Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
File:                     apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json)
Hash identifier:          G0PSiLLNniubHlnEf5qNFy1AaHMLrGabGVpMunKOCvE=
Subject key identifier:   EE:4A:A6:6D:27:04:A9:5F:07:0D:51:12:32:FF:A0:9C:01:28:93:32
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Certificate issuer:       /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial:       0194BC3C71F558F9CE515D193C188D03C39F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
Manifest number:          017C
Signing time:             Fri 31 Jan 2025 12:01:05 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:05 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:05 +0000
Files and hashes:         1: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: 93MNENGBriRy8EvvFiZ/WltpnfDT1C3VZ5OlGM9lPu4=)
                          2: ei2AQFZeqEcoYtSC5TN3lwP2gbM.roa (hash: u56J4AXZH3zEF0D/VP7y3pv730bb3tumcg13gKuxn9E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:71:f5:58:f9:ce:51:5d:19:3c:18:8d:03:c3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
        Validity
            Not Before: Jan 31 12:01:05 2025 GMT
            Not After : Feb  1 12:01:05 2025 GMT
        Subject: CN=ee4aa66d2704a95f070d511232ffa09c01289332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:00:80:34:ed:ea:50:a4:7d:19:c3:58:4b:
                    31:01:eb:1a:6f:9d:32:6c:dd:99:8f:1f:e7:a9:b8:
                    28:17:64:8b:e4:91:32:00:2b:69:77:3f:7e:d0:b4:
                    e7:99:6c:93:34:5b:53:fc:2f:f2:b2:7f:46:c9:bc:
                    7c:41:16:95:56:5b:b3:61:b4:9f:65:6a:81:b8:4d:
                    e9:e0:9f:5b:22:8a:0c:e8:9d:25:dd:1e:af:45:e3:
                    2e:01:fd:af:f0:0a:46:c9:00:a0:68:9d:4d:4d:9a:
                    1c:47:e3:9a:20:6f:c5:47:5b:db:fc:b9:bc:29:99:
                    32:80:5e:a7:12:d6:77:12:7a:fc:53:b6:3f:d1:72:
                    99:0e:89:e2:42:8e:18:86:9b:b0:69:82:c0:f6:0a:
                    e8:e3:e0:b3:6a:bd:99:9d:d3:5a:4f:eb:bb:4f:57:
                    3c:f9:de:d1:ce:1f:cc:00:1d:cf:69:8f:01:93:3b:
                    a9:ad:0a:c4:65:2a:30:9a:09:c9:a1:91:7e:22:75:
                    f7:b3:23:19:f8:7f:23:5d:3c:ef:2a:0a:17:ea:a3:
                    46:4a:28:ad:84:13:a1:5b:fc:9c:69:1b:8d:7d:a9:
                    52:10:4b:2f:e6:da:fa:d8:d4:39:24:66:6d:19:9d:
                    93:ea:f7:d6:0c:ba:20:12:cf:2c:2e:57:19:9e:a7:
                    40:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4A:A6:6D:27:04:A9:5F:07:0D:51:12:32:FF:A0:9C:01:28:93:32
            X509v3 Authority Key Identifier:
                keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:81:67:d6:f4:d2:a6:44:11:c8:f6:e0:c8:9f:ae:f4:0f:75:
         d9:29:2b:be:98:bb:b3:35:ac:19:21:11:87:16:7a:95:27:d7:
         e9:2a:81:44:65:f9:6a:69:17:ce:e2:9e:88:6b:bd:a0:0d:ab:
         60:15:12:c6:4d:50:8c:d3:17:24:6a:5c:13:fb:5c:29:6e:b1:
         3e:81:cd:e7:06:8a:6a:39:4b:73:a2:29:6e:a0:37:7a:8f:bd:
         9c:c5:de:c0:76:ce:13:6f:62:ee:98:e0:69:38:54:de:69:5c:
         46:46:ec:82:e1:c7:b2:e8:9a:e3:5e:57:27:f8:fa:b4:7f:00:
         af:13:a3:4d:54:5b:5b:e1:a3:35:0a:4b:5b:5d:b1:42:87:7b:
         95:dc:b5:35:03:59:1d:1b:18:d5:bd:4f:58:e7:79:6f:0f:0c:
         e2:f0:eb:c9:21:70:e1:87:1e:ec:8e:ed:7f:8c:d2:1d:d1:36:
         93:9f:43:68:ff:e2:52:15:77:20:a9:f7:46:7a:d4:e7:82:84:
         14:0c:bc:da:d0:5a:e2:c0:88:a7:85:6f:e8:33:3e:b7:75:bd:
         ce:22:74:42:0f:8a:62:ea:89:81:16:41:47:43:e5:3a:0b:d5:
         81:71:68:99:68:34:df:3a:eb:d5:91:f4:c9:77:47:15:a1:b5:
         cd:6f:23:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:31 2025 by rpki-client