Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
File:                     e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft (raw, json)
Hash identifier:          42abu67x7DoNYjowwgq1tHOGylkYHQdoFSsKBT1vDzE=
Subject key identifier:   2A:3C:6C:D4:29:98:BD:43:7A:AA:54:1B:38:C6:D9:E2:0F:50:DF:82
Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
Certificate issuer:       /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Certificate serial:       0194BD17694116337D6E52FE0F5D63E00CFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
Manifest number:          0A26
Signing time:             Fri 31 Jan 2025 16:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:15 +0000
Files and hashes:         1: FsJ3zITAe84c1D5csHES5hjciz4.roa (hash: YNKbDTh8tdjiYkEUi21i1eLdfiJOkLdo8vV3R3CkNJc=)
                          2: Misdpg6iWwUm88Ty_fc4pFhMjYc.roa (hash: cciFC3d1gK2Xqhaij9/j0Cvs/RVlR1idmhLYdfWiw1Q=)
                          3: P8Eoq9RR0aGjSpGwX1OgPUIROxQ.roa (hash: s3K98YwNuWaxYBAIxIP0FKSAzloX75bONeEAcTalG7c=)
                          4: Zokk9-ke3e4g6tf_NzEP8-t6QmQ.roa (hash: LDa+p34hUBYWv+O47IPPq2d0lQ+F5fOMupLZzH7le48=)
                          5: e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl (hash: u+KQTDq8jeQj/jHmf+cm7JBCctdDCb0yCUX3sU56ZX0=)
                          6: yHYS6hpiiZouhLM3YQlOiEn7Dt4.roa (hash: UvfLf0kl1I/2dxM34pZ3U07NlO8Q7BM1QyFjXwpJPeI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:69:41:16:33:7d:6e:52:fe:0f:5d:63:e0:0c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
        Validity
            Not Before: Jan 31 16:00:15 2025 GMT
            Not After : Feb  1 16:00:15 2025 GMT
        Subject: CN=2a3c6cd42998bd437aaa541b38c6d9e20f50df82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d0:ce:38:7f:c6:87:1f:39:51:e5:a7:85:64:
                    15:75:45:ca:bd:6e:06:1f:fe:d2:bb:89:05:ef:93:
                    5b:a0:67:e2:08:13:56:e4:6d:09:7f:c4:34:a5:11:
                    08:7b:b1:ac:20:0d:68:ff:b3:60:9c:6b:06:b5:a9:
                    3b:cb:b7:e1:4c:8c:35:dc:fb:7e:b6:09:b9:a6:8f:
                    7b:4c:c2:f7:bc:d4:32:80:c5:37:24:f8:f2:b8:43:
                    c0:66:c2:fa:3c:ed:1d:ac:ed:1a:ff:2d:9c:bc:17:
                    c2:c3:7e:3a:0a:10:6d:54:c3:38:f0:3c:b0:e7:21:
                    f6:45:04:bb:d6:36:85:b4:b8:b2:9c:3b:db:7b:ad:
                    32:a1:1d:7e:79:a2:30:55:02:0c:b9:3b:ef:5a:c0:
                    1e:ff:9d:84:93:7b:dc:9b:38:c4:c9:cf:f4:63:8e:
                    d2:71:41:f7:27:2c:e1:46:ab:5c:27:e9:73:52:20:
                    6e:b2:a7:cb:0a:ee:f5:27:91:da:8a:44:95:c7:27:
                    02:bd:68:70:2c:41:a1:72:25:ea:0d:ac:22:b9:59:
                    00:a1:89:de:dd:d5:8d:9b:36:ce:75:7b:01:ee:c3:
                    77:3a:1d:c4:48:58:0b:a2:a2:a5:60:f5:2a:36:f0:
                    a4:1b:08:e7:e7:1c:07:f0:68:83:1f:3a:bd:ea:d1:
                    d6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3C:6C:D4:29:98:BD:43:7A:AA:54:1B:38:C6:D9:E2:0F:50:DF:82
            X509v3 Authority Key Identifier:
                keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7a:9a:6d:c5:1c:3a:7c:26:56:db:04:a1:de:e6:03:0a:4e:
         b2:03:2f:5d:28:dd:57:e9:98:44:c5:51:ca:bd:a6:84:b3:d9:
         40:cc:6d:4d:a2:91:4f:ff:66:ab:7e:31:5a:c2:d3:2f:68:5c:
         9f:05:17:dd:2d:16:cf:3a:34:c6:89:eb:2e:fa:68:b1:1e:ac:
         ed:e6:56:b3:c7:33:4c:b2:6f:f6:b4:b7:7f:37:b2:d5:da:d5:
         9a:8b:17:b2:76:f9:2a:c0:4a:ed:a2:59:b1:79:2a:25:df:91:
         44:c2:e7:d2:e3:0d:bb:34:3c:83:60:07:3d:44:9c:5f:76:11:
         63:63:ae:ee:33:01:3e:1b:22:2c:3b:53:de:e4:00:03:15:68:
         83:6e:dd:3e:68:0b:58:9b:17:79:84:07:0d:fc:36:82:83:fe:
         11:68:a0:cd:28:48:ae:d3:69:6d:66:86:78:05:8f:3e:7a:b6:
         a8:1b:6b:6f:2c:c7:db:5d:54:68:22:c1:6b:61:2b:13:8a:83:
         31:4f:0a:68:44:c9:96:94:4f:d9:36:85:30:2a:d6:1e:26:39:
         43:56:0f:7a:61:2a:83:49:56:88:b6:5f:fa:27:37:70:45:63:
         1f:71:68:14:e8:fb:5e:ee:d6:a4:6d:2d:88:0e:27:56:1b:0a:
         21:d5:b4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:17 2025 by rpki-client