Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.mft
File:                     ahp7gMaEYoWSMrhvK0UmWNj3-Ek.mft (raw, json)
Hash identifier:          eOn1FLIc2qWW3NmMhF5EcBj3l/5ZmrgQgbhZXioiJxo=
Subject key identifier:   F2:49:A5:A9:C5:7F:D6:3D:71:91:F6:7F:D0:3E:40:BA:D2:52:E7:BA
Authority key identifier: 6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49
Certificate issuer:       /CN=6a1a7b80c68462859232b86f2b452658d8f7f849
Certificate serial:       0194BC72C5018A64A211C224D2AA30D40DA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 13:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:25 +0000
Files and hashes:         1: 0LoYqwN4EfuOpzNBl81Ir0O3xvg.roa (hash: h5JSgifNUd2hd+AKHO4CM6TE/DtVvf5eI+T3LKM47js=)
                          2: _mJV8aX_Qs8QBpHiXiKK8iF0edI.roa (hash: fDYoIBnVmtW522s9sJLf7723BDfyrSi2LsKN+Lo5R+0=)
                          3: ahp7gMaEYoWSMrhvK0UmWNj3-Ek.crl (hash: 7/6bSn3jvDFjeHJ283NU1GwDN8HZddaZcfK9hq9x/l8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:c5:01:8a:64:a2:11:c2:24:d2:aa:30:d4:0d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a1a7b80c68462859232b86f2b452658d8f7f849
        Validity
            Not Before: Jan 31 13:00:25 2025 GMT
            Not After : Feb  1 13:00:25 2025 GMT
        Subject: CN=f249a5a9c57fd63d7191f67fd03e40bad252e7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:95:fc:8d:8a:54:20:dc:0f:90:09:9b:da:
                    ef:eb:d4:32:18:c8:97:62:9e:8f:a0:9e:f9:55:15:
                    f4:89:1e:95:bf:30:eb:47:6d:53:80:d9:f0:d2:98:
                    cd:10:18:c6:b4:c4:be:8b:6b:bf:dd:21:b1:1b:c4:
                    16:7a:b4:2b:0a:ed:e6:df:a9:e4:dc:22:fe:2b:c6:
                    4f:ba:c4:57:bf:ee:13:87:31:9b:a0:85:cb:a3:d5:
                    ae:ff:ec:1c:67:63:18:1b:17:81:38:6d:cf:47:dd:
                    0b:00:ae:8c:9b:03:78:eb:aa:d2:94:44:77:fe:0a:
                    2b:b4:df:1f:8c:f9:72:b0:12:58:c3:ae:ea:04:2f:
                    43:e6:99:2a:41:ed:f6:c1:64:0e:89:24:61:88:6a:
                    90:51:ef:a0:27:e5:b2:5a:40:6f:ca:81:2c:e4:43:
                    dc:ea:69:2b:c9:64:04:0c:f1:b2:bd:67:b6:e9:95:
                    c0:f6:86:63:7c:29:0a:59:dd:a8:cf:4e:de:0b:57:
                    58:9a:2f:53:d2:ed:94:f6:22:29:8a:0a:8e:74:c4:
                    63:50:c1:d4:ba:e4:3e:d2:0a:4c:ee:70:d5:2e:a2:
                    0b:55:80:22:ef:0c:3b:f8:20:85:dd:3c:47:9e:f2:
                    7e:a1:46:08:69:c9:9a:19:4c:51:ca:72:b8:47:94:
                    bd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:49:A5:A9:C5:7F:D6:3D:71:91:F6:7F:D0:3E:40:BA:D2:52:E7:BA
            X509v3 Authority Key Identifier:
                keyid:6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a3:84:de:d5:62:7b:7c:9b:24:c9:4c:48:b1:0d:bd:40:b1:
         2e:0d:30:c4:7e:ec:93:19:09:2d:3b:36:1a:6b:7a:95:18:96:
         0a:5f:56:8c:da:d1:db:75:89:73:fc:df:fc:c1:34:c4:c2:a2:
         f4:07:b1:1d:17:d6:db:78:90:2b:7c:2c:51:af:de:e1:ac:63:
         9a:f9:84:74:ab:29:33:e2:39:94:07:c2:ec:e9:fc:5e:1c:40:
         3b:61:30:d5:39:e5:22:74:3b:33:4d:38:ea:a8:81:a7:da:df:
         0c:bb:bd:7a:35:d6:4d:9a:a1:17:91:75:e6:0c:ef:23:1c:64:
         d2:d9:71:6b:25:a4:22:3b:14:bd:61:8a:b6:64:a5:d9:b2:0e:
         83:ff:51:1c:26:f5:0a:b9:76:95:18:4e:fa:a0:15:58:81:8d:
         fa:d0:bf:cf:42:ad:be:54:60:33:72:d3:08:77:a7:52:a6:08:
         f7:55:84:18:0c:c7:b4:15:07:49:60:eb:71:e0:18:bc:a7:e6:
         71:1c:98:ba:2a:2b:73:98:85:bc:2b:71:33:ce:f2:98:bc:3f:
         2c:09:f2:f9:5b:22:bc:37:0f:a3:22:32:3c:07:1f:48:1b:2f:
         95:cd:91:17:f9:88:94:1c:c1:f3:34:21:6c:a5:a4:f3:44:84:
         e3:ce:8d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:19 2025 by rpki-client