Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
File:                     ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json)
Hash identifier:          sAND7SZ9dYesvAnpElYe14cFl6HGfdPzibqo+8Zm9D0=
Subject key identifier:   07:26:E0:AB:09:EE:93:35:24:FA:41:11:52:8F:E3:03:B6:5C:E1:EC
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Certificate issuer:       /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial:       0194BCE0B5EE8834E638747E7A89266BE116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 15:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:30 +0000
Files and hashes:         1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: DVoOxtqL8d5cCK8XIscNttUQXQZbklthwJIrHP6ipDk=)
                          2: o3nfz0qPyoHeZ7QZgpyfuh3VEII.roa (hash: Z7vtFpZz5Q9L6wA4avMeuFaOqLOX0o+KOJVRi4dDip4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:b5:ee:88:34:e6:38:74:7e:7a:89:26:6b:e1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
        Validity
            Not Before: Jan 31 15:00:30 2025 GMT
            Not After : Feb  1 15:00:30 2025 GMT
        Subject: CN=0726e0ab09ee933524fa4111528fe303b65ce1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cf:9b:3f:4f:31:c2:21:21:5f:6a:e5:fe:d9:
                    1e:d5:d7:b1:4e:e6:33:3e:b9:91:12:3e:43:07:2c:
                    7d:d8:22:6d:59:d7:2b:89:08:c4:ea:96:2a:02:61:
                    b9:53:ad:d8:43:a8:ca:26:e5:db:39:d0:9e:d7:a6:
                    da:67:f5:52:5b:81:eb:60:46:b8:fc:30:11:98:6d:
                    75:21:7f:97:40:aa:2c:9c:19:56:17:8b:67:f9:f9:
                    c4:d6:eb:c9:14:75:e3:dc:65:f2:40:43:01:56:ea:
                    1b:07:f6:98:8b:a4:39:5e:a7:3b:cd:3e:ea:39:c4:
                    4e:3c:43:a6:bd:b4:80:2a:b8:6d:b6:00:69:1f:e2:
                    8f:51:b0:2d:bc:d0:42:da:bd:44:76:34:4b:c7:35:
                    ab:95:77:b4:59:b3:fd:25:67:a1:b2:ea:b5:e4:6f:
                    ed:96:1e:59:f7:7e:b9:39:67:e9:2b:61:87:94:b5:
                    f1:76:38:3b:1c:e5:5b:d9:61:e2:38:85:80:e1:f6:
                    51:3f:5d:56:e2:d1:ae:be:25:ca:07:98:a7:c2:0d:
                    2d:72:2c:f8:48:4e:f8:75:7d:85:25:fe:53:77:95:
                    40:3c:9a:52:45:7b:f6:ca:d0:ae:7f:78:4c:84:05:
                    3e:81:0c:c9:5e:38:ab:ba:29:38:76:af:06:81:5d:
                    8b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:26:E0:AB:09:EE:93:35:24:FA:41:11:52:8F:E3:03:B6:5C:E1:EC
            X509v3 Authority Key Identifier:
                keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:30:18:c8:0a:76:7f:27:4d:43:10:97:aa:8d:1c:13:37:8a:
         2d:12:09:c1:4d:29:0d:22:cb:58:a3:96:f2:56:16:ca:74:89:
         39:7a:7d:e7:9f:7b:b2:4e:4d:d0:2a:8c:4c:dd:d5:49:44:ee:
         d2:1b:de:42:c4:01:fa:8a:87:60:66:53:f5:90:f9:24:3b:4b:
         52:10:bb:6d:4c:03:0b:4f:89:5c:62:fb:df:9c:d3:b5:1f:eb:
         97:05:0e:f6:5d:d8:2a:e3:a6:0d:c2:57:72:77:cd:a8:24:ed:
         0e:37:54:a4:2c:b0:b7:93:8d:d4:3f:f3:d5:4e:87:ad:28:9c:
         a6:ef:e4:be:4b:90:40:17:50:75:7d:3f:9e:fc:a6:8f:57:a3:
         29:e0:67:ff:ff:d8:af:cf:ef:72:10:cf:b8:38:aa:d1:9c:eb:
         c4:81:f2:8e:13:61:f6:07:81:27:27:c8:c7:d6:13:e4:70:b1:
         17:ff:72:0b:c0:04:3f:32:f1:db:9c:1f:fc:12:3b:fe:02:0a:
         01:b0:3c:37:2a:06:72:ed:e8:96:d2:db:f9:ff:67:85:bc:e9:
         e1:49:10:2f:12:e1:58:f3:29:57:aa:77:29:22:c3:1c:e9:0c:
         09:33:a9:2d:dc:cb:df:90:1a:82:df:ee:a8:42:1c:e2:b4:f4:
         13:a2:ed:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:05:56 2025 by rpki-client