Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File:                     RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier:          8Le+KP+ksLM4ECg3CtXX0ZHE6YlsvPrFTzUg91Ehybo=
Subject key identifier:   FF:EA:EE:FC:CD:C0:E3:57:61:C4:9B:15:43:79:46:E4:92:07:FD:29
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer:       /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial:       0194BD4E8799161ECF6C855AB4653B768627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 17:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:27 +0000
Files and hashes:         1: HUIjR9WK2Lr5ogt7lVoiyA1Q06s.roa (hash: PMZpn3mSe7dzqUCZsgF/pY1r/L52E+g3ibBHFvHVhL0=)
                          2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: jgFAELwIWhMvNPhBI8+o4pspH6mWHbxrFYDzG2zrJBI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:87:99:16:1e:cf:6c:85:5a:b4:65:3b:76:86:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
        Validity
            Not Before: Jan 31 17:00:27 2025 GMT
            Not After : Feb  1 17:00:27 2025 GMT
        Subject: CN=ffeaeefccdc0e35761c49b15437946e49207fd29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:5a:cb:cf:7f:29:f1:88:f9:5d:23:9f:71:
                    bc:30:5e:b5:5f:79:ec:9f:47:94:62:f4:bb:fd:2c:
                    08:f4:f5:54:71:31:44:82:20:8b:51:87:84:9d:74:
                    1c:c7:9d:e7:ed:52:5d:a8:b1:0a:5a:4c:0f:9a:b1:
                    ab:dd:97:87:4c:32:68:7d:e2:84:98:6f:78:9a:3c:
                    47:71:18:4d:7e:3e:ae:b1:6f:e0:6d:50:5c:bc:ea:
                    85:e6:b2:2d:b0:ee:93:40:5d:90:89:05:d2:0a:a8:
                    56:8f:2f:e2:bf:26:25:1f:a4:5f:e8:d6:be:e9:18:
                    c1:17:1b:89:59:3f:f2:72:b7:29:cc:45:91:78:7d:
                    ae:50:03:c9:a7:31:56:81:30:a7:a5:ba:68:50:17:
                    c4:c2:3d:05:4c:4f:83:a9:86:80:b1:8d:17:28:7a:
                    99:17:d4:3f:36:20:ca:1c:a8:f2:b4:c1:0a:a5:72:
                    8a:18:96:29:b8:6f:85:e2:a7:bf:92:c0:7e:14:0a:
                    f0:29:7c:2b:2a:ab:c5:90:bd:b6:af:01:35:92:c2:
                    4f:83:15:8f:02:48:4e:f5:5d:9e:92:bf:90:3d:b0:
                    fd:9b:42:62:77:b1:e4:0e:ba:b3:59:51:dc:26:aa:
                    5b:19:7f:e1:6c:2a:b6:f5:b9:05:d2:6e:9e:45:da:
                    6a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EA:EE:FC:CD:C0:E3:57:61:C4:9B:15:43:79:46:E4:92:07:FD:29
            X509v3 Authority Key Identifier:
                keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3c:e4:29:02:a1:6e:1e:05:4e:b4:33:cf:bd:8b:83:8c:b7:
         2d:41:91:cb:f1:a4:37:7d:92:42:fa:94:70:14:ab:55:f0:57:
         22:13:4d:ff:0c:5b:7c:a9:2f:d9:9b:5e:37:1d:c8:2f:0e:89:
         44:6f:68:41:da:c7:3d:62:38:0b:89:9d:d4:27:c5:ee:2c:e4:
         e0:38:a4:2e:bf:2f:49:55:9c:ca:5e:23:94:9e:e2:e5:9d:f5:
         8f:f2:b9:8c:e4:33:57:4a:6b:cf:3e:84:85:f4:fa:e1:13:31:
         f3:06:3f:e9:3d:a6:3d:76:e5:76:50:d0:65:88:06:ff:b9:29:
         cd:de:49:4a:5c:35:27:d9:36:d0:34:05:17:12:e1:2b:06:b9:
         13:7b:e7:73:20:2a:f1:38:c6:dd:68:3b:ed:5c:7b:06:73:cf:
         88:65:fa:b6:13:73:76:4a:5d:02:47:cf:cf:f8:b0:f6:59:57:
         53:25:7d:52:b6:9b:3b:e2:57:d4:ce:5b:8e:a9:6a:0a:94:f8:
         e9:76:a8:79:d5:6d:7a:16:7a:a1:4d:53:fa:cd:b3:16:3c:65:
         b2:ad:4e:9d:2b:59:78:be:cd:50:72:a0:bf:33:6e:34:24:f2:
         d7:3e:fd:7d:13:5b:57:00:31:7b:80:24:a6:76:da:0a:b6:c6:
         ee:c5:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:24:57 2025 by rpki-client