Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
File:                     83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft (raw, json)
Hash identifier:          SBBnpRXX7ELdc3CStHWKrJpEBOG5yY51VnJ/Hsbt8jg=
Subject key identifier:   20:B6:11:15:E9:65:94:87:9A:ED:F8:9B:F3:21:F8:44:E9:18:EA:C5
Authority key identifier: F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6
Certificate issuer:       /CN=f37063a85445019ab845a5b7e54395cdd39927f6
Certificate serial:       0194BC3C42F7A6085E8AB8BADBF4385110BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft
Manifest number:          0F64
Signing time:             Fri 31 Jan 2025 12:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:53 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:53 +0000
Files and hashes:         1: 55zACBEV4ZrkKgA_PfqKETWoChA.roa (hash: B0R4BgAeGvCI3HMcrqcW5pltBvObBUfBObcQdCL+Wog=)
                          2: 83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl (hash: G6rXSuDL8Af4Xwl7OHzRbaMWo7ZjoQQBohB10X848rA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:42:f7:a6:08:5e:8a:b8:ba:db:f4:38:51:10:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f37063a85445019ab845a5b7e54395cdd39927f6
        Validity
            Not Before: Jan 31 12:00:53 2025 GMT
            Not After : Feb  1 12:00:53 2025 GMT
        Subject: CN=20b61115e96594879aedf89bf321f844e918eac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:da:3b:1b:d0:7b:73:e9:0b:64:90:13:b0:31:
                    b2:25:3c:bc:b4:6e:84:ef:4f:fa:17:99:a5:c0:2d:
                    04:0b:ff:9c:1a:18:ea:5c:b7:5e:fc:c0:b5:2b:0c:
                    1d:17:f2:00:55:58:7f:03:7c:74:f7:1e:13:ca:b7:
                    9f:12:59:c4:bc:16:13:95:81:fe:f0:0f:40:2d:04:
                    88:c3:48:d0:89:0c:46:62:fd:c9:72:47:62:ba:35:
                    7d:97:69:80:0f:5e:93:c3:bf:ed:7d:3b:93:21:26:
                    80:88:98:73:ca:f9:78:27:28:02:98:f9:9a:17:4c:
                    fe:9d:1d:92:5b:2e:07:34:06:a7:f0:52:f9:14:b7:
                    23:74:65:86:a9:2d:24:07:ee:df:60:96:8c:77:15:
                    98:7b:8a:06:ee:eb:1d:eb:43:ad:76:28:eb:4e:67:
                    e4:57:f1:88:ce:17:1b:18:97:d9:d9:e1:64:98:1b:
                    91:b7:39:d1:f5:06:fc:89:5b:1d:d1:22:3d:05:da:
                    77:c7:bf:da:bf:fd:7e:d2:9e:80:dc:92:12:3d:b7:
                    c6:f6:94:cf:eb:3d:ac:d9:1c:1e:38:f1:5d:c1:4d:
                    ba:8f:38:d5:f7:86:28:15:9e:94:b9:a2:3e:e2:3f:
                    16:c4:3d:bc:79:09:8c:f2:62:3f:f6:03:d3:21:0a:
                    2f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B6:11:15:E9:65:94:87:9A:ED:F8:9B:F3:21:F8:44:E9:18:EA:C5
            X509v3 Authority Key Identifier:
                keyid:F3:70:63:A8:54:45:01:9A:B8:45:A5:B7:E5:43:95:CD:D3:99:27:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83BjqFRFAZq4RaW35UOVzdOZJ_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/220ce4-11a3-4d92-a488-c3947e76be75/1/83BjqFRFAZq4RaW35UOVzdOZJ_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:19:83:0b:2f:75:d6:9c:ac:34:5f:25:ac:7e:bc:89:42:48:
         88:35:36:6b:7d:e9:20:c5:6c:db:fc:01:8b:3b:78:9b:3a:49:
         86:82:73:c9:f3:47:74:3f:b5:0e:9b:34:58:f2:b3:25:d9:53:
         11:67:e4:8c:d7:a2:1e:a7:7a:2d:c5:1f:59:ed:56:d3:e7:37:
         8a:d3:38:4b:c7:f0:d0:6d:75:47:25:3b:37:7b:b5:fd:e6:3e:
         a2:8a:38:f8:01:ce:94:5b:3a:73:89:c8:fc:ac:8d:45:f6:fe:
         d7:be:9c:46:85:67:d5:f7:89:56:11:71:8e:a9:c2:10:e7:1c:
         93:12:d3:2b:7e:65:13:57:06:e7:ad:e9:2b:40:51:f6:40:40:
         0e:fb:ce:e0:15:dd:e8:04:d4:6e:33:64:ff:33:1e:8f:0c:de:
         1d:1f:59:b2:c2:ec:ac:6a:10:c9:e3:7d:09:0f:e3:19:29:c6:
         ad:da:63:b6:bc:96:e0:d7:ec:89:d3:38:f4:00:62:7c:44:99:
         85:7c:05:03:aa:52:83:4b:8d:3e:3c:f4:8f:6d:5e:83:58:4d:
         55:9f:a5:cb:9d:0a:4b:7c:aa:a7:4a:78:b7:5a:3f:08:22:02:
         6c:fe:bd:01:6a:a0:b6:79:92:bb:98:36:09:b3:df:f0:66:da:
         c8:98:1a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:20:22 2025 by rpki-client