Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
File:                     qvIogBSZWTJzeuf5_CJN8QIUElU.mft (raw, json)
Hash identifier:          ywXOpyx3/P+lAzYAoW3A+5pF7oJERx1Uk0LmuJuf6r4=
Subject key identifier:   09:9F:46:AB:CD:BD:72:84:EE:13:F8:F0:F0:55:4F:AF:43:8E:FF:29
Authority key identifier: AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
Certificate issuer:       /CN=aaf2288014995932737ae7f9fc224df102141255
Certificate serial:       0194BCA9FA38EECE700117A390EA883C5DD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
Manifest number:          1165
Signing time:             Fri 31 Jan 2025 14:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:43 +0000
Files and hashes:         1: qvIogBSZWTJzeuf5_CJN8QIUElU.crl (hash: CPgB0hRR6GlPMQk7dLFgCbFVgoZmUEfPd9X50tpzCqc=)
                          2: ssFjFRP8rOyA12qsYqju5Tngnd4.roa (hash: hIS1+X5/5zlmutztUW28Al86ZCC1Pn71/f8lra8GU0U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:fa:38:ee:ce:70:01:17:a3:90:ea:88:3c:5d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf2288014995932737ae7f9fc224df102141255
        Validity
            Not Before: Jan 31 14:00:43 2025 GMT
            Not After : Feb  1 14:00:43 2025 GMT
        Subject: CN=099f46abcdbd7284ee13f8f0f0554faf438eff29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:af:c6:12:5c:20:07:89:07:c7:25:a5:81:8f:
                    1c:b8:73:73:3e:8f:22:77:7a:dd:bd:14:56:a0:54:
                    88:2b:fc:f8:ed:4d:01:e5:69:ad:7c:93:ae:95:a3:
                    87:0e:7a:36:3f:94:6b:b3:9b:70:aa:d2:d8:eb:bc:
                    8d:d5:8a:16:f1:56:1b:f1:d2:04:ab:fc:8f:67:7a:
                    19:78:d6:41:b3:8b:27:d6:b4:89:86:70:3f:ae:6e:
                    9b:f6:65:17:33:fd:63:b5:49:db:45:01:ba:af:03:
                    5f:e5:6b:df:fa:6c:28:f1:80:de:96:79:39:1f:04:
                    35:e5:56:bc:0f:a2:2c:1c:64:46:cf:bd:21:46:f9:
                    33:84:a8:f9:4f:33:8d:37:d3:cc:7d:8d:25:d3:7c:
                    d8:2a:31:d3:25:71:dd:9d:79:e7:bc:a8:9b:34:89:
                    89:e0:55:34:7f:b8:5b:9c:0a:6d:c0:7a:33:79:0b:
                    29:ed:8d:ff:8a:ef:e4:56:a0:e6:98:77:2d:f1:03:
                    e5:db:da:4f:00:2e:86:39:a2:55:53:a7:ac:23:1d:
                    81:11:89:aa:92:f3:bd:be:cd:67:06:42:ce:80:64:
                    4e:cc:76:2b:ab:95:37:bf:91:a2:fe:66:f4:3a:6e:
                    9e:05:c7:bc:64:11:5f:e3:eb:58:66:24:0d:60:f3:
                    e3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9F:46:AB:CD:BD:72:84:EE:13:F8:F0:F0:55:4F:AF:43:8E:FF:29
            X509v3 Authority Key Identifier:
                keyid:AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:9e:ee:f4:e5:68:30:3b:df:ff:6f:96:af:d7:f9:6f:ea:04:
         93:31:d5:1a:2e:34:fc:50:b3:29:1c:78:59:4a:f5:ad:37:43:
         88:01:6c:8f:33:1f:ff:7d:e7:39:57:f0:ee:13:62:cc:94:35:
         4d:ab:bc:ba:e8:dd:5d:d7:1b:67:86:24:1f:40:80:57:69:e0:
         bd:c1:41:35:af:64:bd:d4:4c:ec:ff:74:fc:a3:26:54:f8:d0:
         14:4e:66:6b:e0:a6:46:e5:56:57:73:e6:77:2f:99:29:89:cd:
         12:44:d9:49:65:d4:c5:f3:3d:e2:35:df:56:7a:73:5e:85:38:
         ac:85:82:c0:ef:c7:7a:8d:93:73:33:de:3e:47:36:5a:86:63:
         5b:f1:c7:88:72:02:f5:57:2e:c5:59:fa:c8:59:50:16:b4:ba:
         f7:f9:22:26:75:5f:eb:c5:dc:37:ea:49:5f:69:48:42:d9:a6:
         13:ca:1e:65:ef:26:2b:ed:6d:23:63:b8:26:8d:d1:6e:d8:6a:
         d1:c0:99:26:0d:ca:55:55:e2:5b:fc:b5:1c:12:02:42:ec:58:
         53:d4:64:aa:c8:18:e3:b4:a2:e9:e3:00:92:a4:ba:a5:fb:38:
         47:9e:25:0c:e0:c3:fe:67:78:4f:32:34:05:58:82:da:06:e7:
         e7:24:7a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:41:16 2025 by rpki-client