Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File:                     70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier:          a5OrVZ0a++5RaP5TZkabCOeB81daaYcRo66oX73B8mg=
Subject key identifier:   9B:AE:4A:9A:6F:44:07:14:57:E8:11:20:F6:24:5D:67:4E:BC:6D:B6
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer:       /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial:       0194BC72F102BDC6C46226F5AB9693F4E25E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number:          0853
Signing time:             Fri 31 Jan 2025 13:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:36 +0000
Files and hashes:         1: 2JA-ZwNyhJfjy4iRgBz6O7qcilU.roa (hash: CuX1HDub6jnp4XmLQgh/JslHvidglBPgi73piILRqao=)
                          2: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: sqIwGIcZc6yVdMT+7hzZt4UbqzEv5Cv2BHHHgkwD4uA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:f1:02:bd:c6:c4:62:26:f5:ab:96:93:f4:e2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
        Validity
            Not Before: Jan 31 13:00:36 2025 GMT
            Not After : Feb  1 13:00:36 2025 GMT
        Subject: CN=9bae4a9a6f44071457e81120f6245d674ebc6db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:7c:5f:1c:48:40:fd:99:77:70:18:a8:6d:
                    ed:93:d2:ec:3e:14:41:2d:b6:5c:12:18:32:f7:b0:
                    70:fe:b7:06:c2:39:31:d5:9b:b4:36:6d:62:5b:25:
                    76:00:3a:51:4a:cf:ee:4c:67:0c:17:bb:6b:a7:c7:
                    bd:81:a8:1d:7d:65:fd:4a:73:3b:51:85:84:8b:5e:
                    ee:1e:cd:f9:fb:0d:a8:99:2d:3e:7e:82:28:37:20:
                    61:47:d3:3d:0c:d6:f1:be:cd:c9:c9:3c:f7:26:15:
                    36:97:48:71:e9:0d:0b:ec:4c:56:69:49:93:a2:7a:
                    cc:1d:bc:8a:c1:3e:91:da:4e:88:e7:c7:e7:e6:6e:
                    b4:13:d1:36:25:53:3d:ca:89:7d:91:43:ce:fb:14:
                    f8:6e:57:b8:44:a6:1c:2d:c5:69:43:cf:fb:e4:15:
                    88:a6:68:94:c2:8e:4a:49:0f:02:44:21:92:50:5f:
                    c6:91:02:6b:73:d2:7f:df:a3:29:2a:9c:82:f6:70:
                    20:13:50:0c:9d:6c:2b:9c:7d:6c:5d:20:91:ad:f5:
                    c4:70:48:f1:9e:6a:d0:bf:2f:d4:e7:b0:e7:91:61:
                    a1:c1:28:88:9e:78:20:38:71:fe:f4:a8:60:d2:de:
                    35:9f:ae:9f:aa:25:4b:06:c8:87:84:29:19:c6:cc:
                    01:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AE:4A:9A:6F:44:07:14:57:E8:11:20:F6:24:5D:67:4E:BC:6D:B6
            X509v3 Authority Key Identifier:
                keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:a3:70:fa:9b:c9:69:6d:d7:1b:fc:72:b7:8e:a9:1d:4a:19:
         7b:fe:18:bd:4b:60:cd:40:5c:1d:5b:a5:e8:d2:1d:3b:d5:f4:
         76:8b:79:95:09:ec:c1:53:ee:f8:53:85:87:ca:67:32:d4:64:
         ef:40:0d:f5:f4:5b:71:76:29:38:28:08:44:7a:df:67:74:23:
         37:45:dd:ec:1a:36:14:88:c5:ff:1a:bb:76:be:10:58:3f:fb:
         7f:be:36:99:30:d7:cb:bb:06:23:a8:39:91:ed:1d:b8:18:1d:
         25:6c:9b:36:ef:27:24:83:52:90:28:97:f2:d7:c5:38:52:e0:
         72:14:b9:cb:bb:fe:4a:36:f0:b7:63:00:3d:00:2d:a7:58:7f:
         a9:8e:16:d6:07:6a:db:08:a6:85:72:4b:fc:22:46:95:81:22:
         ce:ec:4b:ba:c7:7d:5b:00:40:ad:03:3f:7b:10:ec:38:c2:18:
         07:ce:36:e1:0b:81:0b:f2:6b:71:01:e3:fd:e4:97:ac:21:93:
         80:43:a9:f2:ca:87:52:ac:c2:a0:c3:39:e1:6b:01:69:f9:1c:
         82:af:a1:51:8f:0b:1a:78:96:63:54:b0:45:ef:2d:be:08:61:
         13:eb:d3:1c:17:c5:fe:7b:81:bb:f6:91:d3:18:b2:0a:46:3d:
         64:76:b2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:51 2025 by rpki-client