Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
File:                     4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft (raw, json)
Hash identifier:          FA19J6b0C5WvmqHU9qTsFvYMi0wQuJa8V5VSbcfDqRI=
Subject key identifier:   F6:A0:50:6C:00:52:85:9C:13:4B:BB:39:45:47:5E:C5:16:10:93:CB
Authority key identifier: E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03
Certificate issuer:       /CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
Certificate serial:       0194BCE0B1E27EF1090016F637F15A0E62D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
Manifest number:          1165
Signing time:             Fri 31 Jan 2025 15:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:29 +0000
Files and hashes:         1: 4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl (hash: OkY9FC6mbPz1GKNw5NOjHCkd3h/sPGUSlIeiw6woPTc=)
                          2: yfb_qPLjpTR6E53AWD8zAEu3mD8.roa (hash: ewXjqJ1u8QGc/DB2xhFt7iKmK54tjMWGPVl8lml9NyI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:b1:e2:7e:f1:09:00:16:f6:37:f1:5a:0e:62:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
        Validity
            Not Before: Jan 31 15:00:29 2025 GMT
            Not After : Feb  1 15:00:29 2025 GMT
        Subject: CN=f6a0506c0052859c134bbb3945475ec5161093cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:1a:a7:77:8e:a4:fa:a6:e8:59:59:34:ee:
                    ec:76:57:8c:21:91:89:5b:ae:b9:72:ee:83:68:de:
                    e7:78:49:14:95:4f:2a:25:c7:80:da:3e:48:d1:5e:
                    70:a1:fa:a3:20:45:f8:cf:b7:f7:3f:d0:cd:1e:db:
                    63:51:48:97:be:a7:a0:68:53:37:63:75:38:3c:ff:
                    3c:dd:9c:71:08:d0:82:bf:6a:6d:06:f6:59:76:13:
                    50:02:1b:85:85:74:c3:86:46:d7:96:ff:08:cf:c8:
                    ad:a5:74:c5:66:61:1e:a1:9a:fa:13:2b:c0:6f:28:
                    52:94:a5:ea:bf:6b:c6:3e:a3:7c:81:e0:8a:b7:46:
                    e4:ff:a7:bd:10:52:a3:4d:a9:26:69:18:40:75:38:
                    07:96:de:d4:e6:56:30:52:22:bc:13:d5:0c:31:c4:
                    50:62:9c:11:00:07:f6:2e:66:b6:54:28:70:ff:bd:
                    c0:1d:5b:ea:7c:b6:13:85:d3:74:63:fd:65:80:ce:
                    46:73:87:6d:2c:37:f8:ac:0b:c7:7f:b3:b9:f8:8b:
                    67:6c:34:be:89:5e:52:7e:98:89:a4:26:a6:10:de:
                    b8:c2:d9:02:3b:19:01:3f:1c:15:61:69:82:3e:b6:
                    aa:c8:12:8a:f8:fd:ee:97:b6:b0:6d:c9:21:12:54:
                    e5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A0:50:6C:00:52:85:9C:13:4B:BB:39:45:47:5E:C5:16:10:93:CB
            X509v3 Authority Key Identifier:
                keyid:E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b4:c0:a7:bc:82:62:6c:3b:95:c7:fb:25:65:b2:a4:75:29:
         75:47:9a:78:98:20:5e:39:d9:64:45:5d:84:b3:72:48:aa:50:
         a8:32:b0:46:c9:d8:2b:c1:d4:fb:65:16:83:cf:4b:30:70:d1:
         51:ea:9a:0c:78:d4:c1:79:3c:81:74:a7:d0:66:11:8b:7a:c6:
         42:2f:3f:8a:32:91:c4:da:f5:56:e2:43:f2:66:2e:69:29:e4:
         aa:04:2b:e5:40:ab:da:d0:d2:63:53:b0:48:d5:7a:af:26:f2:
         4a:69:84:82:7a:1b:9f:41:4c:24:08:0f:cf:f1:0b:50:81:d1:
         7a:32:0d:e6:9e:6d:22:7a:29:22:b7:82:f5:4b:53:8f:98:a9:
         b3:de:e8:79:c4:84:43:b0:b8:78:75:84:89:fc:c7:ba:cf:e3:
         95:25:75:7b:fd:4e:af:dd:b5:bd:71:0a:77:ff:ae:f9:9b:85:
         e9:88:8d:e3:f9:13:eb:e9:88:bf:1f:ad:af:18:64:04:27:01:
         3d:0c:33:30:0b:2e:a1:02:2d:6a:12:ba:cb:22:ab:fe:2d:99:
         b4:de:d8:60:40:a2:90:28:6b:a5:4f:1d:08:9c:64:bb:73:90:
         3f:fc:1a:29:81:80:3c:9c:aa:ed:64:67:8c:54:00:c4:17:7c:
         0d:a5:c8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:16:09 2025 by rpki-client