Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
File:                     V04loW5dOqEQrF6DNfiPY-VLQvE.mft (raw, json)
Hash identifier:          jLai7+JeKFFYLMm9uCuBmA+SGhf/lMucOznHB5AwmMY=
Subject key identifier:   87:4F:E4:36:15:5D:73:2E:73:45:67:4F:C4:0C:65:5B:47:10:E0:6C
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Certificate issuer:       /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial:       0194BD8538D3177F56A0D16795FEBA272FEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 18:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:12 +0000
Files and hashes:         1: 4gBDlHfraeJIeTYRGBqyZyvtae8.roa (hash: Qqj1EC36vQFgIkoRX33NjG4dXDa3mcsnpDKk5Y8xJEA=)
                          2: V04loW5dOqEQrF6DNfiPY-VLQvE.crl (hash: S8xSM6bJIMkiz4p8lp5vw6vfyjTDaBT4V92KyQjk43Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:38:d3:17:7f:56:a0:d1:67:95:fe:ba:27:2f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
        Validity
            Not Before: Jan 31 18:00:12 2025 GMT
            Not After : Feb  1 18:00:12 2025 GMT
        Subject: CN=874fe436155d732e7345674fc40c655b4710e06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:90:87:76:02:3a:29:29:61:88:91:7b:02:14:
                    fd:32:33:ab:f1:72:d5:9f:60:01:19:f3:e0:34:09:
                    de:dc:60:03:5f:bb:6f:1f:15:a0:89:81:b4:a0:ce:
                    88:03:33:75:6c:05:55:e3:71:86:59:f1:eb:ec:55:
                    ac:f0:02:48:15:4b:99:71:dd:bf:14:93:ed:69:d4:
                    89:af:9d:9c:25:c5:ff:5a:b1:64:1e:1e:0f:78:f3:
                    ad:3c:bf:1c:43:2f:1e:cf:eb:f0:b7:02:9d:05:82:
                    40:dd:68:e7:48:df:63:52:23:8d:8a:aa:e2:d8:77:
                    4d:9e:cd:a4:6d:f2:39:94:5f:1f:ae:b4:6b:70:af:
                    6c:b6:59:4c:6e:e6:69:2f:6a:a9:5d:26:99:3b:fe:
                    66:c1:a1:12:07:36:4b:da:a9:be:c3:49:f7:c2:00:
                    eb:db:67:a3:66:87:17:81:ba:47:55:db:5a:5e:57:
                    2d:c8:43:6c:44:60:a0:ad:ec:ea:20:2a:0a:84:2f:
                    7a:89:ac:c1:4d:b0:c0:51:fd:89:10:9e:c2:ae:67:
                    30:4b:3c:eb:8f:ea:83:fe:0e:68:af:ac:b7:a8:5c:
                    15:64:52:0e:4b:b2:dd:0f:19:71:f1:64:e7:01:e3:
                    dc:2a:cb:30:30:24:44:85:d0:5c:07:fe:68:c9:45:
                    43:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4F:E4:36:15:5D:73:2E:73:45:67:4F:C4:0C:65:5B:47:10:E0:6C
            X509v3 Authority Key Identifier:
                keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:84:85:48:57:ff:f0:82:d7:f9:f7:e8:28:d1:70:58:0c:3d:
         2d:25:cd:ac:c7:44:c1:e9:17:2a:b9:df:65:27:6f:19:6a:c0:
         e0:24:98:3f:e7:a6:7e:4f:ff:ff:5e:31:7e:e5:8b:2c:0d:a1:
         46:b0:4e:8f:45:e8:4a:a9:e7:77:5e:a0:97:ea:66:cc:6e:e5:
         d2:60:8c:ea:f5:f3:94:fe:8e:e3:65:ba:d2:39:81:b2:51:7f:
         0d:d5:68:62:98:0c:8f:3f:18:16:86:ba:a6:1f:24:7e:ba:cc:
         eb:b6:f1:e9:ca:f1:e6:da:7c:a7:47:66:eb:b3:f2:31:a3:92:
         55:c9:a1:13:9f:69:89:f1:cb:14:4c:37:31:cd:ad:27:ba:fb:
         1f:99:e2:6d:d4:75:8c:3c:50:6f:18:ee:0a:a6:10:cd:8a:6d:
         7e:a6:02:39:4d:32:4b:93:83:b8:cc:d9:0e:cc:1b:9f:d3:0d:
         01:66:ab:70:f8:94:2e:17:ef:38:d1:89:b8:a5:43:ac:b6:22:
         ae:c1:86:53:54:8d:26:01:91:84:5f:7b:60:c9:c5:1f:c3:09:
         7a:28:df:f1:84:2e:94:35:24:d8:52:ed:fc:4c:8b:b0:57:56:
         93:20:39:96:26:53:bb:c5:c4:86:7a:18:70:26:79:8c:fd:d3:
         11:4b:36:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:46 2025 by rpki-client