Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
File:                     Jw__IYVmW535AIyeG-YmARiafXw.mft (raw, json)
Hash identifier:          WqsQw87xKq2U9bhFTxgbMwZUVmlXMt+fcjEbY7RIvVk=
Subject key identifier:   68:B7:CA:4B:26:A9:92:AD:D7:E2:ED:D5:89:6D:85:28:E0:4A:7D:0D
Authority key identifier: 27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C
Certificate issuer:       /CN=270fff2185665b9df9008c9e1be62601189a7d7c
Certificate serial:       0194BD4E9593D9005029E4D55A7A715A0547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
Manifest number:          07D4
Signing time:             Fri 31 Jan 2025 17:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:31 +0000
Files and hashes:         1: Fy2IYBN9hjZkWkvbtPQPrYui0qc.roa (hash: JelZKBaztB5j8Dd3i30kr2+tTI62dQSAVwbIQZ0Mhyo=)
                          2: Jw__IYVmW535AIyeG-YmARiafXw.crl (hash: FgJG8FNCqYrZgmqciqretCcJ453I8tKK9W97MC4TmsQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:95:93:d9:00:50:29:e4:d5:5a:7a:71:5a:05:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=270fff2185665b9df9008c9e1be62601189a7d7c
        Validity
            Not Before: Jan 31 17:00:31 2025 GMT
            Not After : Feb  1 17:00:31 2025 GMT
        Subject: CN=68b7ca4b26a992add7e2edd5896d8528e04a7d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:87:bd:80:bf:c3:e0:10:a3:4f:c1:b3:8e:
                    58:a0:ad:57:ef:88:53:83:7c:80:41:ca:0a:96:2a:
                    d3:e7:c9:72:bd:37:09:f9:10:f3:7f:57:7f:c1:ea:
                    1b:3c:57:c4:a5:cc:ef:69:97:54:ed:04:77:6d:09:
                    6f:35:70:f3:23:3c:9b:4f:74:43:39:74:16:ce:93:
                    de:24:e0:df:80:73:66:9b:ac:8c:45:5a:27:76:25:
                    56:d3:f9:1f:27:fc:b1:48:59:9f:28:ca:b8:cd:06:
                    b2:96:be:fd:a5:03:af:04:e4:49:8e:e6:2e:12:e3:
                    04:2b:0d:62:c9:30:01:07:d7:87:04:02:86:a9:5f:
                    9c:0b:a1:1f:97:23:34:35:47:10:06:06:68:d9:17:
                    5c:ce:61:e8:4a:80:d7:73:eb:b4:67:73:f6:96:d7:
                    62:ae:fd:fe:5a:42:62:99:c1:56:1f:a3:fe:3b:e1:
                    43:4d:bc:a1:52:6d:f7:76:c7:59:84:9a:ae:97:9d:
                    e2:5d:22:08:16:d6:e9:3a:d0:b0:80:10:62:45:62:
                    4b:05:a2:48:3f:f8:ef:8b:84:62:dd:d5:70:e6:f0:
                    33:00:07:f4:34:71:4c:df:17:e5:38:9e:09:1a:c0:
                    5a:6d:dc:9c:6a:d9:84:bd:77:97:77:ea:70:2f:48:
                    c5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B7:CA:4B:26:A9:92:AD:D7:E2:ED:D5:89:6D:85:28:E0:4A:7D:0D
            X509v3 Authority Key Identifier:
                keyid:27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:bf:81:48:72:bc:c8:e5:f4:76:94:9f:fc:dc:4b:56:eb:72:
         ba:be:cc:f3:47:34:a0:a1:60:00:b1:24:0e:2a:ec:64:85:f6:
         f8:7d:4e:63:e7:d8:da:c9:73:97:e1:cb:d9:4c:84:d7:ee:2c:
         b8:8a:c4:11:1a:94:c9:02:2b:ec:ad:23:40:a3:30:8c:e8:3b:
         c2:a0:8a:fa:1b:9c:25:52:9b:b9:13:8e:e5:3a:84:6d:55:57:
         76:3f:f6:d5:86:87:fe:b5:03:20:8f:20:58:bd:58:ae:65:ad:
         b3:a3:3e:96:50:47:67:b5:88:af:c9:48:0e:f9:26:72:2f:c6:
         41:d3:ae:be:5b:63:e1:61:47:0b:98:45:65:54:05:eb:00:2d:
         29:39:48:4a:6d:57:af:f5:dd:de:f8:95:f6:f1:06:94:f3:07:
         e9:ff:6e:41:15:37:6f:a6:3a:e1:b3:4c:f8:1a:5f:15:cf:37:
         8d:fb:a3:73:66:a2:4d:3c:a5:05:75:46:bf:d8:a3:3d:30:42:
         76:ef:08:fd:ea:92:73:5d:61:9a:2c:36:fa:7c:5e:43:31:c7:
         ce:7b:ed:23:12:09:d4:42:a4:38:9e:3f:3b:75:16:2d:9e:82:
         24:56:8a:f1:95:5c:af:fd:a3:39:f1:03:a5:bc:a6:6e:f2:17:
         d6:ab:f8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:06 2025 by rpki-client