Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File:                     xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier:          ZYkr2ptWR5zwJWUU6Ua6XY2JNYmLwQm1YlPLIxjVdQQ=
Subject key identifier:   B8:3E:3B:DB:CD:A0:AF:72:02:6D:60:D0:5F:7D:BF:CB:E0:FB:01:29
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer:       /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial:       0194BCE09E5F73A6D932E3392FE259C493BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 15:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:24 +0000
Files and hashes:         1: 7I-4Etn_-ATs5ke2k7C_Ri5wOGE.roa (hash: K1mMFeZqT9P2Y1UVAb4tDIF+y7HhkZLZ9faOLYgkjT4=)
                          2: XufZiysYk33Xck5lo3CwfpdliJQ.roa (hash: 4ytM8O/KmX8CZCFr30YeKBOK7MtkaAq/PPvvT8k7frg=)
                          3: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: 7Y7PVEAAeI/+HVDJnR+mwd2MHH2PlW9Suwmt5e1tnmI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:9e:5f:73:a6:d9:32:e3:39:2f:e2:59:c4:93:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
        Validity
            Not Before: Jan 31 15:00:24 2025 GMT
            Not After : Feb  1 15:00:24 2025 GMT
        Subject: CN=b83e3bdbcda0af72026d60d05f7dbfcbe0fb0129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:a6:b0:9c:46:e1:10:ce:7f:7e:b5:1f:1a:
                    b0:09:3e:8c:17:d4:84:15:b9:44:ee:3c:ce:b8:81:
                    a2:8e:8e:c2:9b:ae:71:b3:df:53:cd:2b:13:67:78:
                    72:35:00:33:02:4c:5f:88:55:9f:32:5c:af:65:e5:
                    e0:03:25:4f:cb:6d:d2:97:b0:bc:fb:b2:7c:5b:a5:
                    ee:ba:f6:56:c8:4c:ca:e1:13:79:a3:15:ca:1d:87:
                    95:41:7d:87:b9:f0:fc:cc:6c:35:4d:2b:2e:b4:32:
                    5e:35:b5:2b:b8:2c:15:04:d2:df:fb:86:ba:f9:a2:
                    e7:73:5f:0d:68:22:70:b1:3d:4e:5a:6e:1c:f6:69:
                    0d:96:dd:aa:85:85:00:72:b1:9f:ac:2c:d8:2d:a8:
                    ea:23:dc:13:2d:a9:24:16:b3:d7:94:5c:2a:0b:8d:
                    7a:c9:f3:98:54:fb:c9:a6:49:a2:65:55:1c:3b:cd:
                    ac:68:bc:5b:99:e0:1a:4b:66:17:5d:25:ee:da:b9:
                    fb:40:63:7b:69:3a:a0:cf:0d:63:62:0d:be:bb:1d:
                    51:b2:0e:04:fe:9e:5d:d4:78:fe:19:e8:b9:65:2e:
                    c7:08:ca:f2:ee:c8:e1:9a:b1:20:32:80:fd:33:11:
                    6c:74:51:80:32:bf:22:ce:87:18:58:b0:74:94:b6:
                    5a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3E:3B:DB:CD:A0:AF:72:02:6D:60:D0:5F:7D:BF:CB:E0:FB:01:29
            X509v3 Authority Key Identifier:
                keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:43:5b:19:2b:00:a5:43:51:61:fa:e4:05:60:63:70:3a:7a:
         9d:10:2a:96:29:1b:04:95:7b:1a:a4:72:c3:cf:2e:9b:63:a1:
         d1:4a:23:a0:72:c6:40:8c:7d:24:99:2d:1e:17:5e:08:49:97:
         71:91:89:d5:72:08:60:c4:63:6c:0b:6c:ff:d3:33:42:bb:f6:
         a7:89:ef:64:94:76:5e:0c:df:c4:f1:f6:f8:df:0b:24:a6:90:
         f0:56:b5:5c:c2:45:b7:27:8f:23:4f:70:96:ec:a5:ea:5f:f3:
         55:e0:8f:78:fa:b3:47:bb:7d:2a:a6:bd:82:38:3f:6f:47:34:
         00:33:55:49:d8:7c:14:9d:30:9d:54:d2:a9:1b:64:fb:a7:af:
         a5:aa:8a:a2:85:26:e5:ac:02:95:0e:a5:15:b0:51:a4:6f:b2:
         28:d2:02:3f:08:c2:63:d9:91:53:8d:80:df:9b:72:cd:09:0d:
         d4:16:63:20:22:af:b1:39:41:18:8a:e7:7a:0c:81:74:7d:e6:
         a4:c1:a7:73:6e:ab:ac:95:82:f3:06:27:1f:cf:20:12:23:3b:
         5f:24:f5:eb:fc:bc:5a:3f:0c:03:ad:66:33:3e:47:ca:86:09:
         da:5a:0c:ab:95:8a:70:39:7b:90:d1:09:3d:aa:75:27:2f:d5:
         13:7d:2d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:22:55 2025 by rpki-client