Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
File:                     E6D3FD_6IhE0QtyFie4TUuvj2qM.mft (raw, json)
Hash identifier:          bXulBIsbL+axf9RY5TgABAOcdnKauycF5XtcP6xN9/g=
Subject key identifier:   BB:5D:A7:11:46:C0:C9:9B:C3:C2:31:F3:9C:62:65:57:B4:C2:FF:D1
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Certificate issuer:       /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial:       0194BC72891330F4E2E1BA40E7C7B0CECB94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft
Manifest number:          0A8D
Signing time:             Fri 31 Jan 2025 13:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:10 +0000
Files and hashes:         1: E6D3FD_6IhE0QtyFie4TUuvj2qM.crl (hash: 7hH3UsYvdgV1yoahEAwk2IgG6uxiLcg62Q551/+6iBU=)
                          2: S_z_dmOMoRoZJCyhlWs7KYKKE_c.roa (hash: dO1zBXuteDRTaG+NkPm8AW6LoAxCVtc72nYwzmhIVco=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:89:13:30:f4:e2:e1:ba:40:e7:c7:b0:ce:cb:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
        Validity
            Not Before: Jan 31 13:00:10 2025 GMT
            Not After : Feb  1 13:00:10 2025 GMT
        Subject: CN=bb5da71146c0c99bc3c231f39c626557b4c2ffd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:ee:10:15:b5:f6:c2:9e:9b:16:70:4a:75:
                    80:af:b3:d2:70:5f:1d:52:82:b4:55:c0:2e:9d:98:
                    7a:6f:e9:a7:c7:c0:e7:a0:b0:ce:b1:46:a1:4f:4e:
                    38:88:5c:e9:26:af:94:ea:fe:24:7b:01:08:f3:70:
                    e5:31:cc:8d:63:48:76:bf:e4:6a:c3:b2:e5:d4:31:
                    06:7d:fc:ac:d3:a9:20:55:7e:38:b8:0f:42:01:97:
                    49:28:bb:22:04:f6:02:31:35:d1:08:ff:f6:11:ef:
                    db:c9:f9:a4:ce:ac:f5:f7:48:91:d7:0b:12:29:8c:
                    bf:82:cc:b2:c2:b6:fe:1a:29:8d:3f:7c:57:63:dc:
                    7a:6d:e3:4c:21:04:bf:62:35:a0:a5:07:13:ea:08:
                    f1:fb:79:c0:e3:27:54:73:3d:7a:7d:72:48:2d:ea:
                    f3:4d:32:f8:1b:2c:bb:b3:97:37:8b:5f:0b:26:03:
                    fe:c1:7e:79:79:b2:9c:60:8d:b8:b7:92:f1:4b:2c:
                    9f:e4:93:43:2c:43:91:d3:76:a2:06:a5:cf:ea:71:
                    b9:ff:fb:ac:cd:66:20:4d:4e:d0:26:e7:b8:74:62:
                    91:65:13:d3:9d:a3:f1:ab:41:37:f1:07:e2:6e:20:
                    14:d4:7d:35:ee:da:00:1c:4e:7b:8f:ed:22:1b:bf:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5D:A7:11:46:C0:C9:9B:C3:C2:31:F3:9C:62:65:57:B4:C2:FF:D1
            X509v3 Authority Key Identifier:
                keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:26:bd:fa:5f:9e:79:f6:21:71:20:90:92:e5:2d:a6:b8:62:
         36:00:e3:64:f6:3b:93:7b:d0:af:e5:30:ca:5f:58:3c:82:0a:
         37:a0:3d:ee:72:16:57:a4:63:28:22:d0:1a:e6:73:53:79:12:
         c5:42:ea:3d:34:0c:b2:24:2b:f9:96:e8:db:e4:5a:54:9b:9c:
         e3:a4:ee:26:7a:ae:da:df:16:40:22:9b:18:7d:2b:fd:05:64:
         dc:d8:d4:86:a4:db:f7:66:4e:9f:b0:d1:5a:1b:0c:60:b9:3a:
         29:e9:85:a2:78:1b:d0:ae:54:52:1a:54:85:a5:16:fd:d9:fd:
         b3:d7:c1:14:ca:f2:cf:f7:e2:3b:d9:5b:6b:de:7b:d2:11:5c:
         b0:80:7a:08:90:cd:dd:79:b5:5f:fa:d8:c5:81:df:3b:c3:90:
         4d:ef:2f:15:90:80:46:08:70:9a:01:92:f7:ff:30:1c:4a:f7:
         bb:dc:78:48:d5:26:01:d4:ce:93:03:48:ba:6a:5f:2c:9b:12:
         fb:53:61:97:7c:e0:53:1c:1d:30:0b:ef:0e:32:70:f6:75:7f:
         11:5f:15:b3:5c:80:a7:81:cb:61:c6:00:ce:d5:58:99:6c:67:
         0a:c0:7d:97:60:d3:0c:ab:ca:16:c8:02:9a:fd:2e:87:fb:d1:
         79:85:ae:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:25 2025 by rpki-client