Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
File:                     s30V5DRw7wodxwEHQ5P-cPLfjQY.mft (raw, json)
Hash identifier:          ZVzkq01KO/FCMh0WPBiWziykSpkrru4TCSKuLdp5ukE=
Subject key identifier:   84:1A:90:E1:12:0F:A7:4A:48:DA:99:C3:5D:77:C3:FA:8B:8D:FF:52
Authority key identifier: B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
Certificate issuer:       /CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Certificate serial:       0194BCE05B31535715F994166A7EA831D3A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
Manifest number:          04EF
Signing time:             Fri 31 Jan 2025 15:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:07 +0000
Files and hashes:         1: htjbCi_8qWneZo93vjbuIGh7N8U.roa (hash: g/IDR+6xEAPBW47ZPcz7WOY/otLteI/yTBnpVyBmbgA=)
                          2: s30V5DRw7wodxwEHQ5P-cPLfjQY.crl (hash: v6hQI9F7ozsF09P0zn4lGpwqX4Q4I58bCnv0Cf/BLeQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:5b:31:53:57:15:f9:94:16:6a:7e:a8:31:d3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
        Validity
            Not Before: Jan 31 15:00:07 2025 GMT
            Not After : Feb  1 15:00:07 2025 GMT
        Subject: CN=841a90e1120fa74a48da99c35d77c3fa8b8dff52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ef:42:c4:60:46:c0:ef:f0:17:ef:53:a4:3d:
                    af:03:ed:be:3c:cd:c8:ac:49:32:f3:95:0e:f3:8c:
                    f0:9d:e5:11:48:70:ce:16:75:e5:e4:c7:92:d2:b0:
                    8c:12:0f:1d:b3:7e:92:79:ab:66:a0:cf:fc:9c:f2:
                    b0:48:b3:8a:ad:40:5d:58:0b:40:d0:d0:c5:de:57:
                    33:0e:6d:7a:21:b7:ea:f7:9f:06:f2:40:c7:ac:8f:
                    86:c2:0e:d1:3b:9d:ad:ea:ad:11:f8:43:cc:ec:bb:
                    1e:79:59:72:cc:f3:ea:e3:be:cc:91:d1:ef:a9:75:
                    3c:c6:5a:fb:04:5d:2a:0d:b3:ac:14:5e:fc:e1:eb:
                    8d:b1:8d:f6:d5:1c:76:60:16:66:b8:e7:ff:62:64:
                    81:7a:2e:11:a8:2e:25:ef:dc:86:76:5d:07:bd:2d:
                    ce:b1:fd:d0:42:59:35:df:fa:ec:b5:70:26:03:55:
                    60:19:28:b5:18:38:3b:c0:dd:d5:37:74:f0:88:6e:
                    77:0a:dd:01:43:e4:a3:e2:c8:48:df:b8:50:6a:e5:
                    1e:cb:49:5f:bb:84:26:2e:21:5b:94:0e:70:2a:3f:
                    34:92:1f:21:7b:bb:9b:31:57:29:52:af:b6:f0:fa:
                    a6:59:6c:b8:c3:e7:79:88:44:fd:3b:af:42:78:16:
                    99:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1A:90:E1:12:0F:A7:4A:48:DA:99:C3:5D:77:C3:FA:8B:8D:FF:52
            X509v3 Authority Key Identifier:
                keyid:B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:de:55:70:6c:4e:d2:72:b4:6c:19:70:8f:b9:33:8a:9a:43:
         3c:6d:fe:cc:fa:19:37:3f:23:00:4c:11:54:1e:61:1f:54:c0:
         1a:24:2d:8b:3f:1e:c3:ae:ae:1e:19:2d:fe:e9:a1:54:fa:65:
         19:dc:4e:7d:0e:c0:c6:c1:b7:d2:2b:51:47:e7:0b:5a:8f:bf:
         7b:52:df:5d:06:86:c6:20:f0:f3:5a:bc:5a:c5:22:2a:57:12:
         00:8a:3e:52:6e:f4:2e:27:67:01:9f:fc:42:1c:6f:6c:a0:3c:
         4f:ee:cc:46:68:5e:f6:f3:14:d1:62:79:bd:12:4d:7a:66:79:
         aa:f9:63:9e:fb:bd:f4:a0:83:b3:0a:83:8d:17:3f:ca:cd:a4:
         36:e0:de:16:ef:18:a1:af:56:7c:da:a0:bb:84:f7:45:09:24:
         f7:66:25:af:9e:3c:f0:fa:52:d2:a9:6f:c7:de:ed:cc:c8:89:
         85:27:21:85:1a:f0:6f:b6:e6:3a:2d:fb:53:6b:56:4b:bb:f5:
         a8:7c:73:fe:17:19:46:ad:47:1e:e9:08:a8:63:cb:e6:50:bc:
         7d:ed:47:6e:c1:74:c5:f3:6b:e8:f7:c8:a1:34:b5:c6:f3:9c:
         9e:9a:fb:d1:2b:d0:24:98:87:e8:d2:9b:d8:87:b7:b6:8b:72:
         7d:ef:2a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:15 2025 by rpki-client