Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
File:                     fTBF_EkdOfUucUWxAAs7hsN97UU.mft (raw, json)
Hash identifier:          rDmQCLKBoGxP6q3m8tGZyc+hmwVIMrRtsp2QhtH6QPs=
Subject key identifier:   FC:01:E8:C3:6E:70:F8:AD:46:7A:BF:D1:B8:AD:88:05:77:06:52:37
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Certificate issuer:       /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial:       0194BCAA029421214011F0EAF75B87800892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 14:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:45 +0000
Files and hashes:         1: K4Lbu-PRsMurt2fUpQp-WCgArbs.roa (hash: 3LSqxDqKlKKQa1qqql+RiI3DEtvgTxuB2Pprc5JwA8Q=)
                          2: bGmJuHKC9r9iVbyoDDsXdRaZNn4.roa (hash: cFv1Kx/hvA8sFFYnUpS91+Kz1exkjjuW0Zq9NwB3OSk=)
                          3: fTBF_EkdOfUucUWxAAs7hsN97UU.crl (hash: LoYbSXCjetGbL1KfnCJqlNzGyXRWfeO6rFVxXKj3l/0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:02:94:21:21:40:11:f0:ea:f7:5b:87:80:08:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
        Validity
            Not Before: Jan 31 14:00:45 2025 GMT
            Not After : Feb  1 14:00:45 2025 GMT
        Subject: CN=fc01e8c36e70f8ad467abfd1b8ad880577065237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:9c:09:ce:c4:32:d9:e4:ed:84:fe:02:26:
                    9a:43:cf:e2:e3:e3:1e:ca:ec:d8:0f:9d:e1:ce:28:
                    06:45:d3:67:a1:e5:f3:63:8f:b0:63:ae:1e:78:6f:
                    df:13:30:bc:2e:65:48:53:c2:e2:92:90:5c:0e:6a:
                    de:d7:3f:53:17:49:74:4b:0e:63:10:79:34:40:fc:
                    8d:c5:bd:57:cd:e5:1c:8a:c4:d6:f9:86:57:ea:45:
                    14:9c:10:fe:51:4b:64:fc:99:55:99:b8:5c:d7:6d:
                    aa:fa:cc:2d:18:71:91:6e:78:8a:81:a5:75:64:c3:
                    9b:ec:18:d8:d9:c1:81:56:97:9f:1a:6d:d2:7c:96:
                    00:53:0f:bd:ab:8a:c9:27:c9:79:9b:4a:ae:5c:dc:
                    32:78:98:db:9f:85:16:a8:7b:12:47:8f:e5:5e:00:
                    1d:d7:d8:89:b6:ad:1a:59:b1:3c:d1:6e:2a:a2:ca:
                    8d:1b:4e:a2:bd:c0:8f:7f:bb:e9:50:96:4d:fa:e1:
                    46:88:2b:6d:5d:3f:f1:04:e0:5a:ee:84:51:25:29:
                    b6:3e:36:62:d1:b3:bf:af:fb:12:de:39:c2:37:aa:
                    51:b9:29:d0:8b:1a:6d:58:a2:68:73:ac:99:ca:af:
                    b8:19:64:3f:0a:13:f5:70:03:81:e3:a9:a7:3d:7a:
                    ab:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:01:E8:C3:6E:70:F8:AD:46:7A:BF:D1:B8:AD:88:05:77:06:52:37
            X509v3 Authority Key Identifier:
                keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8c:42:2d:4a:da:45:b8:5b:34:c4:21:3d:87:ac:4e:50:7e:
         ce:39:d3:a7:65:f6:22:52:5a:dc:92:8d:40:9f:d6:01:b3:27:
         34:b0:7b:76:52:a6:f7:e6:fc:8a:af:3f:0a:f7:26:9e:7a:49:
         7f:16:46:c1:84:cb:81:7e:f3:5e:ae:99:9f:95:8c:b2:4b:87:
         ca:ca:3f:1c:74:4e:3c:1d:91:be:ae:09:29:cd:7f:46:fb:41:
         24:db:a9:8d:49:6c:b8:2c:6d:63:5b:d8:21:59:40:25:aa:ec:
         58:27:c7:27:60:d4:d2:83:46:02:b1:01:6e:a2:e9:dd:25:ca:
         8e:33:bb:e7:8b:1b:da:dd:45:ad:e8:ae:0d:db:4d:52:f0:e8:
         39:36:35:31:6c:06:e9:52:dc:0f:28:69:ff:4a:62:78:b9:f4:
         75:79:36:f6:b5:d4:72:8b:89:46:01:15:a4:9e:15:65:e7:53:
         31:1d:1a:71:fe:54:e7:1b:00:67:fd:2b:9b:9e:b8:d6:96:74:
         f4:a4:04:e0:5d:9e:bd:5f:7f:c8:c9:73:3b:6a:de:15:f7:fe:
         70:4a:c1:f0:0c:07:8c:10:e4:50:6d:06:44:56:c4:20:1d:3a:
         08:1c:ec:2e:94:17:3e:24:d0:a3:7a:fd:0a:32:83:c8:3d:c6:
         5f:d7:74:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:58 2025 by rpki-client