Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
File:                     RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft (raw, json)
Hash identifier:          YC/y29JFtzoVAC88jjfLvBJqcoh0wzlPeUsYHNsLYBs=
Subject key identifier:   A3:A0:BB:97:6F:E2:C0:73:21:82:5F:E0:61:E3:25:D0:CC:73:00:6A
Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
Certificate issuer:       /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Certificate serial:       0194BC72CE9DE6B40A39B6283C980614DEFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
Manifest number:          10C2
Signing time:             Fri 31 Jan 2025 13:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:27 +0000
Files and hashes:         1: RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl (hash: QBGEgkEUJJrKABoOWF3zzKlBckZ1zS0JTUTLOb2U8XE=)
                          2: Y5Fkdf8lCYdQD9ZGIAjVuUbledE.roa (hash: JnnOlLV8xwOOoN+r0LJHTPSQEB+QaVe9fn2jfA8Y6mA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:ce:9d:e6:b4:0a:39:b6:28:3c:98:06:14:de:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
        Validity
            Not Before: Jan 31 13:00:27 2025 GMT
            Not After : Feb  1 13:00:27 2025 GMT
        Subject: CN=a3a0bb976fe2c07321825fe061e325d0cc73006a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:2d:b9:17:f2:84:2e:e0:b8:a9:23:7e:2c:
                    a6:46:60:96:aa:29:7a:23:45:5e:96:fc:6f:46:3f:
                    41:44:2d:05:35:b3:75:e4:87:1a:79:07:0e:28:86:
                    e2:e4:dc:ad:1f:ae:fc:fa:b4:49:96:bf:39:71:06:
                    b1:44:b4:72:b1:35:85:f3:28:b7:e6:6f:e8:97:f2:
                    d3:8a:37:56:ab:fa:8e:0b:b4:5d:00:c4:3a:81:fd:
                    65:b5:c3:e3:66:75:22:8b:55:89:a8:38:e2:07:60:
                    28:f6:b4:ed:44:ad:a6:a6:75:fb:db:f0:db:33:0d:
                    27:7d:65:06:86:b4:ce:4b:fc:7c:6b:b9:7a:11:4f:
                    cb:d4:27:7f:a0:a0:7d:0e:de:32:f5:fc:de:1c:06:
                    e1:22:e3:f8:50:a5:f5:ce:9f:68:50:30:a4:56:fe:
                    e2:57:b1:ab:4a:50:02:ca:1e:ac:ec:b2:84:af:32:
                    b6:b4:c0:f3:f9:05:da:35:f1:29:2c:b7:ec:76:1e:
                    9e:10:5e:3e:7c:00:f6:41:61:43:f4:f1:96:7a:44:
                    d2:f2:29:db:ad:6e:6e:bc:ff:2f:85:40:c0:22:b7:
                    86:3e:aa:e4:18:e3:58:88:36:d1:a7:d8:88:6f:06:
                    ae:70:4c:ef:f1:f9:06:a3:4e:e4:de:ad:2d:40:19:
                    f2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A0:BB:97:6F:E2:C0:73:21:82:5F:E0:61:E3:25:D0:CC:73:00:6A
            X509v3 Authority Key Identifier:
                keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:4a:c9:9d:97:24:16:66:a0:f7:e5:a6:40:ce:82:18:35:87:
         9a:ca:48:ee:e1:31:9c:17:c4:5e:1d:4e:39:7e:83:ba:9c:eb:
         e6:5a:39:b4:44:d0:ce:e6:b6:0b:be:70:d8:28:7c:2b:49:af:
         32:11:32:73:ae:2f:b9:93:2e:fd:1c:85:c0:b3:4a:63:d1:08:
         c7:65:2a:f3:37:d1:6f:b5:23:35:c3:ca:68:f3:13:ab:17:57:
         d7:da:c0:06:ae:62:e0:b5:23:61:22:ee:04:3b:9c:8f:af:d6:
         f8:61:7f:9d:5b:da:43:cd:d4:c3:f2:b9:e3:67:81:db:48:6f:
         a2:ad:b2:e4:e7:7e:f2:d9:ab:d7:f3:74:7a:cd:ca:31:19:b4:
         d8:d2:72:af:fc:f6:b2:f8:50:7b:69:8b:7e:52:56:d2:41:64:
         ac:1b:09:1d:9d:50:54:ab:a2:c3:10:fb:7f:a0:e4:68:38:4e:
         98:e4:66:0d:fd:1c:64:78:43:94:49:58:b9:38:4f:ec:03:71:
         1d:e4:5a:9d:db:fb:59:77:20:ae:e0:20:10:fa:f0:c5:75:64:
         db:93:8b:d2:0f:1a:af:64:2b:36:39:6f:19:87:ab:6a:ec:79:
         57:2b:76:fa:4d:ba:17:8f:28:58:2b:12:4d:95:97:6b:64:23:
         63:32:9a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:38 2025 by rpki-client