Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
File:                     cOEuvY__KmsFTe2d49j2XqY1-4M.mft (raw, json)
Hash identifier:          OX6Gl4+Y7RhO9T5c2uralNhhvcwJsvrTB6EZaesKWBY=
Subject key identifier:   6C:E0:82:B8:CC:A3:CA:C1:52:B3:4A:45:9D:99:D5:9B:1C:6B:CE:4A
Authority key identifier: 70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
Certificate issuer:       /CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Certificate serial:       0194BCE0B19AD7C4F183D308F205454FC595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 15:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:29 +0000
Files and hashes:         1: _OMR6VqRZhlG55gSbNS5mlP8YvY.roa (hash: bSmsi8Rv/FhiuL3CjsoHR6R1aLfmil9//pa878a40EA=)
                          2: cOEuvY__KmsFTe2d49j2XqY1-4M.crl (hash: CaRLl0maaxGcvpXDyJ1UeyKOJxE5vJh3xz6w/AUW8IU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:b1:9a:d7:c4:f1:83:d3:08:f2:05:45:4f:c5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
        Validity
            Not Before: Jan 31 15:00:29 2025 GMT
            Not After : Feb  1 15:00:29 2025 GMT
        Subject: CN=6ce082b8cca3cac152b34a459d99d59b1c6bce4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:98:00:3c:1e:c4:d9:40:3d:cf:8b:5f:43:
                    a7:96:e3:73:44:3f:23:08:93:be:02:47:25:89:15:
                    b5:b9:d0:3f:e4:92:da:9a:75:4c:71:cb:23:39:c0:
                    27:76:11:88:ba:05:e3:40:64:df:84:35:10:5a:b9:
                    36:0e:2d:6c:2b:c8:11:84:b7:a2:7e:fe:76:86:8c:
                    4c:2c:e1:80:43:11:f8:62:cb:74:f7:87:13:f4:fc:
                    fb:87:45:92:22:53:b0:92:88:54:89:73:d8:33:1d:
                    25:12:90:95:cb:01:e4:1e:05:14:0d:4c:e2:79:0e:
                    5f:dd:c0:e1:24:c7:69:d4:45:3f:98:1b:cb:39:f7:
                    6f:ec:46:c5:a6:dc:9e:17:7c:2e:35:66:c5:5b:41:
                    4f:13:a0:24:3b:20:97:27:8c:9a:b3:34:26:0f:56:
                    36:bc:ed:bf:31:c9:90:3c:5c:94:06:f8:35:3b:15:
                    ef:ce:77:2b:32:2d:7b:4f:96:ce:36:c6:b6:61:1d:
                    af:a5:c0:e3:ab:78:fe:16:b7:52:5e:ca:50:7f:6d:
                    f2:8b:bf:2d:64:33:47:e0:c9:ac:23:dc:c9:c0:93:
                    10:32:68:46:6b:27:d1:0a:ea:3b:d1:5b:2d:cd:f3:
                    a4:88:e8:7b:6f:ee:c5:f6:7a:96:e6:83:9f:43:bb:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E0:82:B8:CC:A3:CA:C1:52:B3:4A:45:9D:99:D5:9B:1C:6B:CE:4A
            X509v3 Authority Key Identifier:
                keyid:70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:ac:04:35:54:9d:04:e1:cc:52:47:07:37:52:3c:ff:a0:
         85:de:55:21:7b:47:93:22:16:c3:8b:66:cc:f4:9d:aa:7a:03:
         4f:9d:91:bf:f5:21:b7:9b:91:bc:71:a5:43:45:42:08:36:6f:
         e9:c3:7a:f1:a6:3e:44:f9:c1:d1:b9:a7:ef:52:7a:ad:e3:76:
         ef:a8:86:ca:12:65:52:7c:2c:28:0f:ab:36:ff:3d:1d:92:b1:
         21:ad:43:ca:62:b2:71:dc:36:9e:ae:2d:f5:0d:88:bb:54:f1:
         8d:ac:1d:91:88:50:70:6d:c4:2b:77:db:3e:5f:b3:02:74:a0:
         83:0a:73:40:49:89:fb:7e:f9:92:53:38:c3:2e:62:27:d3:ac:
         ff:2e:da:b4:64:5d:0a:49:ba:41:fd:7a:38:e5:44:8f:da:ad:
         96:ed:f8:9c:23:bc:d8:e9:2c:f0:62:12:07:c7:4c:79:49:bd:
         65:42:1a:fe:3e:9f:be:7d:b0:2d:88:0b:fe:20:e8:41:e2:51:
         4d:1b:29:36:72:08:44:c2:7d:b6:52:5e:14:0b:51:9d:2a:28:
         ea:22:97:0f:60:d5:38:d2:57:32:2c:e9:cc:f4:46:2e:0a:c1:
         d9:0d:d5:80:03:5d:a1:97:da:c2:ad:79:71:fa:67:75:0b:f0:
         26:eb:7f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:31:13 2025 by rpki-client