Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
File:                     OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft (raw, json)
Hash identifier:          JoV13MMC7fI6N9wMvCxUbt8BeFRVFb9q8n4QWhLXeEI=
Subject key identifier:   1D:82:05:80:4D:6A:F4:B9:DC:A1:E6:8B:36:97:A1:51:17:82:8C:8F
Authority key identifier: 39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
Certificate issuer:       /CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Certificate serial:       0194BC3C1D3A306B502DB50D4D2D6746C6E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 12:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:43 +0000
Files and hashes:         1: OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl (hash: b9w8idrSlX9JAY1BA3bjNCszc45l1tAui1Ve7JKkU5U=)
                          2: ctA-0p3K0spN-aqa_vSCSuEPIl8.roa (hash: 9zjfwehArRYt152AyBxRUd+hpMMW5KWg3wsX7MAnHPE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:1d:3a:30:6b:50:2d:b5:0d:4d:2d:67:46:c6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
        Validity
            Not Before: Jan 31 12:00:43 2025 GMT
            Not After : Feb  1 12:00:43 2025 GMT
        Subject: CN=1d8205804d6af4b9dca1e68b3697a15117828c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:9b:53:bc:e7:a2:d2:08:5e:09:12:97:de:
                    7b:6b:a4:38:8b:ba:d3:68:4a:9d:03:d5:9c:8c:a4:
                    5f:5d:88:4e:e2:d2:3d:5c:a6:9a:53:90:d9:9e:b6:
                    00:49:6f:99:31:9a:00:e7:db:79:12:b8:ec:29:8c:
                    6c:70:3f:8e:61:9d:24:b9:d3:a8:c9:e9:d3:fc:30:
                    83:f0:39:51:e7:7a:05:4b:72:45:a1:42:b2:20:21:
                    71:00:d9:47:11:5f:8e:8f:25:15:40:dc:6f:5a:43:
                    c3:1b:2f:43:98:d1:93:5f:ed:18:e9:7f:cd:ff:b7:
                    64:d9:24:63:cc:73:e3:15:48:20:07:ca:73:04:12:
                    67:31:07:98:47:4b:f3:f8:6e:f8:49:93:e3:f3:60:
                    dd:8d:95:b3:e1:38:17:48:60:66:e4:f4:83:c5:a5:
                    22:e9:68:62:af:86:ce:40:ea:e5:7a:71:ee:58:2d:
                    9c:3c:e4:3c:cc:49:0a:b4:e9:ee:8a:49:a5:a0:a9:
                    77:40:04:e1:a5:6e:ed:70:6f:de:15:1c:9d:a0:9b:
                    09:e7:cf:c1:37:a9:fa:48:2a:89:c1:20:35:bc:74:
                    d2:21:86:74:21:ef:7c:ea:d5:78:09:b0:a9:c6:64:
                    13:0b:f9:4a:8f:ef:63:4b:68:80:5c:7a:04:af:b0:
                    6f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:82:05:80:4D:6A:F4:B9:DC:A1:E6:8B:36:97:A1:51:17:82:8C:8F
            X509v3 Authority Key Identifier:
                keyid:39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a6:95:65:58:6e:91:39:ab:ca:4b:8a:e4:fb:7b:9b:2a:65:
         3f:a0:3f:be:97:b9:82:c6:b3:aa:f7:69:4f:f8:e0:3a:cc:b0:
         d2:bd:fc:f3:88:29:fb:36:e6:c2:c4:3c:ea:71:a4:8c:e6:a7:
         f4:f5:e7:80:65:f7:39:be:42:28:e5:3b:15:f6:3d:f3:b9:19:
         24:99:6d:d3:70:47:02:0a:5d:13:f1:51:a2:72:8b:11:aa:6b:
         87:ee:34:a4:6f:c3:b2:b9:c6:ea:ba:c0:44:6f:26:c3:53:8c:
         67:ba:23:38:e6:2c:3c:d3:00:56:7b:4b:ae:30:88:13:a0:be:
         4b:2f:5a:e6:c1:1a:7b:83:27:31:95:42:ad:e2:2b:e4:76:25:
         91:9a:6c:23:a0:41:e4:13:34:e7:8d:a3:96:12:a2:7b:91:98:
         d5:b2:f3:37:0a:07:de:1c:f8:28:a3:ed:82:6b:d5:c5:34:45:
         55:fa:5b:ce:2e:7d:f3:3d:1b:0b:46:97:84:60:92:12:5d:bb:
         ec:e7:7e:52:03:ca:fc:1a:7b:0c:0f:7f:85:1a:7c:96:1a:7d:
         5c:b1:8f:8c:2c:52:d6:1b:da:5b:8d:9d:d6:de:66:49:51:45:
         f0:30:f9:15:f4:1f:27:fd:05:f3:03:5a:6d:e6:a3:58:e3:7d:
         0c:8c:e4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:56 2025 by rpki-client