7:4e:f2:b0:d7:3a:04:0b:a1:6f:53:e4:dd:74:0e:
         a0:c7:ea:a4:4f:04:3f:33:22:da:f7:db:c9:94:d4:15:45:8e:
         ee:6a:d4:38:7c:58:47:94:ed:47:e8:99:58:43:32:ed:29:d8:
         17:04:75:43:bf:7e:51:06:b8:04:f8:6d:a0:bd:4d:21:ce:b1:
         93:4c:cb:8e:13:5f:7a:fd:c1:9c:e9:cb:4c:08:9f:c1:0c:9f:
         9f:01:88:84:78:da:1f:b0:12:1d:55:4e:7f:18:d3:23:ff:78:
         64:98:f1:3d:65:01:7d:3a:af:4a:a3:4c:48:25:10:3a:1d:d9:
         f0:1c:cf:89:c5:ee:9c:0b:7e:fc:bf:20:7e:a6:51:92:e6:66:
         02:13:2c:54:70:45:36:27:0b:ba:2e:a1:87:41:87:a4:09:29:
         a4:bf:7f:ef:8c:42:e8:46:5b:9e:12:e5:3d:fd:49:c0:a8:0c:
         13:c9:24:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:16 2025 by rpki-client