Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
File:                     EzGVE_0LkEFwYKIYt21iuOP7zFE.mft (raw, json)
Hash identifier:          8cNnWlxV7JSWaKTJhKXNVVMrwA1Lqk/d24SpDhhukps=
Subject key identifier:   87:2F:D7:CB:3D:92:F2:13:7B:22:1C:BA:C2:E3:C6:AA:DD:10:34:C5
Authority key identifier: 13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
Certificate issuer:       /CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Certificate serial:       0194BCAA06449730966678188F10242F3325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 14:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:46 +0000
Files and hashes:         1: EzGVE_0LkEFwYKIYt21iuOP7zFE.crl (hash: NRShNqFf8UP2/r2UEMpataXvdM+yZi3SvPEZVF1hf+M=)
                          2: yp0LdC7U734nh5SQEMIi7N8uoHI.roa (hash: yywu4U5iIGMPvffSUFMCkRN3B5n6pNurBpQSvtgjfYQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:06:44:97:30:96:66:78:18:8f:10:24:2f:33:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13319513fd0b90417060a218b76d62b8e3fbcc51
        Validity
            Not Before: Jan 31 14:00:46 2025 GMT
            Not After : Feb  1 14:00:46 2025 GMT
        Subject: CN=872fd7cb3d92f2137b221cbac2e3c6aadd1034c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:60:06:ce:1a:d0:f6:db:3e:4f:2b:94:d6:67:
                    6c:d6:e4:a6:e1:0b:3b:bf:18:54:bd:fe:0d:2d:e0:
                    4b:6f:c2:f4:32:b2:24:db:d7:0e:b4:83:74:85:78:
                    65:e9:13:c6:f7:8f:dd:96:be:58:c9:d8:4a:5a:1a:
                    c7:e9:10:5e:d2:3d:a7:2b:52:c9:ff:17:49:4f:00:
                    c1:a8:72:de:33:67:76:4c:42:23:50:08:07:9c:da:
                    09:38:71:04:b1:21:5f:29:93:65:56:53:c7:36:64:
                    ff:cb:26:8f:e5:ca:b8:c9:04:3a:8c:96:40:59:2b:
                    aa:40:0f:3a:18:d5:d1:72:d4:c3:3f:71:f9:6a:61:
                    07:e6:5f:95:18:9f:3b:4d:43:ba:0e:a5:c6:9c:21:
                    af:aa:ae:f8:0a:d3:16:75:b5:11:e8:dc:9e:c5:9b:
                    8a:db:24:be:9d:a6:7e:48:d9:12:56:cb:45:17:db:
                    0c:99:98:a3:6b:15:f0:e8:ac:5a:64:60:67:93:04:
                    d0:a1:64:ad:3e:5c:24:f5:c0:e1:5f:d9:96:be:07:
                    84:e9:7f:de:06:6a:29:9d:4d:a3:1d:42:ba:bc:33:
                    17:68:45:a9:83:07:f3:ce:a2:6c:44:7d:85:f7:ac:
                    7d:86:38:0e:24:7c:ad:59:66:a9:f2:09:6b:0d:38:
                    1c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2F:D7:CB:3D:92:F2:13:7B:22:1C:BA:C2:E3:C6:AA:DD:10:34:C5
            X509v3 Authority Key Identifier:
                keyid:13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:63:11:39:02:bb:28:ec:f8:7f:53:69:07:55:7f:81:f8:bb:
         80:0b:75:20:f4:6b:fa:ab:70:28:a9:a7:46:56:48:bd:20:8e:
         6f:d2:32:68:dc:6c:52:ba:14:a2:6f:eb:ff:7b:32:00:9b:1f:
         ff:da:03:52:f9:61:eb:53:e1:a2:a9:a2:d6:5d:b3:44:20:4b:
         60:a3:06:7f:bf:97:9b:86:63:83:8e:33:27:80:65:51:26:56:
         59:70:86:d9:b0:e5:79:65:31:c5:f2:21:27:e6:15:ef:34:ad:
         36:ab:fa:0c:ea:2c:4b:bb:54:20:c5:f6:c5:9d:2c:8b:64:72:
         25:9b:61:ff:d3:8c:fe:e3:10:93:aa:cf:09:7f:c8:1a:69:f2:
         ff:2b:ca:db:bd:d9:32:cb:fc:0f:fe:42:53:f7:4b:d7:9f:e5:
         99:97:c7:45:49:f0:b3:13:a1:27:d3:3e:4b:81:f9:be:ca:3a:
         35:43:0e:2c:66:eb:f8:2d:0d:70:ee:d8:d8:57:c2:53:6e:ce:
         36:6b:f8:a3:fa:93:8d:25:b9:11:b3:eb:c0:20:c5:01:22:93:
         a6:a6:34:53:d8:a3:41:64:d4:be:a8:b9:74:9a:ac:92:5d:1e:
         b2:2b:c2:bb:3d:ea:58:80:4a:02:a8:4d:b3:b4:45:a8:94:08:
         63:3f:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:23 2025 by rpki-client