Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
File:                     cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json)
Hash identifier:          6PzSR+ATmFvYC6bz+kFpUL7DDMh33HLbA4/l/sS+Igs=
Subject key identifier:   6E:56:F5:BC:0D:16:1F:B9:2B:C6:6D:AA:A0:0E:BB:13:66:0C:7B:B2
Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Certificate issuer:       /CN=705b507a1019f7c465737dc59736c06fdddcefe7
Certificate serial:       0194BC3C49E666585D227F478487F3553A2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
Manifest number:          0430
Signing time:             Fri 31 Jan 2025 12:00:55 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:55 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:55 +0000
Files and hashes:         1: I35QWc2nLFeohwH6DngqA3KZZFg.roa (hash: aZgBsm07l1h8BIWKajFFEnRBCv4q5gOkXWvMXnSlf3g=)
                          2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: VrC6b6yFL+ysPGSnquqeN5EG2PZvGrKo2zmjBaKTVlI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:49:e6:66:58:5d:22:7f:47:84:87:f3:55:3a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7
        Validity
            Not Before: Jan 31 12:00:55 2025 GMT
            Not After : Feb  1 12:00:55 2025 GMT
        Subject: CN=6e56f5bc0d161fb92bc66daaa00ebb13660c7bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:79:ed:8d:e2:c1:b3:54:04:07:3a:2e:3f:
                    9a:a5:75:ec:6a:4d:63:d9:20:ff:5d:95:3f:ea:98:
                    77:75:e1:69:3a:3b:f9:5f:64:16:90:0e:08:52:b3:
                    b2:16:98:84:fe:d4:74:ec:8c:d1:f0:a6:5b:65:c9:
                    6d:c2:73:e6:8e:21:05:bf:f1:ac:d8:37:c5:2d:60:
                    16:64:5f:c8:c7:8f:89:32:0c:1c:39:e6:67:c1:6e:
                    2b:14:ae:3b:4f:5d:1b:0c:57:07:7d:9e:81:65:a4:
                    b1:fe:34:9a:11:f8:1d:a2:b2:92:27:ec:03:1d:54:
                    39:93:78:40:c6:e2:32:93:15:35:29:93:99:8f:33:
                    de:21:ca:38:64:28:8a:50:92:a7:10:10:89:3e:7f:
                    3e:01:b3:91:39:af:03:a1:f4:26:48:87:ff:2a:33:
                    72:d7:54:ca:de:6a:25:1f:43:a5:3d:20:7e:f4:4c:
                    fe:8c:66:88:0b:f4:48:a4:3d:10:f6:ea:b6:50:85:
                    31:ec:64:66:5a:50:69:1f:6e:cd:0b:ad:50:ee:e8:
                    d9:03:f3:1b:53:73:2c:f0:f1:be:8a:7a:e6:44:3a:
                    0a:9a:65:15:33:03:1d:df:ba:9c:65:c1:a6:f8:0e:
                    e0:a5:0b:b0:b7:4c:70:f2:4c:2f:98:72:50:79:7d:
                    be:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:56:F5:BC:0D:16:1F:B9:2B:C6:6D:AA:A0:0E:BB:13:66:0C:7B:B2
            X509v3 Authority Key Identifier:
                keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d1:40:5d:80:01:6a:d6:a7:70:5d:ba:c2:72:91:4e:f6:62:
         0e:1e:a7:5e:45:89:f0:6d:d9:a0:00:b2:46:f7:c6:8c:84:a3:
         ad:0a:e9:e3:09:03:f0:be:62:ab:3b:81:89:9f:5e:65:d4:3f:
         4c:79:c4:af:5b:91:aa:a0:ac:5e:35:8b:b0:75:5b:5d:fd:85:
         26:d0:54:94:f5:e9:42:c5:8a:98:7d:87:08:38:6b:fe:2b:d6:
         43:fb:8e:b1:0b:8a:2c:54:26:d9:61:c9:e5:88:ab:7f:4c:70:
         b3:a7:c0:c0:54:cf:fd:1e:49:fa:d8:c2:9a:1b:78:c3:c2:f8:
         75:18:33:8c:e1:dd:25:ae:0b:3d:c3:f1:b0:4a:ee:31:66:4e:
         76:fe:93:eb:90:67:4f:90:a5:81:74:8e:84:49:e8:48:65:1f:
         9d:de:e4:49:c2:78:6d:d0:b9:a5:84:02:56:2a:e9:7c:14:b5:
         bb:44:4a:45:4c:5b:27:2c:e0:8b:ea:62:e4:04:c8:f4:fe:8b:
         92:90:7c:ba:45:6c:bc:b1:f0:6d:fc:d1:c0:d6:e5:97:af:ff:
         ae:31:63:ba:7e:4d:94:ba:28:e0:13:1f:b3:77:25:1f:3b:81:
         d1:fa:c5:4a:b8:6b:cd:73:f7:e5:a6:74:2e:99:db:46:5a:f2:
         7e:0a:85:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:25:03 2025 by rpki-client