Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File:                     Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier:          Iju6XNmeEfyqeW3GlBwrvvslgG2DVLTol7MfiCOOpu8=
Subject key identifier:   ED:18:97:97:72:E9:B7:E0:C7:3B:55:48:67:E5:8C:21:81:46:94:55
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer:       /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial:       0194BC727FC943881774916960122513B632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number:          0F08
Signing time:             Fri 31 Jan 2025 13:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:07 +0000
Files and hashes:         1: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: +Uo1uGsltOP65Y59mTjL3m7O2LGw2nW5C0FmUoqamM4=)
                          2: fVmkukCoNZRcRoc3LS-TXPrqhnE.roa (hash: jN7loYTxoFJMSibKv+JC0+n6QXqAWoukHaK+yW79eHE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:7f:c9:43:88:17:74:91:69:60:12:25:13:b6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
        Validity
            Not Before: Jan 31 13:00:07 2025 GMT
            Not After : Feb  1 13:00:07 2025 GMT
        Subject: CN=ed18979772e9b7e0c73b554867e58c2181469455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:67:72:31:5d:7f:7a:8c:29:d0:44:12:9d:e6:
                    00:81:3b:1c:37:6d:81:37:90:b9:63:57:4d:80:ef:
                    6a:ca:dd:87:86:8f:0c:b5:99:2c:ca:c4:b0:88:45:
                    c1:e9:61:36:c9:2b:28:1f:b7:53:35:68:56:68:34:
                    cd:68:30:42:9c:50:0a:43:3d:8d:db:e1:eb:b7:7b:
                    6f:5d:1a:0a:6b:05:57:2c:90:a0:00:21:bf:8c:9d:
                    7f:c8:52:dd:9a:db:d4:d1:70:37:94:c3:63:b4:dd:
                    48:e1:61:36:86:94:e1:fe:1d:f6:2e:c8:84:02:4f:
                    e3:3c:44:c5:e1:8e:9e:56:08:39:73:2f:f3:64:8b:
                    a5:e2:a8:fa:96:f1:cc:62:f1:12:2d:89:d1:d5:0c:
                    fd:ad:15:20:6f:86:0c:3b:ef:eb:c3:ae:50:b3:a4:
                    72:f6:1d:b8:b5:92:32:67:99:84:81:2f:fd:34:a2:
                    72:c4:7e:67:36:b4:1d:c0:dd:bb:e2:47:4c:f7:c3:
                    ee:f4:bb:df:0e:a2:d9:c6:68:a9:1d:60:89:da:7e:
                    e3:ce:86:65:4d:19:92:c7:bd:bd:76:db:87:3e:34:
                    c3:ea:c5:4e:8c:58:df:83:ad:00:e2:ca:9b:e6:9d:
                    66:1e:ef:75:4c:6e:7e:e0:3a:c4:e5:4b:ea:7e:cf:
                    34:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:18:97:97:72:E9:B7:E0:C7:3B:55:48:67:E5:8C:21:81:46:94:55
            X509v3 Authority Key Identifier:
                keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b3:96:2a:e8:46:7e:70:e4:87:2f:ce:7e:73:40:d0:a1:4a:
         bf:72:79:40:c5:ce:32:4f:6e:71:2c:32:aa:91:d7:bc:3a:66:
         d8:19:e2:a2:05:f8:63:05:48:39:bf:50:7c:ac:1e:cc:a8:f0:
         68:50:9a:3e:26:90:04:fb:43:90:42:8e:ec:04:6b:ca:f1:d7:
         16:8a:09:69:85:ec:e0:8d:fc:dd:3d:1d:e3:71:bc:5e:8c:52:
         d9:bf:06:3a:26:c5:b5:b2:45:ab:d7:fb:ec:32:6d:52:26:ff:
         a4:a3:7c:e2:a2:91:e9:f9:e2:92:55:79:4d:0f:62:66:b7:1f:
         8a:bc:46:d7:fe:6a:6c:43:8f:38:e7:72:2b:c6:6d:fe:b0:1e:
         e7:e5:6e:5f:91:3e:b7:6f:ab:82:41:06:b8:09:47:b4:eb:d7:
         7d:11:52:c5:37:c4:36:a6:77:c5:d1:7a:84:68:01:df:87:49:
         85:4b:59:30:8d:b6:35:e6:dc:eb:82:59:95:c9:f8:5d:9b:6c:
         c7:f9:e0:01:4a:94:dd:d5:ef:b0:2a:e3:6a:4f:d8:da:7e:cf:
         4a:2f:be:1a:55:39:94:b0:2f:04:0a:67:d5:f8:f5:c0:2a:d1:
         97:4a:0b:eb:80:b8:61:bc:81:d3:f2:e4:ea:8f:cc:6e:7d:b2:
         6a:f9:58:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cn/JQ4gXdJFpYBIlE7YyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMWFiM2RkMjJjMzMzYTc5YjZmZjMwYWFiN2YyZTAzNmZj
MzcwYWEwHhcNMjUwMTMxMTMwMDA3WhcNMjUwMjAxMTMwMDA3WjAzMTEwLwYDVQQD
EyhlZDE4OTc5NzcyZTliN2UwYzczYjU1NDg2N2U1OGMyMTgxNDY5NDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mdyMV1/eowp0EQSneYAgTscN22B
N5C5Y1dNgO9qyt2Hho8MtZksysSwiEXB6WE2ySsoH7dTNWhWaDTNaDBCnFAKQz2N
2+Hrt3tvXRoKawVXLJCgACG/jJ1/yFLdmtvU0XA3lMNjtN1I4WE2hpTh/h32LsiE
Ak/jPETF4Y6eVgg5cy/zZIul4qj6lvHMYvESLYnR1Qz9rRUgb4YMO+/rw65Qs6Ry
9h24tZIyZ5mEgS/9NKJyxH5nNrQdwN274kdM98Pu9LvfDqLZxmipHWCJ2n7jzoZl
TRmSx729dtuHPjTD6sVOjFjfg60A4sqb5p1mHu91TG5+4DrE5Uvqfs80TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0Yl5dy6bfgxztVSGfljCGBRpRVMB8GA1UdIwQY
MBaAFAIas90iwzOnm2/zCqt/LgNvw3CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMGZiYjYtZGVhMi00YzdiLWFmYWQt
NGFjZWM2NDc1NzJkLzEvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMGZiYjYtZGVhMi00YzdiLWFmYWQtNGFjZWM2NDc1NzJk
LzEvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbOWKuhG
fnDkhy/OfnNA0KFKv3J5QMXOMk9ucSwyqpHXvDpm2BniogX4YwVIOb9QfKwezKjw
aFCaPiaQBPtDkEKO7ARryvHXFooJaYXs4I383T0d43G8XoxS2b8GOibFtbJFq9f7
7DJtUib/pKN84qKR6fniklV5TQ9iZrcfirxG1/5qbEOPOOdyK8Zt/rAe5+VuX5E+
t2+rgkEGuAlHtOvXfRFSxTfENqZ3xdF6hGgB34dJhUtZMI22Nebc64JZlcn4XZts
x/ngAUqU3dXvsCrjak/Y2n7PSi++GlU5lLAvBApn1fj1wCrRl0oL64C4YbyB0/Lk
6o/Mbn2yavlYqw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:04 2025 by rpki-client