Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
File:                     JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json)
Hash identifier:          rxaUzSjpkmWf/ltIWHkgNbjQKZmbELodOF6T2e1m38c=
Subject key identifier:   65:11:5E:6E:91:51:32:60:AA:14:8E:7C:0E:6B:D6:AD:D3:95:08:07
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Certificate issuer:       /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial:       0194BD8576E70445DD226A29E2411EAB6440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
Manifest number:          0922
Signing time:             Fri 31 Jan 2025 18:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:27 +0000
Files and hashes:         1: EGBRjPl07LC9IiSKlWfhoU-_Crk.roa (hash: bOSVTvIZ5LKS962rF/GAi5VGVNIMkbk2qTb5VU4uyO0=)
                          2: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: RwuoaLKZDuwsg9Luza0IgRd3aydXnP/JqSyRbQ4risE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:76:e7:04:45:dd:22:6a:29:e2:41:1e:ab:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
        Validity
            Not Before: Jan 31 18:00:27 2025 GMT
            Not After : Feb  1 18:00:27 2025 GMT
        Subject: CN=65115e6e91513260aa148e7c0e6bd6add3950807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2c:15:fd:91:7a:a8:63:61:d6:46:6b:69:b3:
                    f3:ce:77:50:6c:8a:36:2c:f4:bb:4f:d1:d9:10:92:
                    7d:f3:b5:a0:ce:39:bc:c3:c4:d6:5e:11:a3:ba:d2:
                    34:ba:b4:ab:6d:c4:53:ef:54:f6:1f:8d:9e:c3:0e:
                    2e:eb:40:7f:75:0f:0d:53:8a:a5:69:d8:e2:aa:b0:
                    bb:18:2a:dc:0d:03:11:f8:02:68:73:94:a2:46:f1:
                    5f:ae:39:f7:e1:b8:51:cd:32:d9:5c:8d:f3:c2:7d:
                    25:68:fa:61:54:26:81:c1:5b:14:da:90:3c:b9:c7:
                    aa:bf:e2:70:39:92:0d:24:96:4c:48:53:8a:7e:49:
                    a2:dc:a3:e2:82:9e:57:6c:2e:3e:6c:e6:87:ad:11:
                    22:c9:e0:48:28:d1:bd:ee:9b:2d:f9:f9:86:85:e3:
                    6f:25:08:24:2d:48:1b:c6:51:1f:18:0e:17:5f:8b:
                    79:89:84:b5:df:04:0a:5e:ff:5f:22:27:04:b7:bb:
                    4e:f0:e7:53:15:fe:73:52:e4:25:0f:9e:56:a5:93:
                    96:79:a2:3c:8b:09:9a:17:74:4f:14:1f:fe:84:df:
                    48:6e:c6:3b:7b:b1:bc:01:43:8f:bc:9a:7b:c4:de:
                    7f:94:1e:a4:c8:92:69:e8:03:8d:fd:14:94:04:e0:
                    6f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:11:5E:6E:91:51:32:60:AA:14:8E:7C:0E:6B:D6:AD:D3:95:08:07
            X509v3 Authority Key Identifier:
                keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:38:41:19:bb:41:ba:eb:be:b2:d5:27:56:7f:80:ba:11:ae:
         6b:67:55:9c:15:59:9f:e3:f6:11:c2:e6:0f:b4:40:09:bc:0f:
         44:32:0a:9f:7d:51:bc:c7:29:0e:c3:bd:6b:a6:32:be:b4:15:
         ec:7d:cb:d3:fd:11:98:92:ee:a1:5d:96:1e:c3:10:c7:ea:2f:
         89:82:d7:87:c5:95:d3:2a:47:f2:b6:bf:8a:b9:2d:d7:a5:bf:
         a7:36:d6:ca:c4:7e:be:49:d7:06:47:d4:29:7b:98:79:05:7a:
         1d:41:1c:05:06:56:ba:0a:3a:f5:71:ea:5f:ea:46:51:e0:d1:
         ff:c8:74:47:f7:d6:0c:be:1b:5b:48:ad:79:49:a6:8a:21:db:
         c0:36:1a:cb:38:9b:dd:49:77:bd:3f:48:c8:b7:81:a8:00:a8:
         61:db:55:a8:24:ca:63:89:79:2b:4d:b5:fb:a0:82:ba:44:66:
         cf:ea:45:d7:63:12:6c:a8:57:90:8f:3c:a1:f0:05:2d:e5:77:
         72:12:15:03:bc:57:9d:52:c8:71:35:02:0f:e5:c3:9f:44:b2:
         3f:0e:95:29:dd:1c:0a:16:d0:27:d8:92:60:a3:5e:9b:87:ab:
         cc:3f:18:97:76:5e:a4:9e:00:96:1f:dc:32:9f:dd:34:11:34:
         bc:16:b9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:49 2025 by rpki-client