Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
File:                     MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft (raw, json)
Hash identifier:          4l4AxYkNmYjMFCXftLe0FprL4ORn3ao+xHLp/QEJYvA=
Subject key identifier:   B8:05:C7:CC:95:D3:2B:1F:08:26:B6:6A:F3:C4:9A:91:C7:AA:6A:1C
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Certificate issuer:       /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial:       0194BD1800798BDB7397384BB666FF6A7A09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft
Manifest number:          13BE
Signing time:             Fri 31 Jan 2025 16:00:54 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:54 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:54 +0000
Files and hashes:         1: MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl (hash: Sy+688YqQNGnzjbT3GAyH+27fR2qIpfIB3SCmzmES4Q=)
                          2: wnCF8G6ZZGnR9zgGNXBDzudbf2o.roa (hash: Wo5vjTxSHNPOFI8oUhIjkfhiLwT8LICLQf6Pc8oi+dU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:18:00:79:8b:db:73:97:38:4b:b6:66:ff:6a:7a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
        Validity
            Not Before: Jan 31 16:00:54 2025 GMT
            Not After : Feb  1 16:00:54 2025 GMT
        Subject: CN=b805c7cc95d32b1f0826b66af3c49a91c7aa6a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:07:59:9a:78:e1:cf:90:c8:ab:01:da:b7:64:
                    4d:42:ab:04:9a:6c:3f:51:48:28:0b:67:67:9e:12:
                    a3:2d:55:aa:c3:d8:cf:18:99:09:0e:0f:e8:2c:c6:
                    d9:39:09:76:12:73:55:41:a2:f1:80:5d:1b:b9:0d:
                    de:7e:f7:a5:bc:13:16:96:c1:9a:3e:52:60:26:e0:
                    29:ce:2c:05:d3:76:f6:c9:70:34:11:50:5d:29:ea:
                    5f:b2:e0:d7:91:41:0f:ee:46:a8:b2:d3:2b:c5:d6:
                    1b:0d:12:91:05:8c:33:94:6a:d0:d2:29:b5:38:9f:
                    67:e3:b1:fe:ef:66:9f:34:1d:8f:f2:17:0b:d2:2c:
                    9f:24:15:74:c6:44:bd:6f:82:b5:f8:45:3b:c3:97:
                    dc:e0:f9:d1:76:30:23:fc:1d:23:16:3b:40:8d:bb:
                    42:6e:57:cb:23:0a:b4:be:e2:ae:86:25:ed:33:bd:
                    16:4e:59:e7:5e:5f:a1:97:44:df:8b:32:ca:58:53:
                    99:ac:2b:98:24:fb:9f:56:a0:c2:74:e2:06:56:44:
                    1f:48:b0:a5:2a:e8:b7:b4:9a:5d:af:ec:b5:b2:60:
                    2b:44:10:67:e7:1e:bd:78:e0:a1:e3:ee:ef:ab:ab:
                    39:a3:92:40:7b:a5:69:93:16:ec:cd:3c:10:45:7b:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:05:C7:CC:95:D3:2B:1F:08:26:B6:6A:F3:C4:9A:91:C7:AA:6A:1C
            X509v3 Authority Key Identifier:
                keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b5:e5:f7:92:8f:79:d4:57:15:e8:1a:e4:63:b7:2e:35:3d:
         c1:e0:9d:7a:65:cc:7a:53:1c:b9:fa:82:28:70:49:ca:ed:ab:
         25:c9:63:97:9a:45:60:07:32:4c:f3:4a:6b:c7:e0:9a:05:e6:
         c1:a3:2e:15:b5:f8:9d:1a:8f:3c:02:47:81:e7:67:d7:27:3d:
         83:78:92:d2:cb:b6:b4:2f:82:f8:dc:29:a9:40:77:81:19:03:
         59:0d:35:d8:82:45:ee:c4:d5:b1:f3:45:06:0a:bf:f0:b3:3e:
         c1:8b:b5:30:ec:97:b5:51:9c:cd:bd:d0:6c:3a:06:0c:1f:30:
         e9:e8:c9:01:84:3c:58:1d:94:c5:8a:70:58:f7:99:7b:52:85:
         d9:b9:d5:93:c1:b6:70:a4:0f:2c:fe:90:a0:70:8c:ca:3e:bc:
         ec:da:6f:65:05:fc:2a:bc:9f:8d:de:55:79:1f:55:92:14:b9:
         30:75:7c:e9:9a:e5:d3:e0:7e:d3:b9:34:61:1b:03:a2:fa:8d:
         b4:54:42:79:2a:b3:76:f0:90:8a:27:21:43:76:8e:55:1f:dc:
         a1:c7:27:32:47:51:6f:61:0d:a3:88:7e:d6:fc:90:56:e4:4d:
         ff:54:e4:35:9d:31:ff:65:20:7e:95:1a:03:18:ca:55:ed:a5:
         e0:96:ce:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:23 2025 by rpki-client