Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
File:                     sda67LY65G_uowyrhiHUbFn3KAg.mft (raw, json)
Hash identifier:          sfgcG9RBYhrLQoCfLTQXVsRFyUeIeV/+dvWFpdVzAkQ=
Subject key identifier:   FD:A9:C7:D5:D2:28:02:ED:CC:85:29:D8:F8:77:D8:78:97:CF:85:98
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Certificate issuer:       /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial:       0194BD4E60F54CD83007798CB8F43CCCE437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
Manifest number:          117C
Signing time:             Fri 31 Jan 2025 17:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:17 +0000
Files and hashes:         1: LM0g69HtGp_batQfV5x1NEUMmOk.roa (hash: 7VtBpd+wuDX24L0fq4Y7fsMl9oygXrzXXYzNLlqhtLg=)
                          2: sda67LY65G_uowyrhiHUbFn3KAg.crl (hash: 7uWNW+9sEBzrXhePfbp5K2kbWNuHN5Aa5Tjyvre/lfM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:60:f5:4c:d8:30:07:79:8c:b8:f4:3c:cc:e4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
        Validity
            Not Before: Jan 31 17:00:17 2025 GMT
            Not After : Feb  1 17:00:17 2025 GMT
        Subject: CN=fda9c7d5d22802edcc8529d8f877d87897cf8598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bc:49:69:40:73:5c:3c:7d:e1:53:b9:15:c5:
                    77:e1:f7:3a:e3:c4:1e:3d:d9:4c:a4:b5:e4:c9:20:
                    f6:5c:e7:00:ca:af:c4:bb:d4:59:20:e3:e1:7d:39:
                    73:d2:ea:5b:3c:56:74:6b:68:3b:a1:71:18:78:a6:
                    a3:14:f1:e0:31:61:60:40:8b:f9:15:b4:42:19:b2:
                    b9:f6:c6:6d:df:1d:67:3a:38:3b:f1:fb:40:63:78:
                    48:28:34:21:28:c4:f1:1f:8e:16:15:af:53:bf:b7:
                    91:c3:a5:d4:3e:ef:5d:f4:8c:ca:ce:fd:1b:01:8f:
                    7c:4f:33:95:e5:d2:b5:d7:b8:92:bb:24:a5:dc:96:
                    da:f0:fd:99:f3:d4:df:de:45:a4:d1:41:1c:b3:09:
                    28:47:6f:62:04:4e:43:c1:90:75:e4:e1:57:ec:5e:
                    95:09:e0:bd:d0:f8:5c:94:5d:72:62:26:b3:98:41:
                    e3:37:08:e1:81:20:8f:e7:c1:13:14:9a:10:e4:ac:
                    6b:c8:0e:5b:f7:81:22:9b:0e:be:94:bf:3d:42:60:
                    d4:2f:61:47:53:04:b1:bb:0d:47:18:d4:dc:62:23:
                    b3:a9:36:fc:b0:3e:98:ed:5a:64:1f:1a:01:2f:45:
                    0a:d9:ca:79:f0:20:14:f7:88:37:2d:74:d9:09:e6:
                    4a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A9:C7:D5:D2:28:02:ED:CC:85:29:D8:F8:77:D8:78:97:CF:85:98
            X509v3 Authority Key Identifier:
                keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c5:57:06:55:4a:ce:0b:96:47:a9:32:dc:49:52:8a:e3:a7:
         e3:c6:40:5f:d0:01:2c:fc:96:6a:42:6b:54:26:9c:ae:42:4d:
         ec:75:72:95:1e:fb:14:31:9a:30:ee:99:50:fb:61:1d:f4:64:
         1e:51:36:5c:af:ac:4c:c0:79:62:8b:1f:ba:bb:87:13:f0:59:
         0c:5a:79:44:6a:f8:fa:a2:10:85:0e:75:52:33:6f:e6:3f:9d:
         ad:70:42:a7:8d:e1:0c:84:3e:30:c8:9f:6e:2b:1c:51:cc:45:
         c6:8f:37:ec:8c:84:6f:ef:5c:70:bd:5a:2a:82:22:2c:f4:14:
         e4:c8:dc:5b:a3:6e:02:25:35:c8:59:fe:9a:1b:e3:08:ea:da:
         8d:a3:7d:a9:a9:9e:cd:95:a5:aa:80:1f:fb:56:86:7c:41:aa:
         32:0d:2d:13:69:dd:4d:61:82:e7:44:af:a4:0f:5a:8f:2e:7e:
         8d:86:23:68:8e:2b:41:67:13:6d:61:41:f9:7b:2f:7a:0d:41:
         d8:b6:45:43:95:32:00:b3:58:34:de:22:5d:83:e5:65:84:5a:
         ef:34:1a:3e:b8:32:37:21:2f:32:0e:4b:91:02:c9:08:ab:1f:
         f0:00:14:2b:b3:d0:db:70:42:14:d9:11:68:63:87:b6:43:4b:
         29:0b:9c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:18:05 2025 by rpki-client