Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
File:                     dmAUOBTDTSksdavNtF-BgZU07cE.mft (raw, json)
Hash identifier:          fw+ESRHgAjQNi5jpA8NaKKcwBe9ek9jLZF9pofNWOo4=
Subject key identifier:   F9:06:86:E6:58:0F:16:66:79:C8:CE:9D:EF:D5:D5:CE:64:C8:58:F6
Authority key identifier: 76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1
Certificate issuer:       /CN=7660143814c34d292c75abcdb45f81819534edc1
Certificate serial:       0194BBCED736AC9E31A83850E6D052463BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 10:01:22 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:22 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:22 +0000
Files and hashes:         1: dmAUOBTDTSksdavNtF-BgZU07cE.crl (hash: ZJZKFBNiwS19+2PdZaNB4fgAj6nVUoOegbB8hD6tqZI=)
                          2: zAtYgiSv3lzLdQ7BBPQ53TQsCu4.roa (hash: oWvGPGIfuR7zXnkTrpVSOOMAOW1y+zKMrxGu/T9zook=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:d7:36:ac:9e:31:a8:38:50:e6:d0:52:46:3b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7660143814c34d292c75abcdb45f81819534edc1
        Validity
            Not Before: Jan 31 10:01:22 2025 GMT
            Not After : Feb  1 10:01:22 2025 GMT
        Subject: CN=f90686e6580f166679c8ce9defd5d5ce64c858f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:de:51:6b:ef:df:53:02:c3:66:fe:7e:85:33:
                    71:8b:65:c5:00:c6:90:02:f0:50:a8:02:59:56:31:
                    97:e0:5d:5f:0d:24:70:21:95:ed:20:4c:e1:c1:2f:
                    b2:b3:b9:e1:c5:ca:a1:de:a5:59:ed:4c:1e:b9:a9:
                    a8:52:37:65:95:93:6c:75:f1:19:bd:90:6c:a7:c8:
                    aa:4f:3d:9f:e2:17:41:4b:8a:62:55:57:f1:a2:ae:
                    cf:e3:19:4b:40:7d:1d:1a:dd:3d:68:11:98:a4:ac:
                    a1:ee:95:4f:2e:35:02:30:66:91:eb:c7:95:76:aa:
                    93:83:1a:a0:e3:09:a2:b8:d0:02:dc:ed:0b:e3:c2:
                    89:71:0f:b0:9d:65:04:c2:be:23:d3:57:8f:9d:0d:
                    78:31:e8:4f:78:15:a4:2c:c4:64:1e:ab:0f:0e:55:
                    35:5a:40:4c:9d:a9:03:c9:c5:5e:b7:21:75:e9:9f:
                    f2:9a:68:25:d0:9f:5f:c3:32:fd:24:68:b9:95:54:
                    8f:39:44:7d:70:5d:d3:f2:52:71:1f:af:1a:b7:c8:
                    70:c3:cd:fd:07:e2:1b:57:14:1b:e2:f8:bd:fc:c6:
                    7b:e6:0b:d6:e6:54:55:a3:20:15:e8:d0:d0:17:dd:
                    7e:db:99:5d:4e:27:f8:17:5f:56:56:f3:da:8f:2d:
                    e5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:06:86:E6:58:0F:16:66:79:C8:CE:9D:EF:D5:D5:CE:64:C8:58:F6
            X509v3 Authority Key Identifier:
                keyid:76:60:14:38:14:C3:4D:29:2C:75:AB:CD:B4:5F:81:81:95:34:ED:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmAUOBTDTSksdavNtF-BgZU07cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4bfdc5-08e5-49bc-8b23-4f6c351ca35a/1/dmAUOBTDTSksdavNtF-BgZU07cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:02:f8:ca:70:c8:76:45:8d:8d:32:7f:0e:1e:4e:bc:10:95:
         4a:9b:65:29:03:44:0c:7f:48:fe:fb:22:27:d4:9e:81:58:f1:
         ba:a5:fe:d4:82:a2:f2:81:b5:c8:e1:24:62:48:c5:31:fc:42:
         51:98:96:79:2d:b5:49:f6:76:c9:34:f3:dd:ff:ec:63:fa:39:
         99:d0:71:a2:f9:4e:ea:e8:d2:e6:61:82:c1:84:00:02:d2:50:
         15:a6:e8:70:b4:db:ed:a6:98:da:f5:7b:01:b3:6f:f9:ce:b0:
         3e:03:20:c7:d8:47:1f:69:f7:07:99:62:02:92:ef:96:fc:aa:
         f1:85:3b:2c:19:d8:6b:e4:3b:ce:d8:29:5a:00:1f:3a:ff:d9:
         fd:c8:24:a6:4d:d5:bc:45:cb:42:6d:68:e5:25:a2:10:58:13:
         67:a2:2b:1e:1c:f9:82:d8:c0:39:40:4a:ae:36:8b:65:59:6f:
         2a:e1:2c:77:f9:97:26:a7:2b:05:52:86:51:cd:88:f6:80:aa:
         c4:de:d2:49:f4:58:4e:bd:0b:d3:e7:1f:62:96:d7:db:fa:d0:
         c7:76:27:ee:2d:66:69:c8:c4:91:80:51:db:eb:c6:e0:99:6b:
         ad:a1:a9:ec:9d:88:44:66:29:e7:c9:8a:ed:5e:64:40:52:b1:
         39:c6:1e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:02 2025 by rpki-client