Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
File:                     eoBXqNht0zDzh4AfED8-u2_byqo.mft (raw, json)
Hash identifier:          HKJJbEpV6UFRyZAaeWkOcAFdTTXohQgWuvICfJ8vWjI=
Subject key identifier:   B2:32:B1:CC:35:4B:57:A8:66:EE:31:3A:28:95:62:EE:50:A0:36:E8
Authority key identifier: 7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
Certificate issuer:       /CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
Certificate serial:       0194BC3CA8F404404F1ACEE68642DFC32352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
Manifest number:          07DC
Signing time:             Fri 31 Jan 2025 12:01:19 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:19 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:19 +0000
Files and hashes:         1: HcO5cdSF05y0wg63MJNFAdh4QAo.roa (hash: Mz3glj/KonDBgt2SiP6Zk96rLbwRRRt7COjMo5lu2/M=)
                          2: eoBXqNht0zDzh4AfED8-u2_byqo.crl (hash: KJAUauoDgBHl4PDUykP/ACE372NNFjNmeOhvRJFZDvs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:a8:f4:04:40:4f:1a:ce:e6:86:42:df:c3:23:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
        Validity
            Not Before: Jan 31 12:01:19 2025 GMT
            Not After : Feb  1 12:01:19 2025 GMT
        Subject: CN=b232b1cc354b57a866ee313a289562ee50a036e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:40:f4:d9:27:23:02:14:06:45:a7:67:7d:
                    9d:83:37:b5:9e:74:3f:de:e3:85:41:50:75:58:df:
                    96:b3:ab:1e:b1:45:70:91:74:f1:5b:9f:07:c3:6d:
                    32:fc:1c:d4:31:e7:7b:74:49:0d:18:48:79:88:b2:
                    22:db:5f:8e:2b:3d:c0:79:c6:53:3f:89:55:9a:f1:
                    d3:50:ca:3c:6b:17:81:c8:62:91:5f:db:1d:10:ea:
                    ef:91:f1:ed:4f:26:55:55:45:3a:2c:d3:f5:56:8f:
                    d9:fe:ce:48:78:87:f6:54:ba:57:39:97:fd:45:00:
                    3f:86:4a:6b:2e:af:ff:72:19:9e:ba:28:a8:b6:43:
                    4d:cd:1e:57:ab:f9:4d:f9:c4:cd:c0:af:55:f5:22:
                    b4:64:2e:0a:9e:f1:10:70:5f:1e:be:f5:ff:29:29:
                    f4:c7:f3:b8:5b:24:a3:29:8a:d6:04:4a:b0:60:dc:
                    ec:11:63:31:77:ee:79:18:5a:75:0a:f3:db:b7:7c:
                    8f:b3:f0:99:af:e3:e4:07:06:2f:c9:fb:e7:76:2f:
                    b7:85:a7:60:2e:a2:5a:9c:f9:23:30:18:12:72:f0:
                    ba:6e:05:10:f0:ab:d3:45:e1:39:30:d6:83:9d:53:
                    f3:fb:b6:73:b7:28:a9:87:23:f2:38:63:b9:21:96:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:32:B1:CC:35:4B:57:A8:66:EE:31:3A:28:95:62:EE:50:A0:36:E8
            X509v3 Authority Key Identifier:
                keyid:7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5e:68:92:d0:85:22:0b:55:92:38:aa:07:ab:df:3e:e7:3a:
         96:54:d8:4c:db:31:e8:87:c7:d0:3c:3f:45:fa:8b:2b:28:24:
         8f:6e:76:68:9b:90:bf:9b:b0:ff:d2:9f:c5:87:f3:6c:c2:55:
         3c:90:37:34:b9:e4:13:1a:6b:15:40:da:19:0a:a5:c7:2c:de:
         ed:38:61:6d:1d:49:bc:6f:46:75:44:8a:f9:63:29:06:19:f9:
         a6:92:70:ea:ec:43:29:24:a5:ef:2d:a4:c8:18:86:0c:b1:bd:
         7f:9f:17:dc:55:fe:8c:1c:18:70:00:ab:0c:43:73:4b:2e:48:
         d6:46:5e:e4:d8:fa:06:66:a7:4e:1a:ba:41:6f:74:98:fb:a6:
         6c:a3:22:5c:c1:64:11:08:a9:dd:37:c0:06:cf:80:79:14:72:
         b5:ad:6d:32:7c:4e:69:9a:81:2e:91:1b:87:18:a3:a0:1c:98:
         55:74:b1:2e:ac:05:5b:cf:d8:89:13:c5:47:44:71:ac:65:ac:
         80:c0:17:8a:59:4f:3b:96:b5:eb:1c:eb:4f:a3:46:a7:7f:3c:
         b1:5d:72:fc:ef:d9:03:6d:78:68:62:8d:a3:29:1a:2a:52:75:
         a5:c9:a4:13:4f:79:f5:87:d5:65:e5:8a:d6:8a:80:26:81:47:
         3a:0e:90:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:21 2025 by rpki-client