Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File:                     240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier:          aizO+H0MWRZ5IHl+etA2JyAuC9SGAup9pzBTUdPUOpc=
Subject key identifier:   44:A6:3E:A1:05:11:DD:99:05:19:D1:72:5A:2B:06:33:1D:95:50:2A
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer:       /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial:       0194BC04AF472664FCBA04C93C67BAD19631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number:          1102
Signing time:             Fri 31 Jan 2025 11:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:11 +0000
Files and hashes:         1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: Jw1HpcrS6lbk2C3Zf+/ua8SazaEMHG3c1jpIGHKSnkE=)
                          2: EAKe9346ONHQ_VuM_WxVCj_cv4Y.roa (hash: 5H5/ZpQAnmY/nM8N1VtyRS6/84qLoSsU0G+AmpT2T/k=)
                          3: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (hash: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:af:47:26:64:fc:ba:04:c9:3c:67:ba:d1:96:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
        Validity
            Not Before: Jan 31 11:00:11 2025 GMT
            Not After : Feb  1 11:00:11 2025 GMT
        Subject: CN=44a63ea10511dd990519d1725a2b06331d95502a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f0:be:d1:6c:99:15:b1:33:2c:4c:e5:8d:f6:
                    03:3e:90:c4:78:14:6a:6a:22:44:7f:83:df:7a:41:
                    68:74:f8:ce:fc:de:94:d9:02:25:c4:1a:59:74:41:
                    6e:16:85:81:8a:4e:61:cd:64:b5:58:61:f1:3e:fe:
                    ed:3f:e6:d6:c1:5b:c5:16:d7:39:e7:17:4a:3e:7d:
                    e0:81:60:31:00:62:e9:95:b6:bc:60:32:21:dc:ec:
                    c2:a6:71:cc:68:08:13:51:2d:e8:51:ef:8e:89:85:
                    e7:67:70:a4:ae:e6:bb:50:1b:ce:34:eb:59:d2:c8:
                    bc:4e:44:62:ca:71:18:28:86:1f:44:c4:de:e1:d0:
                    55:6c:9c:d4:f6:4c:3b:8a:d4:e7:7d:95:7a:1e:55:
                    70:9f:ad:35:96:a7:2f:3c:d5:d1:4a:d0:ba:38:dd:
                    8c:c1:33:73:39:fd:c3:1b:8b:cb:e3:2d:c6:3b:be:
                    ac:a6:31:6e:40:55:36:1b:22:82:a6:f5:68:b6:25:
                    ab:86:d3:a1:58:e7:1b:c9:59:be:70:ec:ba:57:00:
                    27:aa:ce:e9:3d:54:83:b0:1f:7a:b6:73:68:47:50:
                    21:a8:59:15:e7:40:a0:1c:1e:e9:59:4c:bc:07:33:
                    e9:2b:b9:f6:c8:f0:15:4f:d4:94:64:ea:3e:bc:c2:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A6:3E:A1:05:11:DD:99:05:19:D1:72:5A:2B:06:33:1D:95:50:2A
            X509v3 Authority Key Identifier:
                keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ac:16:9d:60:1e:9d:96:ce:4d:aa:eb:b4:a2:52:36:84:ae:
         b1:67:9e:7e:68:41:89:62:a1:0f:e1:e9:2f:44:84:38:1f:f9:
         59:68:f3:19:97:79:79:64:1e:89:1b:9b:25:b6:3f:da:42:9c:
         2c:94:fc:b4:bb:eb:5b:46:c0:be:bc:2b:4e:c7:b3:30:c1:44:
         c8:8c:44:4a:db:88:91:43:9f:fb:8f:fd:d5:d6:af:8c:2a:2c:
         0a:12:4d:9e:c0:08:44:7a:0d:6c:a0:a5:9d:31:80:58:40:c4:
         d8:17:6e:6c:51:76:72:40:e6:6f:da:31:c4:cf:69:fb:1d:dd:
         26:50:34:d0:bf:4c:75:8d:ef:f4:e0:df:4f:79:53:49:8c:99:
         db:a3:96:49:c0:d0:90:da:78:14:0d:30:e1:ea:67:cf:33:65:
         29:35:6b:6f:53:c7:83:ef:b6:7a:da:55:68:c0:a8:2a:ea:10:
         3a:40:69:c1:7b:04:c5:a1:56:8e:4a:7a:be:71:f4:c6:ec:24:
         32:8e:e2:8e:9b:cc:1e:7a:6c:10:6b:55:c7:7a:a9:43:6c:39:
         46:f0:86:75:15:46:39:38:3d:79:6d:1d:77:c7:3a:fe:58:63:
         69:a4:94:a5:ee:e6:e4:43:84:03:ff:b0:72:7f:08:4e:7e:08:
         6d:00:52:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:55:30 2025 by rpki-client