Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File:                     azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier:          1kG0Ln537veAZOSqo+PafnLuzOe23yDLAKh7FdaK3sg=
Subject key identifier:   7D:CB:BB:07:8E:C3:CF:99:41:48:16:19:31:7A:7A:42:4D:88:4C:2E
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer:       /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial:       0194BD4EBE5A96CAAB6A08B05A2E6045F088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number:          10BF
Signing time:             Fri 31 Jan 2025 17:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:41 +0000
Files and hashes:         1: 0ez5-37GJP5iy1QIJwf_IO-WQhE.roa (hash: QEZ8/KPLqz/9+BOZvTWpaYfcSae/bnuyUVUksCn5Y6M=)
                          2: 3t2CVo8lZxK05qVhWuiu4c8sgzo.roa (hash: stXOtWs8A5ImkqXvcLQ61uhzCWwyOQe5BXcDJYFxYKQ=)
                          3: FiIrhTLc0T0cR4NfZ5h2S70yG0Q.roa (hash: 7P+g9ZohCIv0bryDT7cswBBPLnCXfwYQjuSM/Nwxwpw=)
                          4: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: etN/7cPdmeOKWN5oUYNQGkNowu6qJjsUqhOyMClX4ZU=)
                          5: sSpzjHD8juEFwmAVJ-9kZDaT1ek.roa (hash: 7SLV5glKGePLniqHW9rAB95C/r7wSCzkCmA4YMo9QI0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:be:5a:96:ca:ab:6a:08:b0:5a:2e:60:45:f0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
        Validity
            Not Before: Jan 31 17:00:41 2025 GMT
            Not After : Feb  1 17:00:41 2025 GMT
        Subject: CN=7dcbbb078ec3cf9941481619317a7a424d884c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bc:75:35:98:49:08:11:b9:00:d9:d5:92:17:
                    53:1d:64:2f:67:be:6d:1b:fa:8d:3f:16:a9:0b:51:
                    ff:ef:4f:99:51:92:15:ba:57:3c:22:32:9a:42:55:
                    bf:15:c9:9c:cd:90:14:c5:6f:d0:cc:09:09:a9:5c:
                    88:b5:81:27:0c:0b:ad:06:f2:78:b4:09:db:6d:64:
                    5c:15:72:67:6e:3f:04:e6:40:f9:f7:16:62:a1:a9:
                    e7:68:94:d0:2f:02:18:2d:b0:d9:5e:10:da:20:e1:
                    45:27:df:8e:60:1a:a7:61:c6:e9:8c:1a:cb:70:d2:
                    ca:ad:98:7b:b1:12:2e:f9:05:69:e0:43:da:a2:7a:
                    b3:a0:8f:82:b6:27:c3:ed:23:4b:a4:3e:44:49:61:
                    95:6e:36:99:2a:df:f0:e0:f0:56:d0:f6:e8:20:10:
                    00:84:db:1b:3e:b2:ae:0e:1d:b6:82:de:a1:e2:a1:
                    00:b0:3e:4b:90:ce:5b:a7:86:51:c7:08:c6:a4:5e:
                    fd:41:6e:d5:f7:83:1a:e1:ff:5f:ef:34:d2:65:2d:
                    46:7e:a9:cc:e2:af:a9:86:28:19:a4:aa:d8:20:a3:
                    44:f6:4d:72:d2:16:14:0c:7c:48:31:96:df:65:8a:
                    fc:64:48:45:6d:89:0f:53:dd:08:03:90:4f:87:9d:
                    77:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CB:BB:07:8E:C3:CF:99:41:48:16:19:31:7A:7A:42:4D:88:4C:2E
            X509v3 Authority Key Identifier:
                keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:9c:cc:33:19:ce:e4:54:7c:1e:41:cc:fe:ba:99:d2:75:81:
         7c:2d:44:15:2a:17:d4:c5:1e:c2:f0:e4:2c:cc:ba:56:42:b1:
         5c:d2:a1:8d:1f:04:67:ae:f2:0b:43:5a:1b:c3:34:ec:9e:f8:
         9b:64:32:c4:78:31:00:db:dc:73:ff:a7:aa:e8:06:6a:20:45:
         83:59:1a:fd:0c:5b:07:44:40:c0:ea:28:03:58:ce:f4:87:84:
         55:31:15:96:1a:9a:55:1e:54:a4:22:79:e1:6b:73:3f:b0:d2:
         d3:5a:88:1c:eb:0d:eb:80:0d:31:3c:5e:59:af:df:5f:41:92:
         6d:a9:eb:a6:5f:4d:a3:c9:5b:9b:e9:8f:e0:a6:2d:92:53:81:
         ca:3f:ad:cb:82:84:20:c2:df:b2:a6:02:af:4c:d0:13:a0:5c:
         f2:da:de:98:51:4c:25:aa:bd:fe:cb:b0:15:72:d6:ed:f9:00:
         d9:4f:f9:98:34:4c:d0:2c:dd:0a:49:b7:d7:12:29:81:c1:16:
         34:88:67:df:32:2c:8b:40:77:2f:67:0f:73:8f:15:11:c3:71:
         1f:f5:4c:81:d0:ab:a5:ac:b8:5e:65:cf:81:a0:a6:64:e4:5c:
         0f:e1:39:5e:5c:93:3d:53:4c:88:55:e4:c0:4a:3b:6a:91:8d:
         be:53:fb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:43:16 2025 by rpki-client