Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
File:                     JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft (raw, json)
Hash identifier:          JFNu9ykgmCQqyhEKd4DQIUAfvrsMt1wUHyn7aYPWWKk=
Subject key identifier:   82:D1:DB:34:93:DE:33:44:51:81:E6:BC:EF:B4:6F:93:10:B1:D5:FE
Authority key identifier: 25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3
Certificate issuer:       /CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
Certificate serial:       0194BC050637A6D4344502939BF5AFA03181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft
Manifest number:          10BF
Signing time:             Fri 31 Jan 2025 11:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:33 +0000
Files and hashes:         1: JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl (hash: I5mUwhBmk4zI1yV7iVA1rJvqU62xPqxUjhw1hktsIxk=)
                          2: r_EtzemP5qS9owVy3amV1QVxd6M.roa (hash: 4ypXA4zqyl2FqWR9d1DoEhKj1KllDHJdbQvxad1aSJg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:06:37:a6:d4:34:45:02:93:9b:f5:af:a0:31:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2526c138afa42a7d65cc7761ac4f1868366fa7e3
        Validity
            Not Before: Jan 31 11:00:33 2025 GMT
            Not After : Feb  1 11:00:33 2025 GMT
        Subject: CN=82d1db3493de33445181e6bcefb46f9310b1d5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:27:60:8d:5b:7a:ea:19:51:23:24:fd:bf:41:
                    56:e1:de:03:fc:a1:b8:d6:c4:cd:4a:6e:cb:b0:5a:
                    f5:ab:f0:f9:29:b8:2d:51:ee:97:fd:9a:ee:a2:0f:
                    46:a0:51:99:76:a4:91:74:ed:6d:a5:08:42:69:d7:
                    94:1c:51:c0:71:75:95:84:3e:9a:fb:9a:22:56:fc:
                    2d:3e:27:a5:c2:fb:05:3f:7a:dd:17:1f:a1:17:d9:
                    83:2f:5d:a9:38:b0:0e:4a:ed:75:fd:fa:fe:a6:e6:
                    a5:5a:7c:02:59:4d:39:49:19:0d:19:5a:37:d0:6f:
                    3f:18:45:31:bf:23:e8:87:83:af:f1:22:1a:d4:a6:
                    94:2e:3b:83:6e:16:1e:2f:4f:57:ae:9b:d1:c1:7c:
                    63:ba:10:83:b8:7c:f5:a4:be:67:1b:6e:35:43:7d:
                    43:83:af:5b:02:aa:30:2d:8e:0e:c9:25:10:3c:9b:
                    51:8e:94:b5:ff:ab:fa:62:a9:9d:9f:e8:09:d0:cf:
                    13:df:e1:85:46:c5:2f:7b:db:36:99:cb:de:8b:0a:
                    3e:19:c8:1d:49:66:d8:44:ec:68:70:7c:fc:1e:fb:
                    81:13:80:b4:5b:ca:2a:2f:e6:51:04:9c:89:ac:57:
                    8c:d6:a0:3d:b9:ae:ff:a9:dd:7e:1e:0a:b8:5f:f7:
                    32:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D1:DB:34:93:DE:33:44:51:81:E6:BC:EF:B4:6F:93:10:B1:D5:FE
            X509v3 Authority Key Identifier:
                keyid:25:26:C1:38:AF:A4:2A:7D:65:CC:77:61:AC:4F:18:68:36:6F:A7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSbBOK-kKn1lzHdhrE8YaDZvp-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/886f03-dc91-4a74-b034-b06228fcf2c1/1/JSbBOK-kKn1lzHdhrE8YaDZvp-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:45:16:6d:35:c0:f7:b2:b5:21:7e:b2:88:25:21:ea:06:bd:
         68:5b:e8:57:7e:98:45:e6:9c:bb:f1:49:c4:3a:7b:0e:90:20:
         d7:f2:ac:50:76:ce:bd:cb:35:01:30:49:d0:90:9e:09:08:86:
         63:63:f5:7a:04:9f:c2:11:3c:51:84:91:62:f1:4b:f8:d2:65:
         a1:89:20:6e:35:22:12:73:90:d7:a9:25:55:41:36:81:55:94:
         17:a5:a2:cd:f8:0a:69:7c:0e:50:d2:8b:46:97:17:5b:f8:5d:
         64:be:47:6c:c1:8c:f2:23:74:67:71:97:4a:76:13:41:ed:5e:
         32:42:14:1b:95:cc:73:75:0e:18:e5:1a:46:75:5a:09:7c:9d:
         62:84:c7:51:b1:d5:f1:04:e8:a1:8a:0c:78:99:9a:dd:3a:09:
         43:37:92:b8:a8:c2:59:1f:2f:15:d4:bd:0e:41:db:69:e4:5c:
         94:c9:55:c4:ce:9a:db:a2:a3:ec:b0:aa:ec:7a:bf:91:41:3d:
         e2:da:70:16:34:7a:e2:48:14:e5:56:29:dd:14:15:40:5d:b1:
         18:bf:b8:7e:af:e8:ac:58:6a:58:d7:a7:d7:ec:31:da:15:1f:
         6c:21:12:ce:76:b9:b1:89:d8:af:72:31:c5:f4:68:d7:1c:66:
         76:42:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:10 2025 by rpki-client