Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
File:                     1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json)
Hash identifier:          5yZIOQdvljLP+QFAWnUPvN7cahWwqugN4KYVJAie5tM=
Subject key identifier:   06:46:B6:14:8A:EB:F3:79:AE:1F:FE:A3:BF:C4:82:3B:62:C4:27:AA
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Certificate issuer:       /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial:       0194BCAA27966254BB63171AC76C2A746F4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 14:00:55 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:55 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:55 +0000
Files and hashes:         1: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: 8GzxWkAgGXeicMylSXJsec/Q60S5k4FIqIMF7A6KyVU=)
                          2: HlfC9yfvGN7DHKK4tv23ZO2ZzTI.roa (hash: lvbBBqCHLb7K+iy+sLWnMQKI6pl/6vd+wtc46LAcd44=)
                          3: Vxlq2Z39A9F-eaPA57TXXEurwJs.roa (hash: 4xN4zUrQu99FYL0d5xYUEvVHQtyeUZcoIRVpmdGGWqo=)
                          4: wBLhap3qy1Bc5_-udfUtTUhswUE.roa (hash: yKTNsxF+At82L6AqbVZLyPnofD0bf/S3KDHdg52k6Ec=)
                          5: wytxdRZXxEWi72ICxppv0nWaK_g.roa (hash: HLAxZnhzpvrbRLPZ50VaAEF9FMDzhmk4qqTXoJRwuoo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:27:96:62:54:bb:63:17:1a:c7:6c:2a:74:6f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
        Validity
            Not Before: Jan 31 14:00:55 2025 GMT
            Not After : Feb  1 14:00:55 2025 GMT
        Subject: CN=0646b6148aebf379ae1ffea3bfc4823b62c427aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:a3:05:fe:4a:2c:31:e8:30:fb:44:5a:ec:
                    6b:fd:55:6d:36:59:3a:1f:b6:69:94:b3:1e:b1:7c:
                    2f:e3:39:61:b3:e8:43:92:e0:b5:37:9b:ed:68:42:
                    2a:1f:98:7b:0a:2c:50:4b:05:64:0d:46:a8:83:ad:
                    83:d4:09:33:79:91:36:a4:1f:58:f5:95:2f:12:aa:
                    e7:db:7f:04:14:85:b9:b6:d5:89:2f:ba:af:f8:3c:
                    7f:e3:ad:bd:ff:99:10:e6:75:76:4e:bd:42:99:d5:
                    89:f3:c9:f1:bb:ae:9a:56:3c:97:04:29:15:89:88:
                    b1:bd:20:4e:d5:88:b9:20:e8:25:23:36:20:4c:10:
                    3c:60:b1:96:88:77:0d:eb:ac:b4:08:95:a9:d6:45:
                    2c:c5:21:98:d9:ad:8a:ae:9c:75:99:02:d6:e6:26:
                    24:58:60:79:c9:7d:fb:ba:da:28:a8:bd:bd:b9:2e:
                    a7:e2:a7:1c:71:98:7d:aa:a7:9d:53:a7:0c:40:c6:
                    98:86:c1:ad:5a:0e:21:96:28:54:7f:76:42:33:e2:
                    d2:04:7a:63:3a:4c:f6:63:18:d5:fd:14:75:5f:b5:
                    b4:60:9b:79:4b:79:a5:58:d4:d1:8d:2f:1e:21:d4:
                    3a:64:19:bc:97:ee:4c:4f:9c:7e:76:e0:d3:76:0b:
                    ac:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:46:B6:14:8A:EB:F3:79:AE:1F:FE:A3:BF:C4:82:3B:62:C4:27:AA
            X509v3 Authority Key Identifier:
                keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:3b:b2:f0:eb:e1:c9:ba:6d:f2:8b:12:52:5f:2c:7f:20:9b:
         21:20:3b:f6:bf:24:5a:1d:a5:b6:7c:06:b1:b9:31:2e:f7:e1:
         8e:b1:7e:5b:be:8f:b1:5d:51:38:7e:d6:1a:2b:43:40:d2:dc:
         51:dc:3d:f8:90:f7:6a:5e:85:f8:b1:b9:da:0f:d0:b6:34:27:
         b5:c2:09:93:42:83:38:df:f0:78:04:60:94:39:6a:22:45:62:
         e8:ae:aa:be:9d:63:c5:80:54:6f:ec:78:a6:34:e2:dd:24:fc:
         18:86:fb:ee:3f:5d:f7:4d:5a:54:ca:21:c6:35:ba:ee:a0:07:
         aa:78:af:56:b3:ed:6a:ea:9e:11:df:8f:a5:91:18:d6:8e:16:
         76:0c:18:28:69:97:14:ad:f2:e2:50:5f:61:6a:a5:dc:e4:05:
         ac:cd:f8:3a:96:39:b9:69:56:dc:6e:c9:41:14:50:06:78:ec:
         23:5e:51:1b:eb:29:dc:ec:48:0f:e4:e9:20:71:31:12:7a:34:
         ae:98:f8:39:6f:d7:14:e7:7b:d8:f7:c1:72:ec:6e:26:21:87:
         8a:ab:fc:7f:f6:43:d6:b1:fe:ee:54:6a:49:91:a4:05:41:52:
         20:c3:b7:29:43:3a:8d:e3:7a:c9:8c:14:ae:0b:e4:01:03:cb:
         62:6e:a8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:17 2025 by rpki-client