Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File:                     tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier:          t38CPOFCpB9A8b7rd3NtyVAuH+WIF7OQF8umq+YQ5/A=
Subject key identifier:   7F:F2:E0:27:DC:B7:47:49:BA:F0:88:79:26:F2:D0:4E:40:D6:1D:22
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer:       /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial:       0194BC3C84337DCDC7AD00C09B582AD57337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number:          0113
Signing time:             Fri 31 Jan 2025 12:01:10 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:10 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:10 +0000
Files and hashes:         1: LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa (hash: LxI9ZJlsAuyHn6pxrNHJlN790aDbGyBNqZLVE/LhQDs=)
                          2: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: xbl1wzWI9w0I51Jzuj3hO7z+LZt6tU8aGLfZ75MgkVo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:84:33:7d:cd:c7:ad:00:c0:9b:58:2a:d5:73:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
        Validity
            Not Before: Jan 31 12:01:10 2025 GMT
            Not After : Feb  1 12:01:10 2025 GMT
        Subject: CN=7ff2e027dcb74749baf0887926f2d04e40d61d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:41:18:c4:c3:6c:85:31:20:9e:3f:14:6e:28:
                    f7:a7:5c:93:88:77:3b:a0:f1:38:ed:ca:1b:26:e3:
                    47:41:30:f4:8d:96:1a:b4:5a:b6:a1:4c:35:3e:a3:
                    c0:5e:87:a6:99:e1:09:7f:ef:77:06:02:d9:be:51:
                    de:f3:b9:bc:87:f0:4a:5c:3e:ce:81:e3:eb:d9:af:
                    10:41:db:64:5a:d3:a9:d5:ac:f3:5a:71:35:5c:ca:
                    ed:37:c3:48:dd:4f:9e:64:7b:82:32:6c:d0:49:fa:
                    04:69:5b:6e:d1:e1:c9:21:71:01:48:63:d2:b9:1c:
                    0a:7a:a5:80:6e:ab:08:61:5b:19:f0:30:27:94:0f:
                    3f:63:b5:eb:d5:fb:1c:68:2e:1d:a9:c5:86:56:66:
                    0b:2d:c4:09:5a:e1:9f:bf:3b:34:06:2c:01:86:e9:
                    22:8b:15:22:4c:13:32:8c:1f:26:a8:0c:9e:5a:58:
                    7d:bd:6f:6b:65:af:b9:60:16:4c:b8:33:8c:d1:59:
                    60:f2:e6:fe:17:0d:26:3f:8c:20:74:ac:8f:dd:e9:
                    31:e7:35:a1:4c:9b:e6:08:9f:f5:a6:db:02:7b:c9:
                    38:4e:b0:b2:a3:40:59:a6:28:bd:0e:f0:f9:b6:7a:
                    38:9f:a4:22:08:3c:0a:e6:95:85:b3:1c:06:5d:8e:
                    a9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F2:E0:27:DC:B7:47:49:BA:F0:88:79:26:F2:D0:4E:40:D6:1D:22
            X509v3 Authority Key Identifier:
                keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:28:76:e2:54:e9:c4:9a:1a:55:7d:89:8d:f0:c1:dc:b7:c0:
         4e:30:cd:6f:13:6f:68:50:17:e1:2f:99:74:ef:10:c1:cf:2f:
         e1:d2:6f:60:04:ff:a3:b8:ee:9b:17:d7:6b:7c:64:cd:4d:93:
         b1:d7:02:0b:a8:fb:06:86:eb:0e:11:60:5e:cb:d5:28:7e:22:
         89:d6:a1:e3:57:41:e5:bf:20:2e:d4:28:c9:c3:8d:96:73:b5:
         3a:a1:72:35:44:4b:87:fb:0d:d0:64:74:ca:8b:7a:3a:bd:e9:
         1d:28:16:60:a1:d7:a2:57:ec:49:8c:05:f6:c1:3f:df:f4:b0:
         67:c4:1c:e1:4d:8d:c1:86:f1:ba:8a:1c:f4:c5:a9:69:90:b2:
         4e:df:b3:1c:f1:cd:bc:04:6d:55:de:d2:13:0f:6f:c7:56:5c:
         f3:e9:f8:13:54:97:8a:fc:2c:f6:5c:27:90:91:9c:13:3e:09:
         5c:55:cc:b0:28:4e:e0:82:dc:52:02:3d:fe:2b:26:f6:bd:9d:
         3a:d3:c9:19:d6:8f:d1:9f:5e:e8:a9:fa:78:6f:fa:67:91:af:
         3d:9c:f5:13:80:29:38:67:fa:54:bd:c0:03:e5:b1:c5:7d:62:
         99:58:8c:87:77:de:3c:b9:5b:db:81:61:0d:31:9b:b4:01:f1:
         f5:36:3f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:21:40 2025 by rpki-client