Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
File:                     obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json)
Hash identifier:          ZMR17FZxiJI3hNjDsuMuJz8QX3iWsrYgfh2bU6Y22S4=
Subject key identifier:   80:D0:4F:1A:A4:54:E3:FE:8F:A1:2B:B1:4C:6D:BE:FB:40:C4:64:34
Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4
Certificate issuer:       /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
Certificate serial:       0194BC3C853F532C2FCEF622D0847626D7BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft
Manifest number:          09C5
Signing time:             Fri 31 Jan 2025 12:01:10 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:10 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:10 +0000
Files and hashes:         1: 72WUZg4a8Mn3wM6qcS6lKaFMvy4.roa (hash: J12B/L+u1x8UjkZE3gEtXs8elHp+K5+c+2ncMirPn90=)
                          2: GvxdNTfKZ8cK6T0E1lcMYR0-Eug.roa (hash: mWN38f7I4P8OFBnEBE5XW/rXhM8WqbQ5XVGNq6kRS/Y=)
                          3: HoVqlvj2DjGVdZLOvKg3TFq5rLM.roa (hash: WucuWrLb+R81SwXSHnAbfiXE85yoaiYHwxSfh36VGn0=)
                          4: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: F1JTdVxRalNgmaH1xYYA9xw2eWGlaGdc3J1936/aJW0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:85:3f:53:2c:2f:ce:f6:22:d0:84:76:26:d7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4
        Validity
            Not Before: Jan 31 12:01:10 2025 GMT
            Not After : Feb  1 12:01:10 2025 GMT
        Subject: CN=80d04f1aa454e3fe8fa12bb14c6dbefb40c46434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:27:a8:9e:ee:6f:01:f4:d5:e3:0c:b8:60:
                    07:6f:d1:93:0b:e1:cf:60:22:43:ca:4e:85:78:6c:
                    40:54:7f:b5:20:f6:1b:81:b1:56:e2:3e:a3:c0:bc:
                    3d:86:e8:af:f9:a1:fc:ab:cc:a3:19:ba:25:9e:bb:
                    35:a1:2d:80:48:06:9a:3d:78:23:e9:e2:e4:0c:01:
                    df:92:ae:62:86:7e:c3:52:d8:d2:64:f0:0b:9f:0a:
                    05:df:e2:1e:61:37:d1:20:19:e3:f2:85:e5:3f:26:
                    e4:b5:7e:b7:e8:34:09:49:96:ad:dc:2c:30:d0:0b:
                    01:cb:57:3e:a5:4d:d7:50:4e:b4:25:b8:8f:d3:8b:
                    a1:40:31:0a:93:04:dc:14:91:7f:48:f6:92:23:92:
                    ec:31:41:a2:8b:fb:21:08:b9:4e:c6:3b:fb:39:14:
                    6e:06:59:2d:26:d2:3a:ed:13:f5:a4:b0:c6:21:64:
                    b1:29:09:77:b6:01:db:e2:03:60:f5:32:f5:9f:27:
                    6a:4a:0f:7c:c8:e8:ef:18:6a:fd:9a:a0:1d:4f:bc:
                    ad:17:5f:d1:0e:0a:6a:2a:ac:4c:8f:2e:2a:ca:c6:
                    9b:d8:d1:ca:41:3d:ad:4c:da:2b:ee:01:15:6c:bf:
                    4b:fb:0e:28:22:ee:c8:3e:e5:8a:40:89:16:35:2d:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D0:4F:1A:A4:54:E3:FE:8F:A1:2B:B1:4C:6D:BE:FB:40:C4:64:34
            X509v3 Authority Key Identifier:
                keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ac:0d:57:04:77:4b:87:43:a6:ff:37:76:66:31:53:07:f0:
         c9:2c:1b:31:f0:09:82:e3:6d:54:cb:7a:45:68:df:af:0f:60:
         46:19:b7:4b:bf:1b:62:59:c9:1b:73:4f:26:be:57:48:7b:53:
         b1:46:16:c5:99:0e:ec:8f:67:0b:b2:b4:3f:24:5d:65:ae:b6:
         aa:23:54:89:4a:fc:35:6e:63:93:8a:41:9a:47:05:cc:e7:8d:
         a1:cd:90:84:21:07:94:48:15:3d:bc:a0:d9:89:fa:27:e3:84:
         76:de:d6:27:e9:18:14:79:a6:c5:90:f3:ab:d9:96:85:55:81:
         fd:70:1d:04:51:d7:6a:70:1b:01:a0:63:53:b5:35:0f:6b:6e:
         79:9b:a7:4b:90:3f:90:86:ff:c2:8e:e9:08:50:bd:77:99:0a:
         16:64:cc:5e:50:5a:cc:25:e1:ca:80:5b:28:f3:b1:8b:28:e4:
         9a:07:87:61:a3:b5:1c:f3:ee:30:bf:11:00:14:7d:13:e8:bb:
         da:51:57:be:1d:52:1a:da:ab:5b:dc:e1:74:70:81:f5:5b:2d:
         0e:65:2d:dd:81:9f:8f:c3:b0:67:97:94:94:0d:b3:2b:f8:26:
         e2:24:4f:d0:89:4c:54:37:95:db:9b:48:23:72:e3:d1:77:fa:
         b3:66:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:25 2025 by rpki-client