Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
File:                     BZT0qba3_YLdby_b85Or6t00f9E.mft (raw, json)
Hash identifier:          iwZtCDZI41NRocIMI2LFoNYkihPzpzN20e45ru8Lbvk=
Subject key identifier:   FB:F2:40:DE:55:0B:06:4E:88:A7:1D:DE:31:3A:4B:AD:BD:69:17:BA
Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
Certificate issuer:       /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Certificate serial:       0194BC051FF3312E0DD989B6B6530D7A137B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 11:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:39 +0000
Files and hashes:         1: BZT0qba3_YLdby_b85Or6t00f9E.crl (hash: 7By76dAUBHl1OKCLmAWLVnQlRgj8TNsrtxVv8vNx6so=)
                          2: Vmwsf00DfqOwuLyDtJ5jOR7xMVY.roa (hash: P2Qrd2w/dVDOjboJIyQokkF6gW9skwfXbb15mFHi7ww=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:1f:f3:31:2e:0d:d9:89:b6:b6:53:0d:7a:13:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
        Validity
            Not Before: Jan 31 11:00:39 2025 GMT
            Not After : Feb  1 11:00:39 2025 GMT
        Subject: CN=fbf240de550b064e88a71dde313a4badbd6917ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a0:6e:89:8d:36:7a:54:8f:cf:2d:6d:ee:08:
                    ae:cb:69:94:f0:1c:1f:81:3c:70:e5:d9:0b:88:a9:
                    5d:63:01:d9:c8:23:3f:19:8f:7d:21:46:18:82:fd:
                    a1:76:ba:48:30:1e:af:a7:3c:bd:66:32:5c:48:7c:
                    73:1c:60:78:ff:fa:df:cc:c7:bf:3b:9c:da:e8:4e:
                    ff:f3:46:32:ec:e2:26:30:fd:c9:d6:ea:cd:3a:cd:
                    02:16:69:6c:da:38:ea:9c:4e:32:78:47:1c:90:25:
                    c3:63:03:80:b2:99:28:10:f5:62:af:01:e0:30:91:
                    2c:d4:06:03:df:3a:9e:69:9f:e5:55:39:96:f4:92:
                    7f:16:a9:a8:5e:4b:0d:36:cd:87:4b:33:3c:cb:40:
                    ff:c2:34:d6:7e:bf:d2:c8:e3:fb:a4:9d:65:b2:80:
                    b7:3d:e3:64:d9:a8:62:27:ca:b6:71:e3:fd:c9:06:
                    a9:63:c7:07:5d:a5:d8:ce:55:5f:c3:f4:bd:a9:c3:
                    77:ea:b9:d5:4a:d8:b0:72:41:3e:e4:3f:3f:26:25:
                    58:27:69:d8:a2:a6:99:51:ed:bd:b6:91:dd:8c:cd:
                    49:f8:0a:72:8e:91:4d:10:2b:e6:f4:23:c1:ec:59:
                    79:03:df:a9:8c:2f:ac:6e:da:1c:86:04:f1:10:a8:
                    f8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F2:40:DE:55:0B:06:4E:88:A7:1D:DE:31:3A:4B:AD:BD:69:17:BA
            X509v3 Authority Key Identifier:
                keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e8:1d:43:3b:56:09:d7:10:1a:f4:ca:a3:f8:db:e4:68:44:
         7d:e9:dd:99:0d:ec:81:4d:e2:fc:55:12:3a:d0:95:68:9b:81:
         74:ee:28:4f:06:14:d1:12:d9:bf:fb:b4:a5:72:9c:92:90:6a:
         91:91:bc:69:46:c2:f1:b1:b7:d4:03:c1:bb:f4:e9:7d:2d:0a:
         e9:60:8f:68:11:54:6b:f1:0f:6c:ae:d1:35:c6:41:1b:a1:a8:
         2a:43:c5:17:29:d3:ec:5d:fa:17:bd:fe:ae:89:d6:a9:a5:cc:
         9b:7d:d1:68:42:8f:c1:a3:34:9f:aa:0d:8e:a0:80:8a:ac:3a:
         dc:09:a1:d5:15:2b:3d:5a:5d:67:ed:ac:17:de:dd:b3:10:81:
         69:8f:14:66:d5:1a:42:d3:ec:c4:6f:03:db:4a:4a:5b:5b:de:
         e9:73:cf:da:41:70:69:76:03:15:a4:4b:24:de:ae:1d:bb:a4:
         96:bd:84:74:b0:f5:c6:91:71:0b:b1:37:6b:93:ec:64:b0:98:
         7c:4a:ca:70:a3:a0:91:f7:9a:a2:09:16:6e:70:e1:f6:d2:31:
         13:56:73:65:bf:18:dc:c9:6e:74:6b:6d:56:f3:4a:01:36:dc:
         72:ee:e0:9e:4d:77:7d:a2:ba:13:29:e8:ce:b9:2a:01:ee:c9:
         f7:15:1c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:31 2025 by rpki-client