Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
File:                     Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json)
Hash identifier:          Ikrw5epLvubf97DX8jM4KpbZE64OyAkSNhwxCsKzEZ4=
Subject key identifier:   DE:3F:7D:DA:3A:1A:3E:7E:87:F5:4C:BE:05:B4:D4:82:84:74:55:A7
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Certificate issuer:       /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial:       0194BC727C8B3791670AC7834554F5583EA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
Manifest number:          0C35
Signing time:             Fri 31 Jan 2025 13:00:06 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:06 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:06 +0000
Files and hashes:         1: 4JQtl6CjZI4Ed81VYmD8y3s93nc.roa (hash: DNWzfbgNl38BTmSJIdFxCJ7U9WCYuq21jLucbQaekUg=)
                          2: 7SqB0LPDCpYuRw3bGnNP1eNeuNQ.roa (hash: u6F8sm9O8DZBOKJXeVOslWmGtNA/Sou6o+QAlI2Y47E=)
                          3: BL3LZfi-f3ywcf3FmAmJwnbzASI.roa (hash: DVAE75CLKTBw2pzOs2zlkLoQMMQUvF717xgboLC73+I=)
                          4: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: 6sMSPfnOKKXFXVwvOkc5C5RPnJsG3Ox8quqvSywcSBs=)
                          5: DGVdvNoy4BZmMskAY0FhRqegebQ.roa (hash: iRYRAmf2jWOp8JdrLs3Bp0+JXzjugHqhdQJXjVJrTgk=)
                          6: DeACqwGcvIcEJ9pagEhHd4n2i_M.roa (hash: WPp0dLB9p4cnbOnLtVE+B38AXmBSQMpiDZZIvPoqViw=)
                          7: FMfF0PRqbPl1Xgf7uetPmo11RwY.roa (hash: Nmk2r9tNYQqNw9x7igBvoQ88flRwtwnRPqDYVBzi6Zk=)
                          8: Q146qaaxZ1xmkBzI32xjl700K7Q.roa (hash: Dmot/z3pbyFtlPpe5Va8TlDgzImhsPNQJ1rELTx4Aro=)
                          9: XNBwXrAiwZu96uMUjODQvvz_Bzw.roa (hash: mCW8/M59wIOxOS0wM2q/LR+3KGIdWjCxHtDVDd4aiCU=)
                          10: Z4WfPAHr0U4HuMsBXDWE11AR6SY.roa (hash: nIFqFX+PoOUUY+ho0HNN5VDHjMoLJi/JVpJHhVS9zMY=)
                          11: fETfH_XiNbseiVsjZA2HM6Af2jI.roa (hash: uyRqpIalZYJdXa3YW/3/Z8wVH+1oAHTZduFpskFWKhg=)
                          12: foM10PwLyaHwLhfbaJzkwnbAE_w.roa (hash: DIaKJkxL7f9BTL5/9GbSSi0rXtJN9gz1NV5M8HRodzE=)
                          13: hg5R4vwoQ_9Vrh_yIOCSPSZwhjE.roa (hash: AUv0nseoL0Jb4BkT4F0dIMy2ekdAQmyLQI8e0ZH77o8=)
                          14: rS554DqYgNK00lANZV007fZTVkM.roa (hash: 3SSYULxYvCw8XOXXkyZRjzf+FifSR5lE3jD5NyjPQ0I=)
                          15: uZ82HsSJfJMX-injZJkIBGdxGBY.roa (hash: mT1BefewYqT0QULFBWTWCpATALXi+6J6LGgvQIVpGhI=)
                          16: ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa (hash: Q1K4a50MOqKpSRbaxfZO8lYsK/lxhMtlTC8aBU8fdHU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:7c:8b:37:91:67:0a:c7:83:45:54:f5:58:3e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
        Validity
            Not Before: Jan 31 13:00:06 2025 GMT
            Not After : Feb  1 13:00:06 2025 GMT
        Subject: CN=de3f7dda3a1a3e7e87f54cbe05b4d482847455a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:97:74:38:7b:79:aa:c9:48:1f:a1:91:66:
                    e5:d7:8b:8b:17:1e:e2:6f:39:13:c2:db:0a:29:7d:
                    8e:61:cc:9e:c0:19:a0:eb:fe:a9:a7:f6:88:a6:0e:
                    9e:e7:20:00:ad:a0:b6:de:f1:91:5d:bf:67:db:04:
                    3f:00:7f:82:a0:b0:a0:78:0a:df:b3:85:0d:0d:bd:
                    bd:af:d2:b5:18:ec:0d:31:22:20:a0:be:fe:67:b1:
                    08:0a:3d:ba:2c:11:65:db:b9:e3:4f:fd:b5:ff:de:
                    34:28:fc:75:db:58:d7:91:1e:90:09:22:c0:e9:c2:
                    c0:ad:b0:06:d0:6e:49:de:95:09:9a:a5:4d:34:c4:
                    55:c6:96:de:1f:f3:57:22:f3:d3:6f:c9:19:7f:7f:
                    d0:25:12:38:d5:59:48:b9:82:4e:fd:3f:45:e7:7a:
                    cc:01:87:01:4c:db:44:e4:70:42:31:9d:cd:31:2f:
                    39:4e:6d:c5:61:08:c1:f7:0c:8e:ce:79:c3:24:b9:
                    23:d0:b3:e3:0f:7a:86:38:db:8c:c7:88:0c:5a:23:
                    a6:d8:88:e9:fd:2d:80:4b:28:8d:07:40:6e:66:ff:
                    0e:14:d5:9a:0f:f8:20:3c:59:90:4a:2f:87:0f:fc:
                    97:15:3c:e8:67:ae:56:e8:4e:76:0c:1d:08:42:47:
                    a9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3F:7D:DA:3A:1A:3E:7E:87:F5:4C:BE:05:B4:D4:82:84:74:55:A7
            X509v3 Authority Key Identifier:
                keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5b:a2:36:78:ad:79:9c:49:ca:9f:95:56:79:9b:42:a1:d0:
         ee:c3:d7:fc:4c:0d:c6:03:47:01:d7:2c:7f:a7:03:2b:7b:79:
         7a:94:0d:e1:5b:65:8a:07:46:5c:c0:31:97:27:72:7c:49:44:
         b7:a7:fc:b1:de:a5:8f:92:91:ea:05:04:13:f4:40:ab:76:d1:
         77:26:77:13:b3:d8:49:74:95:3b:56:e6:03:f1:f6:b4:19:a4:
         73:de:35:24:eb:e7:82:6f:f2:6c:cf:54:ae:b6:da:3c:0a:cb:
         c2:0d:3d:10:84:5c:e4:af:71:7f:9b:81:05:b8:d3:fb:e2:bf:
         95:98:9f:60:b5:b3:03:f6:da:63:da:68:b2:c9:ea:b0:d6:d6:
         bc:a2:66:7b:c8:f4:1c:36:b4:d9:d7:e5:98:4a:24:ea:de:08:
         f3:a7:b1:f9:3f:9c:f7:14:97:09:e1:d7:ee:6d:ea:d5:bb:60:
         09:ac:9e:85:be:5c:b3:4d:ac:36:ef:7b:eb:26:65:76:d1:ec:
         3b:89:82:ab:18:64:2a:ad:44:f4:9f:f2:aa:b8:44:b8:05:c0:
         ac:06:4b:93:bc:ba:be:ec:e0:7c:6b:5d:f9:cf:73:3f:e6:dc:
         77:3f:ca:66:0e:20:f4:a9:bb:4a:5d:7a:88:af:4d:58:25:4f:
         40:47:3e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:47 2025 by rpki-client