Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
File:                     6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft (raw, json)
Hash identifier:          8AV7nplGXeLViYouv6Gum2IMNym7PU9UDNW6QwOxtQI=
Subject key identifier:   50:C2:C5:CA:A2:14:25:AA:00:AB:C4:A1:48:9F:8B:5D:27:41:3D:68
Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
Certificate issuer:       /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Certificate serial:       0194BCA9D217DE60C433DF96BF93DF1ED1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
Manifest number:          0D2B
Signing time:             Fri 31 Jan 2025 14:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:33 +0000
Files and hashes:         1: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl (hash: vongeARhdqpRraBlukr1lH6+12su3mrJHFW2UBRaT9w=)
                          2: bbiCAC8k2CawpBPgM6fTMAmYAY0.roa (hash: FIWbsZ3JZZD2fluaVWFHhluHhUwUg7ek5YY8fTNR7Ow=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d2:17:de:60:c4:33:df:96:bf:93:df:1e:d1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
        Validity
            Not Before: Jan 31 14:00:33 2025 GMT
            Not After : Feb  1 14:00:33 2025 GMT
        Subject: CN=50c2c5caa21425aa00abc4a1489f8b5d27413d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:12:ca:24:2b:27:93:00:af:d5:ca:72:c1:fb:
                    77:b4:fd:68:2e:3c:5e:52:bb:d0:10:a9:b6:53:05:
                    8b:59:a5:b1:18:c0:75:b1:dc:55:59:60:bc:3f:d2:
                    e6:06:01:6b:47:18:1a:54:37:44:8a:30:d7:6e:b4:
                    c5:f1:5a:9c:09:07:e7:49:c9:08:bb:25:6d:dc:a8:
                    e3:d8:23:fd:f1:19:7d:ee:06:3b:63:22:19:9d:4e:
                    bc:64:1f:57:21:91:b0:b2:93:ed:e2:eb:23:f3:ac:
                    75:0a:86:c3:cb:64:71:22:3c:06:b4:3b:b8:82:6b:
                    0d:10:da:22:d1:00:b2:2b:e1:c4:8d:18:ce:28:d2:
                    bd:08:8d:19:28:39:02:a7:9f:df:65:5a:14:b5:80:
                    28:4c:67:59:37:1d:2c:94:b3:89:3e:03:ce:8c:64:
                    b9:e4:ad:14:36:30:3b:11:ef:9d:ee:39:e1:c2:14:
                    32:c1:b5:e2:21:ac:86:cf:86:80:d2:55:14:49:99:
                    f0:13:5a:06:a1:ab:8b:ac:e0:f1:38:85:04:d0:d2:
                    bf:59:bb:87:8e:f7:b9:5e:63:40:2b:a1:57:00:2b:
                    f1:ee:67:b4:3e:6e:bb:f3:5a:63:79:f1:62:22:2c:
                    bb:f0:68:47:5a:dd:ed:53:4e:41:23:5b:29:25:c0:
                    25:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C2:C5:CA:A2:14:25:AA:00:AB:C4:A1:48:9F:8B:5D:27:41:3D:68
            X509v3 Authority Key Identifier:
                keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e2:d2:9d:ba:c3:fe:69:d6:e0:35:3e:c7:27:10:7a:9f:e6:
         1f:ef:30:94:7f:25:1e:f7:2f:8f:f9:09:17:cc:d9:9b:3d:33:
         9c:87:8f:bf:95:86:1e:dd:b0:61:54:5e:0b:40:09:c3:8a:d3:
         87:24:84:69:e0:a8:85:36:02:58:6a:64:5c:69:11:0e:70:1e:
         be:83:e3:7f:56:97:97:50:70:f5:9d:41:7d:ca:01:87:3b:78:
         64:99:4a:f0:60:75:5e:b6:df:f5:6b:65:2a:b4:7f:ee:78:14:
         23:7a:d9:15:e5:ed:72:9d:dd:a4:4b:87:ca:0b:c7:b4:ee:3a:
         43:c1:08:06:d6:9c:88:cd:6d:0e:e7:c4:cd:4c:e4:e0:25:10:
         8b:c6:36:13:ce:d0:40:24:93:56:21:01:65:5f:2a:41:72:ec:
         ed:6b:d0:1f:ed:72:51:33:aa:35:e5:4a:5b:79:a4:3e:d5:c1:
         5b:d7:69:e8:6d:0c:0a:f1:95:1c:80:10:5c:33:5a:7c:e5:b3:
         f9:83:b4:c1:63:01:92:a5:76:46:a1:1b:d2:c6:0c:04:45:fd:
         46:c5:9d:e8:da:06:d0:13:e1:08:61:4d:3b:80:89:7a:9f:d1:
         39:23:46:22:a2:4a:ff:2f:e7:45:bc:a5:c8:5a:a4:3e:56:8f:
         6a:0c:6f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:12 2025 by rpki-client