Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
File:                     pKN763_WXKqa_EbZ8kJzzSfA-WA.mft (raw, json)
Hash identifier:          gXT0t3Hri0kQJ3DpvOecv3nRmMpCX6DqnIooWeqGMLU=
Subject key identifier:   03:89:3D:5D:79:80:63:06:F2:5D:D9:BE:D6:B6:9B:E0:40:CC:2B:43
Authority key identifier: A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60
Certificate issuer:       /CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
Certificate serial:       0194BCA9FC26DF378D30D0AFC02DAA75329F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 14:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:44 +0000
Files and hashes:         1: eZY2teiRCMuc8ordB3siE6vvyrU.roa (hash: eYVuxyQrp/ArDQADFzcG2OxANFHCCc8GbHzB/2LAyF8=)
                          2: pKN763_WXKqa_EbZ8kJzzSfA-WA.crl (hash: xTAfehaJR9B5DxQkPqNTXMciXZb0ZySJsWvvkFTCo/E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:fc:26:df:37:8d:30:d0:af:c0:2d:aa:75:32:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
        Validity
            Not Before: Jan 31 14:00:44 2025 GMT
            Not After : Feb  1 14:00:44 2025 GMT
        Subject: CN=03893d5d79806306f25dd9bed6b69be040cc2b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:9c:d9:8c:71:fa:33:ff:e7:5a:8f:ae:7b:
                    67:7e:a0:a5:ff:f8:89:c8:b0:12:2b:80:a3:8b:c7:
                    1c:ed:55:1f:35:67:e4:1c:f7:72:71:d5:4e:23:cc:
                    f7:7b:60:11:e5:63:d0:ca:53:19:21:2f:37:bf:49:
                    9a:02:85:eb:83:d1:17:28:00:b4:a1:54:7d:80:27:
                    d9:94:66:28:cf:8f:94:48:2f:f6:96:db:b1:9d:c8:
                    ed:e1:e4:3c:dd:9f:38:24:bf:96:c8:c9:9a:3b:5f:
                    d7:fe:ac:b0:fa:1f:08:a6:b0:aa:d1:54:89:3f:e1:
                    1a:87:d0:f0:c4:c1:b8:12:27:dc:28:1f:44:0c:1e:
                    e5:f6:a4:4c:1a:5f:a5:ad:48:cc:56:72:03:2f:1c:
                    35:5c:a8:2e:b0:78:c4:df:7a:64:80:d7:93:51:57:
                    be:9e:57:cd:f2:95:74:17:68:4a:d2:a1:76:7a:09:
                    7e:a9:19:0c:25:84:f0:a6:c4:e5:a9:15:e6:42:fd:
                    51:f7:cd:4a:00:8e:0f:9c:49:01:66:5c:dc:80:1b:
                    11:65:3f:53:cb:8d:1a:5b:ab:3c:89:41:7c:51:e9:
                    ad:e2:22:e0:a2:6f:96:50:3f:79:59:1c:3f:ea:51:
                    d5:37:d1:91:9c:e5:e8:0a:60:1e:63:36:69:61:9b:
                    f1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:89:3D:5D:79:80:63:06:F2:5D:D9:BE:D6:B6:9B:E0:40:CC:2B:43
            X509v3 Authority Key Identifier:
                keyid:A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6e:21:68:52:13:60:d9:44:d8:e2:81:13:1a:9c:77:4b:50:
         e6:bd:a2:fb:aa:19:88:0c:32:4b:d4:53:23:7f:db:ad:69:b3:
         c2:0e:58:ee:5a:b6:db:db:45:53:ff:63:12:af:c8:26:6e:b5:
         d8:cb:65:f3:cc:fc:eb:48:e5:45:a5:eb:c6:29:b2:da:ff:f1:
         5f:ac:d8:71:6d:4a:63:be:b8:56:2d:13:19:e0:ee:fe:4d:26:
         7e:05:a4:64:dd:93:8f:3c:64:2e:29:5c:74:20:5d:d9:82:d1:
         11:45:1b:28:22:b2:9e:24:47:dd:21:39:0e:ca:db:e9:9a:88:
         92:d9:23:0a:67:e9:5e:0f:98:16:0a:fc:58:40:5e:a8:0a:a9:
         34:6b:d5:80:1b:c0:d9:89:40:1c:49:2a:14:5f:85:e7:e3:a2:
         71:a7:93:0d:89:08:11:05:6e:73:9f:81:0a:47:57:d9:4d:40:
         ac:52:63:d2:06:56:e2:a0:d5:ff:a6:7a:35:17:e4:3f:22:3e:
         c4:43:38:a8:d7:b6:ed:b6:ca:08:9f:40:70:92:77:cf:9f:72:
         91:4f:49:74:22:56:b8:59:6d:88:bb:3a:33:17:1d:68:2b:8d:
         03:57:d1:d8:20:07:23:ce:7a:8d:01:ba:23:49:f6:84:74:51:
         fb:d4:20:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:01 2025 by rpki-client