Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
File:                     r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft (raw, json)
Hash identifier:          sdbzLcO2sfw2zB+5EhYIg9JX5ar5Ct9jOhh4EwncqKk=
Subject key identifier:   07:D1:61:8D:58:86:FB:B3:16:57:AF:A3:47:B9:54:CA:D9:2F:8A:5D
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Certificate issuer:       /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial:       0194BCA999E7750927A7F7B50F7073E012B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
Manifest number:          0E02
Signing time:             Fri 31 Jan 2025 14:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:18 +0000
Files and hashes:         1: 4fpK3rH7dDsLZcwC8fv__9MCBNk.roa (hash: H+mNwrXZUXB3OGGb/VrqoSQBBpWlzYIXILfgLQd6xuU=)
                          2: 4niQy2euydDFq7GTJuaxJySkYgE.roa (hash: lEIj5wjui/e5DTBCiecGhk5U5JYfLtQIN+3o7VCLqqU=)
                          3: 5XUzA9Cm_VS0l_J-BI180iVrsSQ.roa (hash: dTmUbt8r9KTK4oCfqPnmc0NkXc8ljy+XbX2k8rf1LxQ=)
                          4: DWF9Jo3FImxKenqMCCuMh99Ds_I.roa (hash: VPrgFeIcUkZV1CVnwsWbonO9j9PHcQRDHPIETmI4o3E=)
                          5: UNKbAcEAJHWJC-HG72D-vYqbVfQ.roa (hash: m35AjrcjrDzhORVJU0fjE54zFfVUjrq+cuZi9udA0+8=)
                          6: hgq-3QFFzN187B-65tYpaJQwwz8.roa (hash: l85+PXj1Myvhf7HIXT0WO1F3ljNUQ844ImZJ7Pq6XL8=)
                          7: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl (hash: 6wQCwkZ3sEB+nUS0tYEHnRZUHWWxBbiuWu3WmZlkPZU=)
                          8: tcLlB9YBsHcbLOkMR7kSkLCCudc.roa (hash: 6Mc1QxCXoEWhGv9/BgxXkQb5o6tO1LjQTVjhujICGJg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:99:e7:75:09:27:a7:f7:b5:0f:70:73:e0:12:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
        Validity
            Not Before: Jan 31 14:00:18 2025 GMT
            Not After : Feb  1 14:00:18 2025 GMT
        Subject: CN=07d1618d5886fbb31657afa347b954cad92f8a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c1:0b:99:2f:d5:b3:49:53:fc:e8:7f:19:4d:
                    8f:07:cc:99:7d:4a:3c:1c:87:88:99:c2:a4:2e:ab:
                    30:11:51:4e:2f:a9:73:79:94:e8:88:42:57:f0:02:
                    ec:b5:2d:bc:2c:8d:77:60:5c:e0:ba:e9:b0:6c:39:
                    2e:14:89:74:fc:a5:e2:62:fc:d7:85:a2:05:e7:26:
                    6d:79:6d:9b:e8:6a:d8:90:49:6e:ac:39:1b:c7:28:
                    53:19:c6:23:78:0f:80:35:63:ab:af:a0:8e:a5:40:
                    0f:98:d5:f7:b8:92:a8:b0:fa:2e:d7:12:77:9c:cf:
                    d4:76:21:04:b0:4b:fa:44:39:eb:d3:15:4d:f8:a3:
                    0a:1f:d9:44:e9:3a:f5:8b:9a:d9:3b:8b:9d:de:53:
                    bf:30:67:b5:34:af:ca:94:c9:b8:ca:f8:36:31:6c:
                    78:ca:98:37:bd:75:c3:fd:c8:60:30:1b:95:35:0c:
                    e4:a4:61:83:3a:c1:4c:b4:5c:20:d5:4e:51:d4:a1:
                    5a:8b:ad:38:88:50:bd:9c:80:b9:5e:1f:82:50:4c:
                    e2:66:cf:6f:17:4a:f8:27:12:e3:85:09:97:39:bb:
                    27:a6:7b:5a:77:29:c6:a9:e1:59:5b:ba:a8:73:60:
                    d9:ef:c4:69:77:65:36:47:2e:1d:05:83:54:6f:d7:
                    4f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D1:61:8D:58:86:FB:B3:16:57:AF:A3:47:B9:54:CA:D9:2F:8A:5D
            X509v3 Authority Key Identifier:
                keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e0:8d:9f:4f:a7:8f:fc:a4:eb:b8:94:17:6f:0b:df:b3:79:
         7e:46:1d:1d:78:fd:77:b0:01:78:2b:1a:22:52:93:e9:c1:41:
         e2:a7:88:bc:29:56:2b:ae:6e:e8:86:16:53:3a:f2:6b:6f:04:
         dc:e4:ef:85:ce:a7:6d:d8:ea:0d:b9:3e:27:4a:40:62:d7:7a:
         b0:57:05:93:e1:a8:ec:e2:ca:38:1e:7e:3f:f2:46:40:92:42:
         c5:bc:90:87:bc:f9:d4:07:08:23:3a:80:86:3a:ef:b2:49:da:
         de:60:82:a9:20:fc:c6:c2:25:9e:3a:52:85:62:ae:c7:c1:e5:
         ce:9d:29:b0:a4:d3:0b:91:5e:59:f4:f6:9b:c9:3f:7f:33:1b:
         0d:90:9d:18:b6:3a:6e:c0:65:87:ae:a7:3c:15:23:46:39:25:
         04:cf:11:27:18:bf:cd:65:91:9d:ad:85:cc:41:a4:2b:a9:3b:
         6b:b0:ff:e6:f1:fe:2a:27:9d:52:f1:c7:af:25:ee:f4:41:e1:
         fb:93:57:79:68:fe:5c:ad:d6:f1:a8:b0:f2:5e:6b:3a:dc:a3:
         ca:c2:fb:14:1f:0e:a9:59:9b:51:47:17:5b:53:d3:14:20:26:
         ca:ed:7f:b3:4b:1b:c8:3d:b3:ef:2d:28:a4:03:df:9e:a0:a0:
         12:e0:0c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:52:36 2025 by rpki-client