Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
File:                     Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft (raw, json)
Hash identifier:          B5n6hhPlZASm9qXTShJhRSqzfRqWnrV5PoxpTHWew30=
Subject key identifier:   60:7C:F4:C2:7C:58:EE:E7:2B:B1:9C:9A:53:EF:E5:D6:5E:50:E7:88
Authority key identifier: 45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D
Certificate issuer:       /CN=45be271d6495293347465c69b97d7380e4bbb46d
Certificate serial:       0194BCE0D71367FEFA70C0AF68CF2914A205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
Manifest number:          011D
Signing time:             Fri 31 Jan 2025 15:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:39 +0000
Files and hashes:         1: Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl (hash: cb/p3o2Vm1DfBy4zq4ErznywpVn0uTZhx9Xk0PfoYzw=)
                          2: g8O-LxBDxPemkfnWTYdHDXGwokQ.roa (hash: 62+5Rr40UYD7j7xrWfzQh2M5veljI3mG5KafCJqpdBQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:d7:13:67:fe:fa:70:c0:af:68:cf:29:14:a2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45be271d6495293347465c69b97d7380e4bbb46d
        Validity
            Not Before: Jan 31 15:00:39 2025 GMT
            Not After : Feb  1 15:00:39 2025 GMT
        Subject: CN=607cf4c27c58eee72bb19c9a53efe5d65e50e788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:2c:89:56:3c:47:1f:dc:26:5e:45:63:27:
                    ec:91:70:ab:6f:b9:39:b6:38:f3:25:db:02:cb:bb:
                    69:6d:8e:8f:9b:07:6a:51:aa:02:73:d0:19:79:7f:
                    ed:0c:e1:f6:f3:58:31:9d:c6:a2:89:3f:2a:49:0d:
                    2c:66:72:12:6b:98:45:99:35:a3:e2:cc:08:e7:48:
                    72:bd:10:17:bb:56:57:af:4e:97:52:f7:03:f7:c8:
                    5e:7d:e1:71:99:f1:22:7d:6d:e0:d0:87:c1:e6:15:
                    b4:00:52:7f:52:f1:ec:6f:9f:32:be:c3:43:b1:09:
                    7a:33:e3:5a:52:c3:7d:e3:e8:3b:12:11:6c:35:3f:
                    22:99:f5:12:b8:ba:4d:0a:ee:0f:29:ed:f6:69:ce:
                    8c:24:de:5f:05:46:76:2f:0c:dc:ac:e7:b6:b9:01:
                    2d:2d:a6:c1:1c:7d:4d:ee:02:df:26:f9:b6:14:c1:
                    6f:c4:10:ac:41:bb:03:1e:9a:48:28:6b:dd:66:7b:
                    5d:b7:47:3a:d8:04:26:ab:39:35:b9:c1:82:ff:25:
                    15:9c:9b:0a:6e:77:56:af:b0:96:37:fa:e1:63:ac:
                    47:48:c1:4b:46:4e:07:13:2f:ae:ec:ec:18:c5:d7:
                    d3:ed:a2:86:64:ac:be:fc:a1:2f:44:ee:fd:80:42:
                    68:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7C:F4:C2:7C:58:EE:E7:2B:B1:9C:9A:53:EF:E5:D6:5E:50:E7:88
            X509v3 Authority Key Identifier:
                keyid:45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ce:56:84:0e:0f:3e:c4:f0:82:62:5d:02:62:ba:e8:a9:97:
         0a:fd:24:40:87:d7:ef:64:45:8d:8c:4d:4b:5d:a4:2b:65:cb:
         7e:fd:ed:fe:e9:33:01:f1:69:fe:05:22:0d:36:75:df:45:5a:
         2d:96:38:e6:03:12:74:8a:92:94:fb:3c:09:f8:9b:a4:09:3d:
         d1:6a:d5:37:f0:5f:c3:76:9e:30:5a:0a:df:81:57:eb:78:ff:
         dc:c8:74:cd:e5:77:24:d8:b5:1e:73:6e:c8:be:b2:ae:ad:2e:
         5a:06:fb:d4:06:04:9a:56:bf:21:85:c8:f6:93:91:df:96:ff:
         18:2b:26:58:58:21:56:0b:bd:53:c4:0d:30:3b:99:9e:57:d1:
         76:63:f5:de:00:fc:3f:60:04:2a:d4:27:64:5a:ce:55:52:53:
         e6:22:14:0b:8d:31:76:10:6f:79:f2:98:23:ed:36:6f:6b:83:
         c1:db:3e:35:18:36:b7:f8:79:93:81:ab:c3:05:f3:1c:6c:ab:
         0f:2c:d8:ea:df:96:f7:c2:6c:a1:68:22:ee:6b:b8:cb:63:b2:
         59:52:9e:dd:11:89:97:68:8e:2c:3e:c3:21:db:79:f3:e1:98:
         5e:b0:7f:cc:d8:a1:31:20:64:c3:9b:f9:42:cb:af:26:5f:f3:
         74:64:d2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:37 2025 by rpki-client