Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
File:                     I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json)
Hash identifier:          Svptv66jGiCtg5c5B4H1/xrtKhTqcyPYoyDCjg1u52s=
Subject key identifier:   E1:22:1F:FA:7F:48:FB:25:0F:7F:76:C7:12:09:F2:EC:6B:09:5E:3B
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Certificate issuer:       /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial:       0194BC04A927BF67CF401467BC573DF93493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
Manifest number:          0A68
Signing time:             Fri 31 Jan 2025 11:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:09 +0000
Files and hashes:         1: 2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa (hash: mGLI3Jd52qgMG50087Vl0ag+Rgi85Yfd8348tK3nJlQ=)
                          2: 9CjEL92KVQbBIKjAH6PWgI9d9kA.roa (hash: CxlINazLO+svbCxijVW6/kRGdkNG420xQ9K3jp5I7bo=)
                          3: 9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa (hash: BhOE66QanPWqjjysyWqBU6hcSToV2kkgkpmWedK9Plo=)
                          4: BKpPZ6YhMA786wWelQvZ2FdIeg0.roa (hash: CY94cVx1ALq/cp1lEiwu3JzO7Vk53LXHozpiwU2ifHA=)
                          5: Gg5xBTPmG5wIfgvjDfofedqUN2I.roa (hash: 44BexOUoVzM2f1vahHLSGVHdqnL6HKMPG3ed5PmM4sw=)
                          6: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: RQ4BNbPaCR73IG1JTSazD0WDhMt9jqlOW232XvTl1nQ=)
                          7: KfWHlYFQnzVI2dPuoiLZqsly00A.roa (hash: hXW7e+AyYxT2PE5t8wRUT3atz/+WaH8gt4XQgdBp/mU=)
                          8: LtctFlc4GRCf3PIlxO5Sz70Upcc.roa (hash: 9oaNZGvrfQP+yRIBwwcg5U7jui8/sOP7Dz6ZLTuPIgM=)
                          9: LxwAd59gPAFiSwQsp6U5bWHTUIA.roa (hash: sV/jv6UM3eB6Fepo8zmoDeIxV8A3Cp94EBt2zbiu7+M=)
                          10: M73NPvrSZwGhIOTA9SbUvHl1x90.roa (hash: ijksxiMRPCxOAqaVav7odzv/IiE5tQUZQM4rRqWGT00=)
                          11: P4Ngmm4fscIJdjrtcZXwEWC6af0.roa (hash: Dgr4uE36WEf5Xw9kH8tw5qMQ+ewLeqeUvdPupgorbKg=)
                          12: gspg21PC-Bi6SGHc2DwZhP3SxPE.roa (hash: za152yl/mt+IWnj6LxRFIHIPMleLO2z2bWoNpUAX6js=)
                          13: nRO271tdrNACduJFYjdOKGtM_VQ.roa (hash: Yv1+Ws39fUXZCiuTu0NkXs09HwF/qzxgRlEF4ICT8SI=)
                          14: xBeaVJYrqyxsJyBEwJgsxIF9If8.roa (hash: DlqRMUr9VXZf6onKCEDA/e64PLwtCRuMp+QIX3GytzU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:a9:27:bf:67:cf:40:14:67:bc:57:3d:f9:34:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
        Validity
            Not Before: Jan 31 11:00:09 2025 GMT
            Not After : Feb  1 11:00:09 2025 GMT
        Subject: CN=e1221ffa7f48fb250f7f76c71209f2ec6b095e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fa:24:1c:b2:17:38:bd:6f:d5:73:d0:21:88:
                    f0:80:62:0b:5d:55:b2:0d:86:64:e2:6c:22:a0:a9:
                    1b:a7:0a:6e:2c:e9:f9:f2:c8:68:4d:d0:b9:68:e7:
                    84:42:4d:05:a4:23:3d:03:f4:cf:ef:85:f0:c1:24:
                    5c:d1:4d:5b:eb:41:46:cf:42:09:e3:e5:aa:ad:88:
                    88:69:c5:a8:1c:96:78:8c:cd:d8:b8:c8:ab:01:e7:
                    79:fb:4e:a0:8b:f7:99:10:27:06:3f:0c:a5:cf:54:
                    78:36:2f:af:ff:05:68:c2:6f:52:1b:ea:0a:c8:de:
                    94:e4:04:c9:ad:a6:ad:c4:2c:18:66:ab:9b:62:f9:
                    fd:75:ad:c7:f7:76:23:eb:22:b8:41:79:3b:ef:9d:
                    94:7a:c7:d0:23:dd:dd:93:5f:9d:c6:4e:68:de:22:
                    9d:f8:2e:bc:d4:2d:da:5e:5a:31:9a:be:1f:a5:fb:
                    a2:95:a4:b1:22:ba:8a:49:57:df:4a:cc:45:44:8f:
                    ab:23:0a:cc:ad:26:d8:2a:ce:d2:ed:c2:f1:bb:11:
                    25:2b:3d:ec:c0:e7:93:95:8a:df:91:da:5b:48:e2:
                    fd:e6:aa:cb:3a:09:f4:29:cf:8b:e6:87:b0:ec:b0:
                    54:a4:23:b9:31:38:5d:91:e6:81:32:47:18:a5:3b:
                    57:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:22:1F:FA:7F:48:FB:25:0F:7F:76:C7:12:09:F2:EC:6B:09:5E:3B
            X509v3 Authority Key Identifier:
                keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c5:96:4a:ae:e4:c3:16:18:ee:be:fa:94:15:d5:1a:2f:4f:
         66:55:85:59:cb:87:c0:07:c7:eb:d6:5e:1f:29:2a:ce:76:b8:
         7f:16:3f:c8:8c:56:71:5a:d3:ff:df:25:a1:6f:26:35:a2:d4:
         8a:a0:05:22:2d:9b:8d:4c:8a:22:19:82:30:1f:2c:bc:52:df:
         e2:98:ce:ee:e5:cf:d2:6f:9b:21:24:38:5d:d9:d4:15:79:9a:
         90:e3:93:94:07:13:61:0b:6d:72:8f:9b:34:d7:98:b6:0a:f3:
         82:0a:c0:a3:e3:e4:b9:df:75:26:4a:c5:ba:0d:d0:6e:fa:19:
         22:16:51:2c:50:78:6f:67:41:c3:65:13:35:4f:9f:63:8a:ab:
         43:53:25:df:7a:d7:12:30:f3:cb:80:ce:2d:c8:7c:dc:6a:e6:
         99:54:51:dd:e4:8c:1c:ec:05:4e:4b:bd:b8:00:de:ea:2a:33:
         1c:f3:cb:49:29:2d:c1:bf:9e:54:af:7c:97:ae:cf:06:06:6a:
         fd:30:b4:d2:54:ac:1f:db:9d:c7:e0:a9:a0:69:3f:63:8a:fb:
         81:a1:8b:6c:8e:b9:55:c8:2f:ca:3b:f6:f6:38:3e:b5:51:0f:
         c4:08:bd:6c:8c:43:4b:c2:24:69:86:81:e7:fc:95:01:2a:32:
         27:22:19:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:17 2025 by rpki-client