Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
File:                     3i6RcxXwqHiyH8E51JqCGq3cPJc.mft (raw, json)
Hash identifier:          ywz5sQVyuHEevSQPe37pAYwTy6f+/2IPTJ1/kvI2wx4=
Subject key identifier:   D9:8B:C1:10:CD:FB:96:2D:E3:38:C1:10:BC:50:6A:A2:40:2C:01:4B
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Certificate issuer:       /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial:       0194BCE08B442E4A54B690BF762E8740F72A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
Manifest number:          1439
Signing time:             Fri 31 Jan 2025 15:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:19 +0000
Files and hashes:         1: 3i6RcxXwqHiyH8E51JqCGq3cPJc.crl (hash: bwqXL1gzQzld/CZVpWPpHm8ygvyHmAaHmKJi5+qiZ3A=)
                          2: AvB8ANlawjDpzo5pEv-ozc274As.roa (hash: JAMHGl8FA3FqoIkdY9hmqgyAMGPXFfGq49FOeMqcpDU=)
                          3: rsaDxQLLmYAD38iUbK7BPrqaO3s.roa (hash: 7PXRPaNFmGtt9qZAjG0o9yX575ZogLdz94mJLu6xEQM=)
                          4: yytkDg390wURQAs45MKB5G-EL9Y.roa (hash: Zh5YMYHrmE+MJNbhijbyZkT5VrFHROVfxZElaGb2ngI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:8b:44:2e:4a:54:b6:90:bf:76:2e:87:40:f7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
        Validity
            Not Before: Jan 31 15:00:19 2025 GMT
            Not After : Feb  1 15:00:19 2025 GMT
        Subject: CN=d98bc110cdfb962de338c110bc506aa2402c014b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:9f:02:0a:9a:51:bc:b0:e5:1a:1d:be:db:
                    64:8d:9f:d3:5c:db:c3:f6:c8:f0:ba:e6:97:21:fd:
                    7f:c6:ba:51:e0:5d:07:7c:41:9f:b5:ce:6f:cf:72:
                    99:f4:35:d4:1b:2b:36:4c:d1:ab:30:a9:12:aa:f6:
                    92:66:3e:d5:f4:21:68:43:33:39:89:fa:f9:c9:56:
                    ac:ba:8f:69:ad:ac:1f:6a:8d:27:b5:62:46:8a:bf:
                    b1:4f:54:8c:68:f6:51:70:82:4b:7c:19:d3:56:7d:
                    25:49:a8:ed:b2:93:1a:83:e2:63:67:cd:0e:a2:21:
                    2a:e0:0b:76:97:0b:7d:6c:f1:45:79:c8:bf:25:96:
                    02:3e:b2:49:5a:7b:d6:51:55:fb:85:a3:c9:51:34:
                    f2:3f:4a:1e:ab:9f:b5:9c:e5:1f:fb:32:70:b9:d6:
                    9a:d2:46:f2:a3:f6:78:e3:a6:87:79:5f:f0:9f:fe:
                    7f:85:8d:52:f8:ab:9e:a6:bc:6a:43:9a:b6:37:2a:
                    c3:e3:78:15:c5:09:ef:a9:b8:f4:8b:01:92:88:57:
                    c9:04:ec:db:cd:70:4f:f3:b4:53:ec:cc:05:a4:e3:
                    c3:64:3d:87:9d:74:b2:bf:52:84:fa:fa:73:68:be:
                    e9:d1:04:a8:3d:8b:9a:8b:41:ef:1a:65:4f:a3:75:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8B:C1:10:CD:FB:96:2D:E3:38:C1:10:BC:50:6A:A2:40:2C:01:4B
            X509v3 Authority Key Identifier:
                keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:45:6b:a6:c0:75:ed:80:cc:38:0e:79:61:02:fb:07:f2:80:
         79:70:e5:3b:d3:da:2b:5e:a6:63:9b:6c:0d:29:4e:52:ba:2f:
         af:9e:10:f1:ca:67:40:b5:7c:bf:ec:9f:36:7f:94:4b:97:b7:
         86:8c:b2:3e:bb:cf:0c:df:16:fd:37:01:a1:69:4c:3e:fc:3e:
         2b:6b:a4:e2:4b:d4:ef:5b:dd:05:17:fd:31:3d:d7:f6:94:63:
         15:1a:42:57:a4:57:ef:57:80:7b:7b:d1:36:a9:c1:11:86:78:
         e5:89:08:b1:8e:cd:d3:9c:dd:b5:6c:28:2c:b6:55:58:03:ca:
         0f:45:67:24:cc:9d:94:26:c2:96:f5:1f:54:5b:14:2f:1e:91:
         bb:d5:22:11:41:57:d6:fd:af:4c:db:ae:35:f5:63:ef:1a:4f:
         15:9e:11:61:b6:b2:d9:8c:0b:5a:ff:6e:b4:cb:28:91:a7:36:
         1e:a5:77:a2:86:1b:43:bc:44:8d:59:71:11:d3:67:20:e9:d5:
         08:e9:ba:33:75:0c:a3:30:de:3b:52:eb:94:2b:47:e9:95:77:
         57:a1:bd:da:fc:a1:2d:6b:d1:40:3e:22:d8:31:8f:9b:6d:a2:
         7e:22:62:78:34:bc:5a:21:e3:50:0d:c7:6c:c0:00:4a:e9:ac:
         44:10:07:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:07 2025 by rpki-client