Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
File:                     e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft (raw, json)
Hash identifier:          s+oDkhQ5yNxNI1QViKDH/etsIVvbp1yk+61ro/IoqbM=
Subject key identifier:   A1:01:02:5C:4E:FF:02:B8:DE:DB:62:C8:65:F6:B4:CB:91:4D:8A:8A
Authority key identifier: 7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74
Certificate issuer:       /CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
Certificate serial:       0194BBCF0531EC892F1593A2D8AAD231D7F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
Manifest number:          0FE8
Signing time:             Fri 31 Jan 2025 10:01:34 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:34 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:34 +0000
Files and hashes:         1: 0m_FCYLNpCepQvgGxnt5Etr0-7E.roa (hash: KPGMzAKskMiHXfK0deJxIO7QjTi1yyfKU8relBE7uzY=)
                          2: e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl (hash: qA7x8WCbR6lFJcU7/VHHQTVsNHFLYXILrsRNHG2KSkM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cf:05:31:ec:89:2f:15:93:a2:d8:aa:d2:31:d7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
        Validity
            Not Before: Jan 31 10:01:34 2025 GMT
            Not After : Feb  1 10:01:34 2025 GMT
        Subject: CN=a101025c4eff02b8dedb62c865f6b4cb914d8a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:ea:f1:09:22:92:b0:51:a1:29:7a:9a:c1:
                    6d:95:19:f0:75:bf:c2:48:cc:3e:b2:6a:36:5b:bd:
                    35:ac:38:52:7d:a6:c8:10:2f:d2:18:b6:cf:c0:81:
                    7a:c1:a2:d0:41:6c:fc:05:f3:ea:5a:9b:81:d6:d8:
                    4a:23:ea:6c:f3:3f:b4:7f:11:1b:b0:4f:f1:3f:dc:
                    3d:59:eb:0e:a8:76:ba:8c:49:43:5f:17:97:15:c4:
                    23:f1:1e:80:88:07:1c:26:72:d8:f3:be:48:28:4e:
                    82:9a:77:cc:c6:f5:6a:ed:da:23:eb:76:a8:d5:b4:
                    91:ba:03:21:c2:ff:df:0c:2c:32:2b:ca:19:c9:4e:
                    10:23:f6:ea:48:31:bd:b1:2c:76:aa:e6:3e:7d:9e:
                    d6:c4:68:3c:3d:46:99:03:34:7e:04:ef:77:ed:0a:
                    8b:71:a0:6e:30:5d:c3:44:d0:ba:67:76:44:59:b2:
                    a7:26:1f:9a:5d:a8:20:d5:dc:7e:e6:1c:52:07:c1:
                    f0:68:79:0c:f4:4c:27:4c:c6:5b:54:1c:8f:ef:f8:
                    52:ac:1d:0e:00:fc:59:f6:95:e3:72:4c:68:c0:91:
                    61:8e:be:3c:d5:3b:9a:4f:28:f5:16:f7:db:28:c1:
                    17:f4:e3:38:3a:5f:0e:6f:a8:c3:98:93:ba:d5:18:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:01:02:5C:4E:FF:02:B8:DE:DB:62:C8:65:F6:B4:CB:91:4D:8A:8A
            X509v3 Authority Key Identifier:
                keyid:7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:51:98:06:2a:8a:c9:3b:e4:7e:02:bb:c7:1d:25:8d:a5:81:
         18:0a:df:ac:47:c9:c6:1d:c9:fe:5e:96:10:3c:34:b7:3a:49:
         44:88:ce:2e:ac:ac:6a:b8:1d:f2:d8:90:a7:ae:8c:7d:e4:71:
         c2:4f:e7:ba:25:42:71:b5:e4:26:99:a2:d9:98:4d:37:c7:f6:
         40:e3:ac:41:de:63:95:98:e0:3b:a9:fb:8b:06:40:f5:89:9b:
         47:ea:24:f1:1c:14:ab:6a:05:40:e2:9a:e2:56:3f:62:ce:db:
         07:ef:e1:55:cc:68:98:3b:a1:63:dc:f1:56:93:a9:83:3b:24:
         17:0a:bc:32:a7:86:76:e7:4a:49:dd:1f:d9:cf:06:b1:df:e0:
         c7:99:4a:0f:72:9b:2f:12:52:06:9f:f0:ad:75:ef:58:a6:9e:
         20:98:6d:c6:20:35:7f:e2:59:73:80:18:4b:9b:1c:64:07:f6:
         55:21:17:6c:c5:50:c3:7c:68:4c:88:7c:38:c5:3e:a9:e0:98:
         4f:ef:29:1a:47:b2:0c:d1:55:78:06:68:20:6c:7f:0c:43:aa:
         92:09:9f:e1:5b:65:6e:f2:4a:62:b3:35:cc:2f:6e:a9:3c:19:
         98:0e:28:f9:fe:d1:e0:cb:b2:50:c6:8a:41:c6:64:ed:e3:53:
         f4:37:39:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:36 2025 by rpki-client