Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
File:                     m1iV5_am1KupyWH3E7LnlxXwIfA.mft (raw, json)
Hash identifier:          nwWaMfdNDQ3c7vkKY+WkJKmU2LE0PfQltuBzW/8sUak=
Subject key identifier:   35:80:EF:D2:C1:90:D9:72:5A:0A:5E:72:58:15:0E:1C:5D:90:3A:09
Authority key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
Certificate issuer:       /CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Certificate serial:       0194BCE067524B4ADFC4D5A672B5B6099DA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 15:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:10 +0000
Files and hashes:         1: W2N06bo8iEVj3MND-0JAHiLxvxg.roa (hash: IfUBswKG3p9cJ5exxnjeIuTVTsjdF6z/UKkR7O3Lfdw=)
                          2: m1iV5_am1KupyWH3E7LnlxXwIfA.crl (hash: aC38AanlsEZHbihSumx0LfrF1YBV9QYK/Ott7A0pjSo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:67:52:4b:4a:df:c4:d5:a6:72:b5:b6:09:9d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
        Validity
            Not Before: Jan 31 15:00:10 2025 GMT
            Not After : Feb  1 15:00:10 2025 GMT
        Subject: CN=3580efd2c190d9725a0a5e7258150e1c5d903a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:93:eb:f1:01:e7:7c:31:f8:1f:19:08:d4:
                    6c:3d:29:d6:40:a8:a4:fa:0b:d5:c9:8d:a6:2f:e3:
                    7d:0f:fd:c7:c1:5b:79:2d:46:c1:40:a6:81:86:f7:
                    f1:c5:93:9d:fe:8f:92:7f:04:a0:21:c7:c9:d1:eb:
                    76:fa:ea:f5:9e:3a:96:ca:16:e2:6c:30:f0:df:5e:
                    0e:19:26:b5:a1:70:4e:7d:c3:34:2c:8f:f3:51:7d:
                    ed:69:2e:fd:55:a3:b3:c5:65:a2:25:de:45:eb:dd:
                    1b:58:f4:ae:ac:99:0a:4a:2b:c2:37:1c:0d:51:46:
                    18:c5:61:b2:9a:94:2c:a7:11:e0:55:6c:cc:80:7d:
                    74:3c:36:e1:82:0e:eb:85:a2:59:59:62:d9:e8:f1:
                    d2:5f:ed:fa:0c:6d:9c:85:00:bd:15:4b:48:2f:79:
                    88:64:7a:ea:8b:1e:fd:b5:f0:b2:8e:1d:49:1e:19:
                    b6:ca:e8:c9:a0:f5:6f:b8:ce:20:2e:73:e8:85:f3:
                    f4:15:89:73:65:81:61:c0:0f:84:d9:5b:23:8d:c7:
                    f0:78:73:bb:3b:ea:1e:bb:fc:58:93:e2:23:f8:48:
                    a0:d4:0d:ec:1d:18:4b:b7:8b:f2:d8:d2:70:5c:63:
                    36:53:2d:c9:fa:97:e7:2d:f2:06:55:c6:07:4a:8b:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:80:EF:D2:C1:90:D9:72:5A:0A:5E:72:58:15:0E:1C:5D:90:3A:09
            X509v3 Authority Key Identifier:
                keyid:9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:90:60:bd:97:e0:b4:a7:bc:3e:29:2a:f0:08:6c:35:c3:6e:
         40:8e:62:56:a7:93:5e:06:4c:13:0f:c3:99:4e:b4:ef:86:b4:
         bb:5e:c8:da:bd:24:fa:58:ce:5f:22:ce:81:93:99:b8:c0:4e:
         17:e8:0d:0b:46:9b:a3:fa:45:4b:09:59:b8:77:43:37:18:e5:
         18:e3:d8:dc:40:39:14:da:aa:2c:bd:53:dc:ea:28:54:d6:32:
         18:4f:ac:d4:e0:f4:6e:13:2f:a4:10:bb:6e:cb:99:c0:07:e7:
         72:08:c7:1f:75:70:09:e5:a7:e5:f8:95:fc:f1:c5:b6:80:6d:
         bd:d2:25:fb:0f:ed:a5:40:c8:23:d2:95:ce:f6:43:f9:3d:38:
         cb:c6:82:84:45:05:d5:0c:88:b5:a0:51:85:86:3d:dc:e7:64:
         5f:4b:82:f0:fe:d9:c8:29:35:3f:00:98:4e:fb:a1:09:e6:70:
         3b:04:a7:69:c4:cf:91:48:ed:73:35:9c:7f:f0:6a:d5:cf:4f:
         ac:09:ac:a7:78:67:c4:39:cc:12:0c:ea:4d:0b:32:de:1d:e8:
         bf:fc:cf:f6:f5:01:7c:09:58:3d:69:7c:f2:ba:5f:03:7c:c4:
         8d:7d:ef:7b:7b:5a:a7:83:b5:3c:7e:81:02:84:4a:0a:4b:e8:
         67:9b:58:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:32:22 2025 by rpki-client