Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
File:                     Jowu3BO7KjxjJiEhueqtGIvtuuk.mft (raw, json)
Hash identifier:          mtqpI/zpkC3U08wnFuRivrS6DXrKhTOaZ+vusSSiBf8=
Subject key identifier:   4D:02:C8:AF:B3:3D:41:05:F9:0E:B0:61:41:45:7B:01:96:6C:6C:69
Authority key identifier: 26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9
Certificate issuer:       /CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
Certificate serial:       0194BC7313E6E02CA908B2F14FA206B2CDFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft
Manifest number:          104D
Signing time:             Fri 31 Jan 2025 13:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:45 +0000
Files and hashes:         1: DpA6vqU4LJr5KoLtREWlTrMePeU.roa (hash: JzcSaxZjM50huCWTepEHWuRTcnth93I21P4Hl6vppKc=)
                          2: Jowu3BO7KjxjJiEhueqtGIvtuuk.crl (hash: VClTMef5kH2vKI+h0aJE40mgMXJr/YrJhapB3cedyUY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:13:e6:e0:2c:a9:08:b2:f1:4f:a2:06:b2:cd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268c2edc13bb2a3c63262121b9eaad188bedbae9
        Validity
            Not Before: Jan 31 13:00:45 2025 GMT
            Not After : Feb  1 13:00:45 2025 GMT
        Subject: CN=4d02c8afb33d4105f90eb06141457b01966c6c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:32:e9:4f:ea:ef:9c:bf:b6:b5:ae:18:4f:23:
                    b0:66:a6:41:75:88:eb:f0:c6:65:62:ce:0e:49:f2:
                    e9:ce:eb:8d:20:5a:1f:9e:4b:ae:52:03:5c:f0:73:
                    b3:7d:57:89:0b:df:80:55:0a:6e:02:35:5b:9e:05:
                    b6:48:81:17:95:c3:e1:90:68:87:ad:9c:3d:a7:f2:
                    c0:d5:fa:93:ad:d3:a2:8c:77:5c:db:3b:f4:1d:36:
                    d3:0e:ef:9b:0f:94:1d:80:d8:61:1c:c0:ca:df:fd:
                    f1:8c:cc:21:9c:e7:66:d3:7a:32:16:ea:c1:01:c2:
                    3d:f8:49:f0:1e:5a:0e:a7:8f:39:37:9a:72:b0:90:
                    ff:4b:21:4d:0b:ec:d8:8a:48:94:68:20:1c:1a:dd:
                    e1:eb:5f:32:60:1b:08:5b:d7:5c:59:76:2b:c5:13:
                    73:39:27:83:cb:d1:99:80:8f:86:9e:0c:dd:85:e1:
                    a9:3a:a9:4b:92:06:fc:64:ef:23:3b:b6:8b:55:a2:
                    48:de:7a:94:55:97:cc:c6:f7:af:f1:83:98:94:ea:
                    f3:17:25:43:19:d8:84:5c:ec:7a:72:64:1e:2b:82:
                    b1:d1:af:82:c3:4e:9e:04:00:1a:f0:23:05:63:b3:
                    cf:9c:54:20:80:ab:1e:01:dd:84:02:00:65:74:b0:
                    bc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:02:C8:AF:B3:3D:41:05:F9:0E:B0:61:41:45:7B:01:96:6C:6C:69
            X509v3 Authority Key Identifier:
                keyid:26:8C:2E:DC:13:BB:2A:3C:63:26:21:21:B9:EA:AD:18:8B:ED:BA:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jowu3BO7KjxjJiEhueqtGIvtuuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2cb3c9-3d01-4ca2-b9c7-f0115c85f3ba/1/Jowu3BO7KjxjJiEhueqtGIvtuuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:4a:1e:fe:c6:9e:1e:da:4e:8f:9f:83:ef:a5:4f:d8:a4:b7:
         fe:f2:1a:73:78:de:1a:25:d2:b6:0a:1c:a9:18:38:db:19:ef:
         a4:29:0d:9b:25:8c:f6:89:b1:f4:2f:3d:0d:6d:28:7d:f5:da:
         89:e5:da:e8:f7:72:ab:2a:51:35:da:ca:da:a7:25:2a:89:4a:
         c8:bb:50:04:f0:58:01:94:32:7d:3e:f4:d1:d1:a4:23:97:d8:
         bb:2f:34:6d:47:fd:6e:3b:92:23:8e:3e:01:49:ba:ff:b6:fe:
         a6:62:a2:87:70:ea:f1:19:5a:c4:ba:30:52:5d:1c:82:7b:02:
         2b:5a:f0:2e:90:49:e3:b0:0b:f0:61:22:6e:1f:ed:d5:b5:32:
         a2:3b:76:02:8c:31:c4:15:10:28:21:6d:cb:8d:98:e8:c0:8c:
         f1:a4:36:12:32:c6:e8:65:6a:c3:8b:9d:62:1e:0a:41:cb:4e:
         34:f6:49:db:2e:7f:d0:07:24:09:67:b2:4d:96:21:d0:ba:40:
         8b:cd:c0:52:24:5e:dc:42:ef:c6:67:e9:28:66:28:65:52:04:
         f5:51:e0:ec:52:d0:fa:40:e7:9a:82:30:3b:82:a1:cd:56:84:
         30:2a:8a:c6:c8:7c:8f:8b:a3:20:eb:e4:8a:86:43:35:f4:77:
         60:8b:63:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:22 2025 by rpki-client