Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
File:                     TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft (raw, json)
Hash identifier:          0qaxhPaFyrds0xgjkokmXv18hylUbcHyr8vWStlUIm8=
Subject key identifier:   EB:E7:86:1F:2C:43:68:77:84:F0:BC:8E:C2:11:AA:26:A9:15:E9:4F
Authority key identifier: 4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75
Certificate issuer:       /CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
Certificate serial:       0194BC3C56EEE8F081A6F44939D02B658480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft
Manifest number:          07B2
Signing time:             Fri 31 Jan 2025 12:00:58 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:58 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:58 +0000
Files and hashes:         1: I7ruHZ7I_t5FamkSP1UVHK-D1aQ.roa (hash: 0bp5i/w7MdfWSRoD3vMh3eYqQ/2+5IAaWheLS0shHT0=)
                          2: TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl (hash: KUU2gxuQ3zkqQDLoZsOyMwEs0nb03YLN3Ab/NmZJEqc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:56:ee:e8:f0:81:a6:f4:49:39:d0:2b:65:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2f4d108ac184bd1b532ff88fc6644ade16da75
        Validity
            Not Before: Jan 31 12:00:58 2025 GMT
            Not After : Feb  1 12:00:58 2025 GMT
        Subject: CN=ebe7861f2c43687784f0bc8ec211aa26a915e94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:f8:2c:3f:3f:b5:03:ae:6c:73:5b:6b:e1:
                    a9:e9:03:c7:8a:cd:1b:3c:5b:40:06:ba:a3:ee:94:
                    5b:97:64:97:e8:c5:f2:f5:84:c1:a8:27:8d:be:73:
                    a3:ef:43:b3:c6:22:6c:32:d9:7f:99:15:4f:22:3d:
                    94:6f:8b:a1:b4:44:44:04:f0:52:07:e1:87:6d:a5:
                    80:6d:1b:e8:36:d9:76:82:8b:16:bd:74:6e:ca:08:
                    d0:aa:03:da:96:af:73:4d:73:9d:da:fc:f1:44:1c:
                    10:d4:4b:96:41:e8:08:b4:b5:bf:21:e9:9e:68:58:
                    17:c2:26:0d:f6:a1:cd:35:d7:56:ba:c6:96:0b:a0:
                    2d:b3:da:c4:f2:d9:4d:ec:ce:45:c1:df:56:36:fb:
                    c1:af:eb:d6:34:5e:7e:df:84:12:35:76:98:03:2a:
                    5b:71:47:05:f4:75:93:a2:81:b8:91:fb:ed:35:7c:
                    3c:c4:41:28:0a:ab:b6:82:30:c2:96:c4:7a:20:67:
                    a6:b7:ac:b3:04:55:55:f7:55:fd:d3:df:f2:4f:e5:
                    a9:40:28:a1:45:67:d3:8f:f4:21:a7:7b:04:db:4a:
                    a7:9b:9b:77:0f:03:83:78:1d:17:ad:16:60:1e:49:
                    ae:41:1a:ab:99:6c:3d:da:79:7f:48:46:a5:c7:bd:
                    9b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E7:86:1F:2C:43:68:77:84:F0:BC:8E:C2:11:AA:26:A9:15:E9:4F
            X509v3 Authority Key Identifier:
                keyid:4D:2F:4D:10:8A:C1:84:BD:1B:53:2F:F8:8F:C6:64:4A:DE:16:DA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/59bc0c-14f4-4bc4-80e4-b630853e9493/1/TS9NEIrBhL0bUy_4j8ZkSt4W2nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d2:0c:3b:c7:89:c1:03:cf:63:6d:81:1f:20:5d:4a:df:ef:
         ee:0c:9f:3b:15:d4:eb:d3:70:4e:36:29:a3:8c:5a:ac:85:d6:
         75:3a:8c:e4:13:d4:1b:58:b8:93:8a:94:5a:d1:39:bc:54:65:
         24:7c:a9:31:c7:c5:3b:1d:eb:7e:10:d8:33:b8:d7:f3:f0:7b:
         49:0e:00:cb:78:58:44:fb:91:01:c3:b1:1e:b6:e4:f1:9d:93:
         9b:4c:84:11:04:39:01:d6:6a:c4:71:e1:18:5e:c0:56:cd:e0:
         e9:47:06:ec:53:4c:43:7e:bb:64:41:bb:a3:f5:9f:48:a3:a3:
         d3:d5:d4:ae:30:b6:2d:c5:d6:5e:48:5b:0a:a5:8a:e4:7e:42:
         18:83:8b:a1:5a:aa:7e:2c:aa:09:2b:f4:b6:b4:9c:ed:92:e8:
         d5:68:3b:24:be:b9:33:d0:85:8c:79:d7:55:b8:97:19:e8:6b:
         11:ff:59:3d:01:de:f9:cd:2a:65:44:fc:e3:22:3c:26:ec:57:
         e0:a8:3c:c1:36:f7:b3:b0:34:5d:46:10:d8:0b:70:d3:ec:c3:
         89:a6:1d:39:d8:93:5a:91:43:73:2b:6c:ea:d3:56:b8:84:6b:
         34:19:8a:97:47:db:0b:29:28:68:d7:5c:8f:1c:15:18:e6:dc:
         d7:2c:7d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:07 2025 by rpki-client