Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
File:                     Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json)
Hash identifier:          tsxvyFLqurmU6ndBOitolYwUoUSzRSqPQ748UOfe6vU=
Subject key identifier:   36:A6:A0:EF:F0:BD:E2:59:F4:3C:58:B3:86:25:22:10:28:62:45:7D
Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
Certificate issuer:       /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Certificate serial:       0194BCA9A8C877FB61B22F0E9B8778FFECB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
Manifest number:          0B10
Signing time:             Fri 31 Jan 2025 14:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:22 +0000
Files and hashes:         1: 4f1jI7-qAw-Fm-OtnESqUBoebm0.roa (hash: Yj15262IImuG/zvO4RGd+KynWz9BG4CJpl9H3lrssA0=)
                          2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: +Bn0WQ5gca6JRtB5dgcVqqul6SoIAKJEFJ7fHk3aAys=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:a8:c8:77:fb:61:b2:2f:0e:9b:87:78:ff:ec:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
        Validity
            Not Before: Jan 31 14:00:22 2025 GMT
            Not After : Feb  1 14:00:22 2025 GMT
        Subject: CN=36a6a0eff0bde259f43c58b3862522102862457d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3f:ca:01:a4:dd:a0:5d:8e:3d:46:24:52:62:
                    11:7f:5d:8a:22:89:03:f8:7b:44:f9:0b:5a:c6:71:
                    ac:1d:3c:fd:33:2b:0f:50:61:ce:71:10:5f:41:48:
                    66:4b:bb:e7:cc:dd:4b:02:d0:94:b4:68:40:f1:e0:
                    ef:e4:d8:af:3b:f9:28:5d:6b:ea:8e:c5:f2:0d:4f:
                    47:2b:dc:da:20:94:4f:e1:e6:a7:55:f9:c4:ee:0b:
                    e1:61:0e:36:13:b0:d0:ad:62:01:b5:14:9a:f5:6b:
                    e4:cc:be:d1:61:a3:a1:64:47:19:b1:06:db:b2:04:
                    36:a6:0d:53:1f:76:71:81:85:e3:91:7b:50:a2:73:
                    55:2d:e4:ac:ed:f1:14:3e:b9:e4:dc:7b:79:45:35:
                    e5:bc:f6:e7:54:30:87:c3:df:b0:75:24:a0:1e:d1:
                    56:01:5f:e0:09:bb:32:c5:a9:5c:5b:46:85:47:8a:
                    f0:4c:14:37:42:9d:c9:4d:29:b6:d0:a6:7c:4c:00:
                    0d:18:7d:f8:23:f9:07:d5:16:55:33:e5:b6:16:fe:
                    72:af:95:be:c4:95:c2:bf:78:e6:ea:b4:51:94:39:
                    e2:b4:5f:fb:0c:1a:06:86:14:62:02:0f:12:c4:13:
                    38:5a:9b:f3:86:80:8d:7a:c2:c7:e7:06:6b:96:1a:
                    72:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A6:A0:EF:F0:BD:E2:59:F4:3C:58:B3:86:25:22:10:28:62:45:7D
            X509v3 Authority Key Identifier:
                keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7c:e1:d7:2c:fa:dd:37:4a:33:cd:ff:fb:08:8f:10:dd:47:
         fd:45:11:9b:4e:ac:f4:8d:c2:4b:d0:d5:47:cf:d3:13:ae:4d:
         ce:3c:1c:aa:55:aa:d9:c7:ee:82:f3:dc:1d:28:1e:32:1f:50:
         51:c6:74:71:a5:50:5e:7b:38:f4:b5:1a:cd:db:cf:7d:66:7e:
         e2:40:5d:61:90:2e:0d:8c:8c:e3:16:24:2e:05:79:3a:ae:d5:
         68:e9:73:cb:07:a9:44:7e:fa:16:bc:e3:35:b6:67:e0:30:6e:
         f1:0d:9c:6b:e1:b6:4e:26:08:b8:08:07:eb:c2:4e:ff:b2:eb:
         fd:35:bb:55:de:e9:16:1a:ff:ea:92:f7:bb:63:6c:30:3d:80:
         eb:5e:b2:c3:96:51:3e:5d:3d:0f:3e:e0:e5:e7:00:f8:a8:90:
         c5:49:92:de:2f:40:c4:3b:00:cc:b1:2d:cd:c3:0b:cc:b3:b3:
         1f:e1:42:e9:9f:ac:d3:28:8c:7e:9d:97:d0:1a:a5:ef:2b:b5:
         35:d4:a1:69:d5:45:08:38:e9:7d:02:f1:aa:d9:4a:d4:6e:06:
         0f:2b:f2:1f:f6:76:a7:06:15:f4:41:9a:d4:da:03:38:a9:2b:
         b5:2b:54:bb:c1:51:c0:a7:0f:e7:3e:b6:a9:95:4b:8e:58:e7:
         b6:50:5a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:04 2025 by rpki-client