Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
File:                     t_bDO_udlL0PdKc45_FtDp2gw7k.mft (raw, json)
Hash identifier:          wvsgzT9BFKYGVMwqPmntkcnMaGQ72XlPnJ+mHoOIo38=
Subject key identifier:   31:4B:CE:1A:0F:05:73:A4:D3:33:D4:9D:6E:C8:F9:78:9B:08:AC:EC
Authority key identifier: B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
Certificate issuer:       /CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Certificate serial:       0194BBCE01CAE11EC5B051BA179D6A1953F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
Manifest number:          13FB
Signing time:             Fri 31 Jan 2025 10:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:27 +0000
Files and hashes:         1: dQipKZolIhGkhWFJoygF3CDiTvg.roa (hash: +eA96uDNL0C8CyvGH+7b3dtqwE+sSbn83k1fDZzMPtg=)
                          2: t_bDO_udlL0PdKc45_FtDp2gw7k.crl (hash: ITUsG1Soumw39FQR7eqsZS6DqBjhFFbPgSICpq33M00=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:01:ca:e1:1e:c5:b0:51:ba:17:9d:6a:19:53:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
        Validity
            Not Before: Jan 31 10:00:27 2025 GMT
            Not After : Feb  1 10:00:27 2025 GMT
        Subject: CN=314bce1a0f0573a4d333d49d6ec8f9789b08acec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:51:c8:b4:f6:db:4b:60:53:68:e5:4f:f7:bf:
                    62:ec:a4:69:45:98:15:d6:d9:c0:53:83:24:ee:50:
                    b7:be:ae:77:a3:16:c7:04:76:c4:a8:dd:1f:27:0b:
                    48:11:c9:d8:a6:a8:2a:00:63:6d:65:95:2e:8c:1d:
                    51:95:73:6a:c9:1a:de:6f:35:aa:3b:1e:48:e2:ed:
                    06:63:84:34:0d:b7:c6:52:f4:e2:aa:bf:28:6b:e2:
                    44:b0:21:c9:f4:d2:e4:3b:32:5d:27:b4:27:7c:f0:
                    7b:4d:a7:56:66:7b:82:33:c0:18:cf:73:6d:ee:9e:
                    71:9f:15:d2:90:67:45:79:c0:c6:f4:c0:92:2b:4d:
                    50:e7:4c:c7:41:66:f7:38:79:92:fe:36:a1:75:3a:
                    ad:36:24:0d:ec:ee:6d:f6:fa:47:49:42:de:b8:a9:
                    d6:0d:68:14:a6:0d:fd:a0:d4:48:13:20:a7:62:a8:
                    f3:fc:e9:a7:e4:a8:75:b5:11:f7:4d:b1:ef:c9:0b:
                    4f:78:5d:90:70:bd:b4:bf:fd:12:a5:19:98:19:5a:
                    ac:45:b0:b2:9b:f0:6c:17:21:09:f0:f9:e1:6f:21:
                    cf:2b:0e:0f:f9:e2:1f:e7:0e:b6:56:87:ff:6a:b7:
                    a4:8d:50:2a:83:32:f9:28:bf:22:0e:29:30:05:92:
                    e8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4B:CE:1A:0F:05:73:A4:D3:33:D4:9D:6E:C8:F9:78:9B:08:AC:EC
            X509v3 Authority Key Identifier:
                keyid:B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:88:63:d6:fd:fd:62:da:19:ba:26:32:d7:f4:5a:2c:de:9b:
         48:2c:9c:63:f5:d6:da:55:8c:c7:2c:66:f1:dd:6c:db:7b:2f:
         ce:5d:69:ea:f7:48:66:5a:f9:47:6b:26:62:87:eb:91:8b:d7:
         88:ef:d0:7e:58:70:12:10:be:0e:5d:31:a3:d4:d7:99:ea:9a:
         f2:5d:56:35:93:c0:9e:1b:75:5f:da:57:ed:f4:7c:2b:01:06:
         5a:07:4f:85:0e:22:95:ef:49:37:1a:c6:d8:82:8a:e5:c6:63:
         1e:e8:9f:4a:bc:4e:1d:07:72:0b:ba:22:ba:16:fa:b4:2a:b4:
         f6:e8:23:5f:fc:59:49:fb:33:32:ea:a8:cf:44:07:a1:8c:12:
         20:54:6c:03:2c:6b:4e:b1:f1:0a:44:72:05:8e:18:95:33:87:
         a8:01:11:64:36:9d:db:69:40:20:6e:9f:d6:9f:cb:df:14:1b:
         57:3e:8b:c7:92:37:c1:32:9d:46:76:20:b8:20:32:3f:f2:65:
         40:97:e1:bc:dd:6d:49:c1:7e:f0:ae:f8:b0:f8:82:6c:e2:c6:
         a5:fc:b8:d3:a3:1b:9b:1e:c9:90:32:85:a7:e5:7e:6a:d9:75:
         52:ee:3b:61:28:51:b7:73:87:73:aa:fa:80:46:fc:38:1e:7c:
         f2:b0:41:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:45 2025 by rpki-client