Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
File:                     H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json)
Hash identifier:          6xa4L+l6i2c9Lg8Qhq9+gggkLoBVsMjkdsPChSlltxc=
Subject key identifier:   CA:08:06:A3:C4:D5:83:B2:D2:5A:43:EC:AF:F1:B4:8F:94:6F:C6:52
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Certificate issuer:       /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial:       0194BC3E4AE44DD0274D08B0D3BB4E7CDE32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
Manifest number:          1453
Signing time:             Fri 31 Jan 2025 12:03:06 +0000
Manifest this update:     Fri 31 Jan 2025 12:03:06 +0000
Manifest next update:     Sat 01 Feb 2025 12:03:06 +0000
Files and hashes:         1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=)
                          2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=)
                          3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=)
                          4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=)
                          5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=)
                          6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=)
                          7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: oDMJHj32mAMKIQ9Y1s6KDPYH+LLKYs8+6wg3w70bNwI=)
                          8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=)
                          9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=)
                          10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=)
                          11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=)
                          12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3e:4a:e4:4d:d0:27:4d:08:b0:d3:bb:4e:7c:de:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
        Validity
            Not Before: Jan 31 12:03:06 2025 GMT
            Not After : Feb  1 12:03:06 2025 GMT
        Subject: CN=ca0806a3c4d583b2d25a43ecaff1b48f946fc652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:1e:01:30:51:4f:b1:22:1c:11:7e:69:87:
                    bc:2b:1f:7e:a7:35:61:13:08:32:47:fc:ae:cb:56:
                    7f:18:45:a6:33:ea:63:9c:52:c0:6d:51:f2:db:c5:
                    79:05:6a:8c:c1:3e:56:6a:7d:f6:65:cc:6c:c5:01:
                    f4:37:1f:32:3b:84:46:5a:14:d6:1c:c2:84:cb:3a:
                    b4:9a:fd:69:b8:09:d1:f3:f6:45:16:bf:be:ff:1b:
                    f1:73:99:5c:e9:00:af:6d:fa:66:b2:22:b0:15:ba:
                    e9:73:3e:39:e6:9a:42:90:7c:0b:4d:e6:34:28:02:
                    e6:12:de:a1:87:de:d4:2d:a7:da:4f:48:1d:9c:41:
                    cc:b4:68:7c:e9:fa:f6:72:68:07:3f:a8:14:97:3f:
                    92:92:65:e1:b2:73:72:a9:f8:32:2a:89:60:f6:52:
                    d5:0e:40:2d:d3:d5:25:87:2e:5e:72:51:96:b0:78:
                    01:d5:1c:ac:61:71:5c:c1:3a:4b:a9:7c:27:20:85:
                    8a:e8:fc:8f:da:49:c9:49:16:cb:b8:27:cc:6b:e4:
                    10:f7:9e:01:da:7e:1b:0e:60:9f:11:d6:1d:bf:2b:
                    41:2b:b3:4f:af:d0:b6:41:51:84:2d:e2:5e:d5:31:
                    3a:5e:e3:6b:42:8d:e4:cc:cd:93:f1:32:6c:95:f7:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:08:06:A3:C4:D5:83:B2:D2:5A:43:EC:AF:F1:B4:8F:94:6F:C6:52
            X509v3 Authority Key Identifier:
                keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d7:68:5e:66:4b:0f:18:ef:6e:1f:22:b6:bd:83:ae:15:f2:
         7a:42:22:a3:48:a4:06:4c:36:93:42:84:93:ae:47:ff:5d:c8:
         ca:68:a3:51:86:44:f2:94:df:22:be:a4:d0:00:bc:e2:cb:c6:
         04:8d:5d:e9:e1:d4:c2:19:f6:02:11:ed:a1:6b:7c:0b:ae:05:
         1c:48:4a:7a:b9:16:3b:f3:28:ac:9a:aa:36:82:27:02:86:9f:
         58:79:a5:fb:98:b3:9c:ad:d3:d0:31:c2:37:04:c2:ad:66:e5:
         52:c9:48:63:7d:28:ba:25:dd:65:b1:e5:03:f8:e3:f2:ca:bd:
         3b:ac:65:06:61:e3:e4:c7:7b:4d:f0:7b:be:7e:ee:51:f9:94:
         ca:86:b2:2c:b4:d1:7e:bd:1c:5b:c1:13:33:ff:f7:3a:40:e3:
         52:c9:be:42:4c:ce:0d:e8:ac:2a:bf:78:7f:39:8c:57:0d:2b:
         99:b7:8d:30:0b:52:06:88:c1:ec:6e:a2:56:96:46:b4:e1:0b:
         ca:bd:17:e3:58:00:f4:e0:7c:c6:d1:2e:66:21:48:fe:97:0c:
         d7:36:07:57:ca:88:01:30:af:9c:b6:d3:e0:82:1d:54:64:a7:
         f1:96:7b:92:42:22:67:ec:f7:8d:4a:b0:12:ab:03:45:ac:82:
         92:d1:06:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:26 2025 by rpki-client