Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
File:                     weJGTdbQQjCVFffltk6mXAibRhY.mft (raw, json)
Hash identifier:          x4ZqKLi0TxUH2znZnXwbreP5PSCggXVsHOOBL0FRMyQ=
Subject key identifier:   3E:E4:D9:45:7B:09:0E:34:A5:7C:53:D7:BA:2D:C6:DE:97:13:0D:AD
Authority key identifier: C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
Certificate issuer:       /CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Certificate serial:       0194BC731DBC4398CE029AEF60E469D5F139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 13:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:48 +0000
Files and hashes:         1: DgGyGbwI_Z-hbBwqBMhZZb6vSwc.roa (hash: YoSjsmqBi7UGbr0YdaEV1pXh33zn8N/CDmlmvP42wg0=)
                          2: weJGTdbQQjCVFffltk6mXAibRhY.crl (hash: /Vj6i9fM/RZ17MepevOpKmPIB1x6kgEiv4IEG8Du4p8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:1d:bc:43:98:ce:02:9a:ef:60:e4:69:d5:f1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
        Validity
            Not Before: Jan 31 13:00:48 2025 GMT
            Not After : Feb  1 13:00:48 2025 GMT
        Subject: CN=3ee4d9457b090e34a57c53d7ba2dc6de97130dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4e:e1:73:fb:4f:d3:bb:60:9a:fd:8c:e7:3a:
                    3f:b2:e2:9f:2a:a5:11:58:b6:57:54:4d:45:ad:4d:
                    1a:04:a2:e7:fb:32:e0:d4:79:34:11:7a:b9:cc:c8:
                    fe:e0:ee:3d:be:cb:3f:60:7b:69:8e:bc:97:73:64:
                    4e:a7:60:36:28:98:7e:53:df:b0:52:5d:c8:28:9e:
                    d6:cd:03:52:1a:1c:a9:54:a3:2d:e3:29:cc:01:e5:
                    67:cc:5e:6e:e1:98:ea:e7:25:6f:45:38:8d:61:64:
                    21:38:1b:6f:ef:d7:50:72:5d:a0:9f:bf:b6:b9:fe:
                    de:0a:4a:17:34:09:53:c6:bb:8f:1f:66:e0:5a:20:
                    ec:bb:22:e3:19:16:fb:b0:72:aa:e0:c1:c6:27:b0:
                    c3:95:66:18:6f:ad:a2:d1:1e:35:c5:31:8b:86:38:
                    4e:80:1a:32:56:bb:01:3e:9e:42:7d:00:d2:ac:94:
                    ba:0c:ea:08:bd:87:67:74:83:85:cd:0b:f0:48:e0:
                    b4:82:b3:3c:6c:03:50:76:37:50:ba:60:27:86:63:
                    72:6c:87:77:cc:3c:e5:4f:f8:b9:97:e0:fe:71:c7:
                    28:5d:1f:56:0c:14:75:ae:ab:c2:b4:c0:36:7f:01:
                    dc:b5:74:a2:89:54:df:19:d1:3c:c4:e8:ea:73:90:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E4:D9:45:7B:09:0E:34:A5:7C:53:D7:BA:2D:C6:DE:97:13:0D:AD
            X509v3 Authority Key Identifier:
                keyid:C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:28:64:df:e4:55:d9:ae:f6:ad:0c:14:da:d3:eb:a3:87:25:
         81:7d:55:5a:54:7c:33:86:79:75:16:55:fa:42:e8:cb:77:2e:
         ce:38:e6:0f:2c:23:d6:09:3e:79:2f:88:2d:ff:6d:9b:2a:5c:
         e8:13:94:33:d3:3a:31:3c:21:9e:4b:6b:90:34:30:d4:72:2e:
         3e:6b:c1:17:a4:0e:f4:22:d7:2d:8a:7b:f5:b2:31:a6:8c:36:
         ad:13:1d:0f:26:d1:89:13:8b:6e:6c:88:7d:8e:3a:8d:35:09:
         23:36:f5:a7:5d:41:20:eb:4e:2f:c2:bf:34:c0:8f:28:b4:77:
         ba:70:e6:14:b6:c4:2a:79:3b:a3:4b:72:f3:fc:57:27:26:be:
         30:e0:5d:af:9e:68:d4:ba:04:c1:b0:23:ac:5a:81:81:d5:e1:
         30:38:73:a0:ae:29:e0:6a:1b:ad:08:b6:56:ec:b6:36:8c:a0:
         66:5a:14:26:19:03:b6:95:c3:e0:75:26:23:5e:e5:e0:e5:fd:
         a1:70:9f:3d:75:44:48:2b:1b:9b:25:c8:1d:17:bc:80:a0:0e:
         a6:68:a1:75:6d:f4:82:90:76:ec:eb:b6:11:a2:30:16:06:b5:
         e7:f0:ed:ac:34:64:5e:2c:55:ce:63:eb:c2:11:de:38:9d:84:
         66:8b:e1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:24 2025 by rpki-client