Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
File:                     2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft (raw, json)
Hash identifier:          xLsZIMp1HB5y4yrh5t3rZmwulAnWs2tFFvFuSLRFr2U=
Subject key identifier:   15:77:73:A8:0E:0F:FB:E7:FE:69:CE:CE:AF:B8:45:3B:A2:86:CB:35
Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
Certificate issuer:       /CN=d9d0318f2685e32d2dba923f6662771427359738
Certificate serial:       0194BC3C514735526A0EA69B5BFECFD3D223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 12:00:56 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:56 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:56 +0000
Files and hashes:         1: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl (hash: +LibVa6J74UWVVBuBVe6zj8PAtrWn9scItEzmQNGZPQ=)
                          2: 7qHMf0tDla85K4MWekgfnZC_GZ0.roa (hash: JjXdTvxVzICRsVC2xEQhCc6QbY1Z09t0LaEqj7BxkCU=)
                          3: NqNZtnoXM7iwpxu3KH3ENc53u_M.roa (hash: tIhk+tugHOEbprNpMaqqI4LseamZ25JrNrb/ctC6o6U=)
                          4: OCzx_78p6LuRZ2Y9VdripBX2gM8.roa (hash: Mc0jDuk9HPzcuOYUP3zkI8gHInm8/SYkdeSbffcFADA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:51:47:35:52:6a:0e:a6:9b:5b:fe:cf:d3:d2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738
        Validity
            Not Before: Jan 31 12:00:56 2025 GMT
            Not After : Feb  1 12:00:56 2025 GMT
        Subject: CN=157773a80e0ffbe7fe69ceceafb8453ba286cb35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:e7:a1:e8:dc:02:c1:80:85:ca:6d:72:cd:
                    02:c2:4f:a1:29:38:4e:dd:47:64:b1:47:78:e6:78:
                    3b:e6:8c:ee:27:be:b7:75:48:ab:e3:9f:bb:58:e3:
                    be:99:0c:76:6e:6f:0d:ac:65:93:ea:2c:ab:af:a0:
                    8a:e2:b2:ca:31:ed:dc:b5:e7:60:b7:97:89:ad:a6:
                    2f:80:19:f2:07:6f:5d:3d:ef:d6:67:c3:0e:6e:51:
                    e8:09:ac:fe:d3:f0:0f:04:a3:0e:17:f9:52:3b:e7:
                    9a:79:ab:c3:2c:62:10:40:92:c8:e1:f8:39:12:3e:
                    0e:db:90:aa:f3:27:a0:84:5f:1e:f8:74:4c:5e:96:
                    66:4a:fa:02:bd:6d:18:cf:c9:27:43:78:08:fc:95:
                    52:f9:44:e5:4b:04:78:06:e4:16:63:c9:f0:ad:1c:
                    e4:2d:0f:aa:a4:f5:70:3d:37:e6:79:0a:b8:2b:d2:
                    a9:fc:9a:64:8a:50:6f:b5:68:aa:41:0b:eb:3e:10:
                    20:ea:d9:e1:36:8d:6c:fb:eb:e8:4c:bb:a0:3a:e3:
                    9e:93:bc:31:bb:35:60:e9:59:07:6c:4e:8c:ac:46:
                    18:e8:26:a6:94:f6:51:ac:8f:d5:b4:1b:8c:b7:46:
                    b4:65:c0:ae:60:60:52:29:03:4a:10:d6:a8:54:de:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:77:73:A8:0E:0F:FB:E7:FE:69:CE:CE:AF:B8:45:3B:A2:86:CB:35
            X509v3 Authority Key Identifier:
                keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:84:40:b0:e7:df:ad:2f:f9:ae:b6:94:36:fe:c3:4b:fe:d1:
         5c:4f:b5:62:7b:00:39:4d:5e:79:a8:c9:8f:ad:9b:23:0b:66:
         b7:23:cc:b2:4b:b4:b1:b2:18:f1:2c:b8:8d:4c:e8:07:89:4b:
         d5:82:d8:35:6f:d7:fc:ef:0e:f9:44:95:09:80:f5:bb:85:01:
         27:a0:ed:73:6a:28:74:75:e0:b7:3e:34:9e:0f:40:a7:e0:88:
         f7:3d:24:6c:ea:f0:d3:bb:90:c5:c1:6a:79:fa:6c:7a:80:df:
         12:34:c1:94:6d:ed:d7:28:a3:61:6e:19:c8:da:72:29:39:a3:
         47:4f:34:79:46:ce:8d:6b:6e:00:45:49:44:82:6a:6c:30:7f:
         7b:8c:f3:35:9b:b0:62:5b:1c:9e:19:25:2f:f6:ad:d9:47:eb:
         dc:8a:49:5c:4b:73:d6:be:55:ed:b7:ec:9f:00:81:71:60:01:
         3c:36:6b:ac:85:d9:3e:7a:da:a1:22:84:f2:a8:83:d4:8f:a2:
         19:76:6a:e4:8e:5d:6b:75:b8:25:fb:31:db:a4:2a:01:a9:43:
         9b:66:32:ec:53:f9:36:3d:22:47:96:4e:d8:1f:89:e5:55:6e:
         0b:96:02:96:49:c6:46:fc:3f:80:23:dc:6b:c7:a5:1e:56:a9:
         96:4b:aa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:44:56 2025 by rpki-client