Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File:                     fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier:          0GaSakT0dHxUT07TKlE0+ZQTGUMm1TXmBsMz0k/P9oY=
Subject key identifier:   8C:B5:95:06:E9:E6:F7:21:88:83:50:3A:68:75:88:08:92:F4:92:9D
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer:       /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial:       0194BC72E7A82C8DF675980014101C8A1A94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 13:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:34 +0000
Files and hashes:         1: FhiaygjAF_1CRSj0CN-vLLhuasg.roa (hash: SeFF3k4+NSW9uVrbVWJXjtkwiHNZBfGKLzdPBZ23zYE=)
                          2: REJSEHBqBmUbahN6hVMSYy6LHI0.roa (hash: M3m09unuab4iohEbcy0njc+8m8Kysxgeqz3sy5tQvW4=)
                          3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: eDnKEM259BIna/uupWyXjeEWoZ+xcWbNRrVaCqvPiqk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:e7:a8:2c:8d:f6:75:98:00:14:10:1c:8a:1a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
        Validity
            Not Before: Jan 31 13:00:34 2025 GMT
            Not After : Feb  1 13:00:34 2025 GMT
        Subject: CN=8cb59506e9e6f7218883503a6875880892f4929d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:7d:d7:09:36:69:83:34:1d:c0:42:4e:58:
                    16:8c:a0:d6:21:b9:28:0c:1e:de:fd:06:03:af:5c:
                    ac:a5:74:8e:18:ed:6d:d8:5e:d8:76:0e:63:92:e3:
                    19:4e:b6:f3:24:9f:0f:c3:6a:de:46:09:08:83:af:
                    4f:7b:6e:9e:73:87:65:59:36:3b:24:17:c8:61:1f:
                    a3:cd:ba:8c:a6:17:68:4c:4d:37:fb:78:32:13:39:
                    ad:c4:1a:50:c3:45:99:0d:47:5a:2c:95:0e:b8:ca:
                    7a:3b:d1:8e:85:12:3e:97:a0:be:f6:a6:b2:79:6c:
                    8a:fb:3d:6f:fc:fd:e4:45:e3:e7:03:c5:25:a2:5d:
                    0a:25:6e:0f:9d:08:04:d6:8a:2e:0a:39:6b:db:57:
                    aa:f2:66:71:a7:51:3b:af:9f:5a:83:04:69:16:b6:
                    4e:c1:5b:50:ec:c1:6d:1e:63:00:fd:2b:b5:3b:b9:
                    08:fb:cf:c5:f7:82:66:b9:e4:09:a1:ef:c3:08:07:
                    d6:1d:bf:87:59:47:87:ee:bb:7d:6d:8d:59:13:0a:
                    63:5a:42:ee:93:55:04:b4:44:69:83:86:ce:37:1e:
                    4b:77:19:01:b4:7f:fd:5f:50:92:39:8e:72:23:91:
                    3a:13:a8:c7:eb:83:24:c3:ce:c0:69:d9:60:98:09:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B5:95:06:E9:E6:F7:21:88:83:50:3A:68:75:88:08:92:F4:92:9D
            X509v3 Authority Key Identifier:
                keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:96:97:97:b4:10:0c:69:32:1f:e7:a9:d0:a6:34:bf:a8:f4:
         2e:5c:2b:a1:d8:18:15:b6:46:be:57:e8:59:40:67:40:0a:6d:
         be:e7:0a:13:f2:9e:75:0e:a8:fa:9a:8d:96:22:47:de:80:fc:
         1c:1e:87:2b:ed:28:ad:74:32:4f:75:37:94:70:b8:4f:3b:26:
         26:05:81:bf:5c:3c:dc:df:92:4b:90:8c:3b:ee:25:0f:1c:70:
         ed:5d:86:bb:68:b2:89:c3:f2:d8:56:b8:42:2c:98:4c:1e:41:
         ee:a4:46:47:2e:f1:6a:1e:db:19:d5:e1:3b:8b:7a:40:7c:b8:
         6c:cb:f4:14:22:e6:ec:25:1d:89:dc:81:0a:9f:87:b1:3f:97:
         93:02:de:93:b0:c4:0a:5d:97:58:8a:2b:c3:88:26:46:63:1b:
         04:f0:03:28:8e:69:b4:fd:ea:b5:66:98:08:e2:59:2c:37:6c:
         69:63:b2:34:99:c2:ed:82:51:a3:9d:bf:34:b7:5e:c5:40:2a:
         fe:8c:1c:c0:e5:bf:26:5d:e6:30:db:13:e8:bb:6b:54:ef:66:
         2f:81:55:44:ac:23:6c:28:8e:31:d0:a4:9f:05:df:71:1e:fc:
         87:16:27:1d:db:58:9e:25:ee:5e:48:31:62:0a:fa:26:ea:19:
         72:10:3e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:56 2025 by rpki-client