Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
File:                     Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft (raw, json)
Hash identifier:          q389ZfSTlIFPD+tSNwked/5RZI4FlWNNEFy2DCkgicg=
Subject key identifier:   83:4A:20:C0:87:8C:0F:1F:EA:4B:3C:7F:7B:A0:D8:D3:E3:10:E2:B8
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Certificate issuer:       /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial:       0194BD4EA5B6522821F807E5B36BE291D935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 17:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:35 +0000
Files and hashes:         1: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl (hash: LXLOoUsY2XJ7F779lv1/id4RbrNkGECwV08peWDDmlY=)
                          2: ifWZmIX4SXkuGkJP6QgKSkmuMBc.roa (hash: nU4OGwo7QVYE2TFfLmXken2fHAzhkJ4DtS2BG5Z6bzw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:a5:b6:52:28:21:f8:07:e5:b3:6b:e2:91:d9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
        Validity
            Not Before: Jan 31 17:00:35 2025 GMT
            Not After : Feb  1 17:00:35 2025 GMT
        Subject: CN=834a20c0878c0f1fea4b3c7f7ba0d8d3e310e2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:88:9e:1d:8d:33:a0:e6:94:70:73:87:2f:0f:
                    7e:f6:d7:2b:bc:8a:4c:2c:42:e9:6b:8f:31:4e:5e:
                    3e:ca:3d:f0:ef:9c:06:40:42:00:e0:e4:c5:7f:af:
                    07:97:dd:0e:ca:0a:47:4f:3e:71:76:c7:56:45:73:
                    d5:c2:b9:81:72:41:a5:7b:6a:e2:17:74:cf:ab:05:
                    61:86:fb:cf:db:db:b8:66:eb:8a:e7:05:eb:41:9d:
                    6f:1b:f4:af:47:40:d4:66:ac:e4:b8:b1:54:58:5a:
                    b7:10:88:f1:2e:ba:64:1e:fc:ad:ef:73:25:da:79:
                    18:ca:26:8a:80:da:d0:56:a5:a3:0d:6e:9b:50:26:
                    f9:28:8d:01:69:98:78:59:24:4e:76:1c:9f:50:fa:
                    38:53:26:a2:4a:77:cc:87:13:5f:b7:8a:b6:68:4e:
                    33:2e:70:b1:a8:4c:51:b7:f0:7c:25:61:a2:1e:61:
                    5a:8e:f4:58:7b:54:27:ed:64:0c:c7:28:6f:a7:07:
                    dd:f9:a5:1a:26:11:9e:d6:3f:5f:f5:a8:f6:dd:54:
                    15:bb:8d:f5:3d:57:b2:75:7c:8a:ad:92:b6:1d:f7:
                    ee:64:61:64:39:63:ef:5c:48:ec:06:5e:04:ab:b7:
                    78:f2:af:11:15:e3:96:32:f0:91:55:99:6a:ab:3a:
                    d1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4A:20:C0:87:8C:0F:1F:EA:4B:3C:7F:7B:A0:D8:D3:E3:10:E2:B8
            X509v3 Authority Key Identifier:
                keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:4a:2e:ca:46:b3:14:e0:58:39:41:b1:70:47:f4:ef:69:ca:
         d7:71:c5:c2:da:c6:54:b6:45:f8:9f:6b:bd:62:04:3b:e6:5d:
         77:dc:cf:2b:7c:b8:32:02:ae:55:6a:b9:c1:76:de:21:77:dc:
         73:83:26:a6:53:dd:15:e8:a8:03:74:18:f8:25:7a:e5:ea:41:
         4f:e8:a8:42:69:3b:2c:be:e3:45:ed:6a:dd:94:7e:db:59:1e:
         9d:a8:3f:14:46:06:e0:26:7d:5c:c7:de:81:54:43:4a:58:f3:
         57:16:b4:fd:47:09:de:97:63:2e:44:75:b8:1a:06:e7:ba:b0:
         a6:b0:9a:d2:78:13:ef:9d:a4:6a:e3:18:15:00:8a:b0:f8:4c:
         f7:01:f4:1e:69:81:67:11:10:6a:80:99:36:06:b5:e0:71:26:
         16:8a:01:99:a4:b4:32:55:bc:08:40:55:6b:e9:d8:ff:ca:57:
         3d:ac:5c:71:d5:0a:96:6d:22:51:ee:7f:e9:04:45:8c:c0:7d:
         ec:05:0f:6d:f3:0b:72:55:93:54:9e:b2:03:e0:b0:cb:88:20:
         ed:e8:f5:13:2b:c3:b3:62:a5:bb:d0:50:c9:6e:69:ec:b9:f5:
         e8:28:55:1b:31:8e:a0:d3:1b:34:f4:7d:90:62:d6:92:fb:a2:
         92:c1:a2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:40 2025 by rpki-client