Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
File:                     B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft (raw, json)
Hash identifier:          7s6jVWQ2jUPKEmmi8zUf5OleGBWyb8nXh9Pm8kb0H1I=
Subject key identifier:   9C:B7:EE:FF:37:00:FE:68:8A:A9:B3:E0:67:E1:04:DB:0A:F8:95:0F
Authority key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
Certificate issuer:       /CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Certificate serial:       0194BCA9BA22022470D5650E48028089381D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 14:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:27 +0000
Files and hashes:         1: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl (hash: 65QsFsEZUqLVs2DC3G3qqneAI0Ib6rfZ6qvBT8M2w9o=)
                          2: NU7LpjX_c-YRDnvo18YVHXBujbY.roa (hash: odut5lYelTDd0ROdgEZa5uhbKyC1bMMR57mT+YqgUgc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:ba:22:02:24:70:d5:65:0e:48:02:80:89:38:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079889d9de4f07014beb2c0a312cd73652a3fc38
        Validity
            Not Before: Jan 31 14:00:27 2025 GMT
            Not After : Feb  1 14:00:27 2025 GMT
        Subject: CN=9cb7eeff3700fe688aa9b3e067e104db0af8950f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:ee:e6:b4:bd:60:1a:ed:5b:98:26:8b:51:
                    ca:ac:26:16:96:be:b6:9d:83:fe:93:e1:47:04:8a:
                    9b:f8:20:e3:8c:02:8d:42:d5:f7:80:bb:26:b4:c8:
                    4d:1d:f5:40:40:4f:4e:03:b6:66:8f:4c:7a:80:d2:
                    78:44:98:8b:05:99:3b:bb:5d:a0:f2:cc:70:40:3e:
                    ad:05:b4:30:1b:66:0f:98:f5:ba:d7:9c:11:2b:6d:
                    23:c2:79:09:26:03:8b:f4:1d:67:11:58:3a:7a:89:
                    9e:a2:61:24:92:41:77:10:63:75:89:2a:9e:f1:c3:
                    e8:35:80:a3:ec:8c:bd:ae:89:97:c7:35:45:b7:bf:
                    b7:a9:a8:03:44:eb:44:02:c2:35:2a:3e:c4:66:24:
                    a8:76:02:48:40:f7:33:33:85:84:a1:49:a2:75:50:
                    03:76:a1:cd:5f:b5:b9:69:a7:de:d7:30:d6:39:67:
                    00:76:d9:51:4f:d6:9b:97:98:a1:d5:f8:d2:6c:8c:
                    29:ef:61:4d:64:d1:78:6b:7c:62:f7:35:0e:fd:7a:
                    5b:cd:cf:6c:c7:54:7e:4b:fa:29:e6:f1:e7:0b:f6:
                    1b:cd:00:05:a9:55:a7:88:2f:25:cf:17:b9:9e:92:
                    a5:d7:f2:98:1b:2f:b9:82:90:9b:fb:eb:e8:cc:60:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B7:EE:FF:37:00:FE:68:8A:A9:B3:E0:67:E1:04:DB:0A:F8:95:0F
            X509v3 Authority Key Identifier:
                keyid:07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7e:66:58:9a:be:aa:ca:16:cc:f7:f2:2a:fb:31:32:2d:27:
         35:74:81:be:17:e3:6f:1e:a0:15:7b:75:aa:f4:8f:13:d9:81:
         c3:0f:b7:a3:9b:27:3f:ea:c5:27:26:68:2a:c4:51:f8:8e:d5:
         ba:72:ba:4b:61:a9:e0:08:63:70:fd:97:11:92:66:0d:35:cb:
         ba:c6:58:49:8f:07:b6:77:f0:c3:2b:6a:56:fa:82:ec:9a:2a:
         54:c5:45:1f:25:d3:aa:37:6c:91:2a:e1:a3:01:2a:c1:c0:2d:
         2f:9f:1a:c0:93:cf:12:df:c7:99:76:31:d2:3b:17:91:23:21:
         39:e6:b8:ed:d9:8f:bb:df:e4:79:66:82:8d:2d:54:a6:f3:99:
         e1:06:ab:75:a7:2b:fd:9a:73:c2:d2:53:9d:06:9b:06:ea:5e:
         cb:aa:3a:64:59:0a:9a:2a:e8:47:a5:cb:a2:c5:cb:00:a9:c9:
         e8:79:fc:80:46:bd:82:b1:ff:90:fb:e1:1a:b1:37:5a:23:94:
         45:7d:d2:cd:ec:c6:34:4c:65:81:e6:8f:ad:a2:52:26:7b:7b:
         35:ce:2e:09:2b:ab:56:9d:e0:31:02:8a:0f:78:04:db:87:1b:
         02:c5:fe:9a:60:4c:02:57:f4:53:51:20:43:2b:f0:a4:9a:89:
         2c:96:49:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:21 2025 by rpki-client