Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
File:                     Fi14JJtyG00s6M9t_PvEQiITrJ0.mft (raw, json)
Hash identifier:          K+0ofLg9OaQyPkk5l2oheo4Iu4GlZk05WFWzv7u5Ga4=
Subject key identifier:   53:53:2A:80:05:6A:C4:AE:B3:BC:FE:37:10:DA:B0:B6:28:6B:E9:82
Authority key identifier: 16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
Certificate issuer:       /CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
Certificate serial:       0194BD8579B19F2AED4E9CE623ED97C975E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 18:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:28 +0000
Files and hashes:         1: 1-OxGWMnguhulz6f31kCb1mmRHrM.roa (hash: SvBOg3Xrt3LXP7jg7xDbyxKXVwwahdO0dORGRkeHvnw=)
                          2: Fi14JJtyG00s6M9t_PvEQiITrJ0.crl (hash: axYlQaMEeAnzBmwkJ0lSxbNXn1czRtWnDqaKd4zEswQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:79:b1:9f:2a:ed:4e:9c:e6:23:ed:97:c9:75:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
        Validity
            Not Before: Jan 31 18:00:28 2025 GMT
            Not After : Feb  1 18:00:28 2025 GMT
        Subject: CN=53532a80056ac4aeb3bcfe3710dab0b6286be982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:e3:ff:80:c6:90:af:9b:9b:30:fb:17:f6:
                    f8:95:ff:91:a9:19:3f:a5:fa:dc:88:3f:70:4b:f4:
                    f4:da:9b:2e:84:d9:2f:6d:9d:92:c0:e8:cf:a6:4c:
                    2d:c5:e0:67:8c:40:ad:f7:a1:4b:da:67:68:71:62:
                    82:a9:38:e6:9f:8d:3a:25:f0:fc:fb:e3:eb:ae:95:
                    f8:74:ea:97:73:2d:49:8e:76:06:17:36:b8:9a:e8:
                    1f:ae:aa:79:05:b0:f1:37:65:2b:ff:1b:91:db:64:
                    c4:2e:7e:95:fe:45:0a:2f:42:82:05:79:15:16:cc:
                    04:b4:48:19:7b:92:f2:e1:71:61:4c:42:b8:ad:ca:
                    e7:ca:5b:bc:12:68:9a:85:87:78:28:c2:74:eb:c3:
                    57:1d:b5:a5:36:6e:6c:52:e6:7b:c8:2b:7b:c2:61:
                    03:8e:dc:64:fb:76:0c:06:f1:df:c6:76:67:09:09:
                    82:bd:7b:88:42:07:fb:7c:33:0f:93:0d:c7:6d:1d:
                    07:55:7b:0c:58:c9:08:ca:1f:ca:98:88:dd:6d:7c:
                    6b:53:6a:46:99:c2:ed:78:fc:25:17:bd:47:32:ec:
                    2d:65:a6:c2:c6:53:0d:eb:a0:87:ba:aa:6d:eb:26:
                    93:ad:10:3d:80:b7:18:4d:d2:3b:e8:39:4d:28:31:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:53:2A:80:05:6A:C4:AE:B3:BC:FE:37:10:DA:B0:B6:28:6B:E9:82
            X509v3 Authority Key Identifier:
                keyid:16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:bb:49:27:5a:dd:6f:cd:4c:db:de:6e:28:99:31:ac:75:0b:
         17:6e:0e:81:71:7f:72:36:cb:86:4e:04:0d:9f:da:01:58:cc:
         1e:f5:d4:76:d3:d8:49:b4:5d:3e:86:a5:ab:f8:a1:98:9c:2b:
         fd:e9:64:f6:9c:5e:6d:89:e6:3c:45:49:16:cd:17:e9:3c:ad:
         9d:93:bb:73:47:bf:84:b5:1f:7b:49:02:cc:64:9d:0d:d8:18:
         90:fb:66:e4:b7:12:0c:b1:af:4d:f8:cc:bd:87:78:4e:ac:48:
         61:1b:eb:db:44:5e:f5:fc:a0:9f:9f:59:3d:d7:8c:d3:19:d2:
         ae:0d:6f:b3:51:0b:3c:2e:af:70:fd:4e:78:63:3e:80:fb:c3:
         bd:e3:b8:68:3d:3d:4b:55:b0:bb:10:5e:ea:2e:0d:55:36:82:
         a6:e9:da:a2:32:85:ed:cd:d0:10:a6:d7:35:a7:af:bf:4a:a8:
         d6:d9:da:91:d2:b7:ff:69:15:78:54:6f:8d:1c:b5:60:97:03:
         d0:a2:7c:85:85:02:80:45:8c:05:12:ce:86:7a:54:43:15:fb:
         58:c3:df:05:23:d3:38:43:26:b2:8e:58:55:1c:0f:65:26:20:
         13:3f:a2:70:13:10:18:5b:ea:b7:80:53:7a:c5:d2:b0:25:65:
         79:36:e6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:19 2025 by rpki-client