Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
File:                     u_e8bHyTo8-x4lu778TyB64lvaU.mft (raw, json)
Hash identifier:          54IGr36W7A4+wVT2Pbi7JTLnLQUJmzoI7TUxK28tzBg=
Subject key identifier:   9A:52:29:49:FF:29:4A:AB:3C:ED:50:20:15:B7:14:51:67:26:93:4F
Authority key identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
Certificate issuer:       /CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Certificate serial:       0194BC72F2B9190C5691EDC4045F3D738BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
Manifest number:          075C
Signing time:             Fri 31 Jan 2025 13:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:37 +0000
Files and hashes:         1: BbjjnTO6x8pCO-c9XIXawU4Q-Wg.roa (hash: O0QT5VY+thGDoU+G5JqnH6rDs/DiZAhj1p6YD6BBCu4=)
                          2: u_e8bHyTo8-x4lu778TyB64lvaU.crl (hash: bgqMxKTclSbiidqI8HKG2gwD8MZ+cqn5pki8oo46zwc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:f2:b9:19:0c:56:91:ed:c4:04:5f:3d:73:8b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
        Validity
            Not Before: Jan 31 13:00:37 2025 GMT
            Not After : Feb  1 13:00:37 2025 GMT
        Subject: CN=9a522949ff294aab3ced502015b714516726934f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:19:1c:b6:c9:fe:60:03:d3:8a:da:f4:45:c2:
                    8a:95:51:f8:14:e9:86:91:8f:f0:30:90:d4:93:c1:
                    6d:e1:04:a1:3d:3f:ee:24:0b:99:df:3b:5a:5a:88:
                    80:a2:61:45:0c:4e:53:b5:93:94:66:ef:87:7c:f7:
                    f6:7b:5e:c8:24:b5:cd:83:7a:a1:f8:46:c1:91:37:
                    80:f5:61:cb:23:38:a9:45:17:e3:7f:6d:5b:ba:fb:
                    5d:7a:db:be:13:74:e6:5d:72:94:cc:54:0e:5f:70:
                    5e:61:6c:9d:ff:b4:0e:36:29:b6:95:34:6b:72:46:
                    77:7e:81:22:93:9d:a6:2b:51:ae:be:60:e2:54:bd:
                    27:45:f3:af:59:8a:f5:37:67:56:96:77:19:8f:34:
                    be:c8:53:3a:95:d1:69:5e:40:e1:38:82:df:6a:10:
                    b4:9d:78:25:b0:d3:44:fd:4a:af:9b:8b:a2:0f:f9:
                    69:c6:b4:f0:d0:12:c7:2f:b2:10:0e:76:79:2d:19:
                    1c:ab:94:2c:0f:ee:6f:38:36:ca:28:64:bf:4e:20:
                    64:8c:b9:0f:32:7c:e6:e1:8d:c9:bd:c2:1b:b2:7e:
                    5c:b2:5f:ed:76:34:6d:5a:7b:7a:76:2b:69:a4:70:
                    44:48:e8:4a:f6:9c:02:af:03:2b:5d:1b:62:95:32:
                    62:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:52:29:49:FF:29:4A:AB:3C:ED:50:20:15:B7:14:51:67:26:93:4F
            X509v3 Authority Key Identifier:
                keyid:BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:74:d6:cf:9c:d6:5e:af:16:7f:d1:85:e9:e1:99:25:5a:39:
         eb:76:8b:a5:19:48:36:93:4b:78:53:c4:ee:f0:c7:e9:73:0d:
         94:d1:76:89:5c:f9:82:8c:c6:21:7b:7a:df:9b:91:14:77:ee:
         cc:5a:54:0b:00:c6:4b:7d:7d:ea:57:b5:b3:f7:20:fe:50:ad:
         2c:90:f5:c6:6f:cc:f9:7c:62:62:c8:69:0f:b6:af:fa:80:de:
         95:97:33:39:42:43:11:ff:f1:07:2a:3b:fc:9e:61:7b:25:e3:
         3e:b9:80:00:54:70:35:66:8b:b2:d5:36:dc:9d:d0:7b:e4:38:
         c6:02:52:38:f2:6c:dd:d2:2d:38:8c:1f:31:70:6e:19:d5:d3:
         15:2e:67:b2:2d:31:96:a7:75:27:7f:2d:e4:b3:8c:cb:a1:8a:
         55:58:51:ca:bb:23:53:24:45:c7:64:d9:42:d6:30:92:31:90:
         55:1e:ff:ab:7f:79:f9:4a:fd:67:d6:1a:79:c2:81:9c:7a:a2:
         52:23:ea:cf:ee:39:ea:2a:ab:9f:92:cd:41:b0:55:3e:be:4a:
         ae:1e:53:12:cc:e5:c7:56:72:21:d3:ce:58:54:d6:f0:50:c1:
         31:62:38:7d:fc:b2:4a:f2:7e:8b:ac:cd:a0:db:b3:90:1b:3f:
         20:2f:4a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:37 2025 by rpki-client