Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
File:                     DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json)
Hash identifier:          k2HlqtcQgiU5vxZaiBAuWd32FIV8PNeaPCFeZPSRj8E=
Subject key identifier:   55:B5:DD:15:F8:93:D8:BE:0F:87:24:5A:0C:71:B0:17:D8:7B:1B:83
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Certificate issuer:       /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial:       0194BD17886E9E68E449B8F8C2A934F541F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 16:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:23 +0000
Files and hashes:         1: 1-sk04SJKaJ6g1Y9khEpsLFas3Kk.roa (hash: XxZhRBWthERVmL3LKPQQh5B0868NCMjhs1tFs+3eMxM=)
                          2: 4QpvM3CE_nzBSqatuahpsYYH1qM.roa (hash: Qrg/EHEt9L0x/2vBVqdC/NUou31du+BoDTLXvsaFSGk=)
                          3: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: gOUbmTX0gxfO8ipqVxqHkzS7le+BWSl/GCFaZzU1FDU=)
                          4: OKvzKSdRprY6KmoCf5oHQIz_91A.roa (hash: c7CmyJe2kYuAmiLCH0rQuuU8EyGxHjQvlpZniPCLw0U=)
                          5: mHALm7hBq5s0140ybe8Xc1F8234.roa (hash: imdhLSNxS5EA5IBXEn3VpwdKjS6o+zDqUc/wlGF8Pzk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:88:6e:9e:68:e4:49:b8:f8:c2:a9:34:f5:41:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
        Validity
            Not Before: Jan 31 16:00:23 2025 GMT
            Not After : Feb  1 16:00:23 2025 GMT
        Subject: CN=55b5dd15f893d8be0f87245a0c71b017d87b1b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:39:b3:5a:8b:82:87:46:c1:b3:4b:cf:de:
                    04:30:be:80:c7:f9:88:da:15:7f:34:7f:d3:ab:60:
                    eb:3b:bc:6c:3f:e9:d0:97:0d:44:49:ab:9a:9d:31:
                    86:d1:cd:a6:d1:e6:a2:2e:f8:75:cc:19:9e:05:91:
                    6f:11:72:3b:99:ae:ea:9e:7c:f5:21:61:7c:6c:0c:
                    6b:04:56:1e:ca:61:62:93:f9:04:ac:0d:53:37:0f:
                    7c:86:bc:17:d1:64:58:ec:0f:7d:82:89:88:fb:3b:
                    8d:c7:e0:48:c3:20:15:87:b3:f3:42:db:cb:2e:d5:
                    38:d0:86:2e:c1:65:a4:c9:cc:7c:c8:a6:08:ec:db:
                    b3:4b:88:4e:dd:ed:9f:fa:4b:a1:e6:f5:46:97:06:
                    c4:34:96:1f:de:11:eb:c0:89:b9:2a:40:e2:53:35:
                    16:f9:9e:70:3b:d8:db:85:37:08:9a:1e:c2:e6:fa:
                    5c:04:9e:08:5d:0c:c0:c0:d1:c4:60:8a:83:62:4c:
                    95:51:85:b9:10:eb:15:ee:06:8a:71:65:65:9b:4b:
                    ca:e1:5b:e2:45:2f:c4:d9:91:b5:c1:86:f6:41:f3:
                    66:60:d1:00:3f:fc:29:c8:f5:98:50:e9:d8:fc:1c:
                    d4:fd:90:ee:72:68:8d:60:10:e5:cf:03:72:01:17:
                    8d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B5:DD:15:F8:93:D8:BE:0F:87:24:5A:0C:71:B0:17:D8:7B:1B:83
            X509v3 Authority Key Identifier:
                keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:df:38:9b:a4:d0:99:4f:8c:6a:8b:7b:a9:29:c8:4f:1b:70:
         55:7e:83:88:38:61:ff:7d:d9:a8:31:4e:c4:0c:a1:ac:f0:72:
         6e:8a:06:be:8e:e9:58:85:c2:49:96:4a:08:ec:07:0f:1c:99:
         bd:3d:25:d3:6e:26:69:31:88:a4:1c:b1:44:d1:2f:7d:a3:89:
         ca:2b:45:39:c6:63:c3:09:d2:bb:57:3c:65:5d:79:3e:0a:dc:
         05:6c:35:bf:e6:ee:8f:a2:7f:c4:94:b5:09:90:30:b3:7d:eb:
         8d:b0:dc:93:20:45:a7:df:df:69:aa:39:e3:75:c1:e4:61:1a:
         77:aa:fc:e6:84:a4:5e:cd:d7:1f:fd:12:31:4c:ac:48:df:d1:
         a8:63:0a:f4:32:94:cd:2f:27:5c:59:02:e8:ec:e2:cb:d5:51:
         b2:26:5a:ef:56:4b:d4:48:f9:01:a8:e0:a2:2e:d7:0f:e5:e7:
         7c:36:86:d5:69:2e:db:44:8a:78:26:c6:70:4c:b3:bb:c9:b7:
         20:70:3c:1a:49:61:9c:9f:92:e8:5c:6a:96:6a:79:ae:7d:38:
         13:23:30:45:81:ba:b1:0c:08:ca:7c:c3:d2:a3:49:80:20:5d:
         b1:4b:11:c3:22:e3:f8:e7:bd:c3:69:a9:28:c5:b4:b5:fe:8d:
         b4:24:43:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:07 2025 by rpki-client