Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
File:                     6AHyPOghwmTWdydTbsGDU3WUxfI.mft (raw, json)
Hash identifier:          EQxpqYEAybSuK1vR1rSnZZCj/cE+0GBEqJagbtkKc28=
Subject key identifier:   AF:77:81:BE:8A:05:EA:28:06:E9:2A:8C:7E:6E:8F:4D:E6:47:18:20
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Certificate issuer:       /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial:       0194BCE0A9715094F12717E9D02DB1D41F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
Manifest number:          1434
Signing time:             Fri 31 Jan 2025 15:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:27 +0000
Files and hashes:         1: 1AY-3wX89pHsKMEMJWGHTHsJ8gI.roa (hash: isIoAb0bdzc9Cbbslo3RKCKles0GJe6/bSmHAxkyj+A=)
                          2: 21W9uhOLCfGBSLMK8xlCrH8tOg4.roa (hash: AjEuF2+0cRLXo4E2JHpp6w+dtVFDkzA5bZ7j4AtGGgA=)
                          3: 2nB34LVBbtl74aGRyrgO8R7Ndlc.roa (hash: vcU/vsmwMZU339dKKRVuUgWsl3f587fyzQ0cKDXFwYs=)
                          4: 36o_asZrpJckrJYtCQ_3cyS6VxI.roa (hash: n+NrjdHAcQK/VqsswfVMbQbVU4jqmrrdhbmTvGV91ts=)
                          5: 4YclLAlicy2DcCNHws_6seOTF_o.roa (hash: MDIYzRbkjVFgI1Ats/352Yqa0tN/SB9gbJGmZv6PQg0=)
                          6: 6AHyPOghwmTWdydTbsGDU3WUxfI.crl (hash: /TH3hutnCCIgLWHtLUgitl/PzE+cnorCxapfS3LmoQ0=)
                          7: 7QqVIV8LUR5c1jRBC94m2154ry8.roa (hash: TrmmIYdBlXXb3FxJhiLUTMljo4lEhT6KOCibHbFmEAg=)
                          8: 9K0UiUtwMeDGLO07jN4cphQ0NhA.roa (hash: iD28nbSB8h3AMCMtfL1dVEifxVKaj30VOiCxNvUpdlc=)
                          9: FQAhyrS0gBW9SqtuZi6NPEvhgvs.roa (hash: b2xzO3i1ZOAXGwMPX7/Wy40sppb1tn8N9pURrf2iaI0=)
                          10: GIbN6bPur810JuGuHTYh5u7F5NM.roa (hash: Oikl7sXMAHs0Y+UGW9FTy+uNhN71zF966LLlZ+ZYmZI=)
                          11: Gyz6a3KXlcszmeD4XP7JYSSJB98.roa (hash: AzG7hu1mJnSnaE2NJTDYkswyaDmFnEmOHi9jFFpjg7U=)
                          12: I5CoNuYa1QHmdQ9Kc75dGAMDAcM.roa (hash: k45LeIb2ZuFIg9nv2VIXeMwWDcrg/6igPHCTVBEmt7c=)
                          13: KDbreFm6qa86qVWPbMSXjiRJb_s.roa (hash: 1MEUcBOj0QBk1+QfUlYD7XLcRWpZwRWbbrAL7ZihjGM=)
                          14: ZT5okXQpCE1L_UFUxKGgKpmWveI.roa (hash: ApTwm5XOwO8lK1KOUvV88VBx+9bwwdRBzVYLDFE5Eqo=)
                          15: dlTZMeVOmH-sGjLKfnpWqcWWk2s.roa (hash: DB9sfDl87OFpyZ/nDL1JNomcxUe0WBEVSpKL3sB9cVU=)
                          16: dxiJRbb0rG53Lq98f0i5g1Diw3E.roa (hash: 9/nhvqiEnr8fAWmfTM/kuetnXqSQzx8yP5QO3uiQqGc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:a9:71:50:94:f1:27:17:e9:d0:2d:b1:d4:1f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
        Validity
            Not Before: Jan 31 15:00:27 2025 GMT
            Not After : Feb  1 15:00:27 2025 GMT
        Subject: CN=af7781be8a05ea2806e92a8c7e6e8f4de6471820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:7a:f3:8b:44:a6:7c:ca:09:f0:62:71:ba:
                    e5:98:1b:dc:21:25:16:9d:a3:6b:6c:bd:c1:8a:9e:
                    41:95:26:e6:c1:43:2e:94:b5:81:d7:ba:e2:8e:92:
                    f4:10:c7:f4:28:79:fb:69:e3:a0:b3:3a:64:a0:5d:
                    d4:ea:78:87:38:a5:2a:2e:12:0c:ba:90:24:2f:d2:
                    dd:c0:95:ef:f6:e3:09:82:64:c7:9c:b9:e9:ae:e1:
                    e0:b0:c6:2d:44:5f:c6:2b:d5:20:f5:44:c8:0e:e8:
                    e9:23:90:90:5e:53:a4:69:47:7d:29:d1:bd:a9:a4:
                    b2:b0:ce:7c:75:82:73:05:43:48:48:b6:d4:d9:53:
                    21:f2:3e:81:48:56:4b:3f:41:3f:fa:be:37:3c:41:
                    c9:08:8d:e0:94:9b:93:bc:15:01:55:ae:c5:14:25:
                    ce:80:74:ca:d3:97:da:34:f5:78:f5:88:90:84:fa:
                    62:02:14:4c:64:e3:8a:88:4c:0f:90:2f:7b:3b:04:
                    ef:69:46:bd:44:24:93:52:ef:3e:cf:50:78:47:c8:
                    dc:55:fc:94:9e:f0:f8:18:f6:28:ae:6a:3c:b6:9b:
                    aa:3e:5d:9f:0b:b9:09:fb:ce:71:d3:40:39:58:ca:
                    7f:86:bb:a6:77:ba:85:92:00:27:72:19:35:e9:04:
                    e3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:77:81:BE:8A:05:EA:28:06:E9:2A:8C:7E:6E:8F:4D:E6:47:18:20
            X509v3 Authority Key Identifier:
                keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c8:a9:c8:89:90:fe:e4:c8:81:aa:df:93:82:b4:71:7e:83:
         9a:c3:98:22:1c:1d:4d:1c:5e:f0:0b:bd:ce:0d:59:34:c6:3b:
         c4:b1:dd:a3:0a:7b:38:b2:b6:70:41:1a:da:20:e0:4b:47:7a:
         26:8a:f0:55:33:70:16:4e:36:e4:0f:0a:32:df:34:ba:67:ae:
         f3:dc:00:7b:a0:b1:03:58:92:d4:4b:8b:68:99:94:72:f3:81:
         b5:b1:71:60:bf:38:2e:59:af:a4:6f:1a:17:66:44:bb:20:62:
         7f:70:01:86:f8:b6:e4:b1:f0:ff:ef:a6:39:ac:09:b5:90:b1:
         1a:ca:0a:d9:b3:2f:c9:65:ca:df:c4:a0:ad:b4:7b:1a:29:7a:
         41:6b:98:fb:cd:dd:e4:64:27:e8:7a:00:16:aa:90:4e:a6:51:
         8e:a4:e9:c6:b4:2a:b4:c2:f0:30:df:bf:11:db:c5:80:90:00:
         46:80:bf:7f:90:ea:20:c6:49:38:10:ba:e2:61:b6:f7:70:34:
         df:9a:aa:3b:fc:19:74:7e:15:24:7d:f2:df:f1:57:c2:58:1e:
         e6:04:aa:96:e0:72:42:25:0d:0e:32:dd:cf:70:d5:af:3c:7c:
         18:9a:dc:7a:ae:38:fa:5f:2c:4b:94:99:8c:b6:af:2a:82:71:
         af:a3:f9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:13 2025 by rpki-client