Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
File:                     v66jWK7ut9C54Pk9I_Z9KafsYsg.mft (raw, json)
Hash identifier:          RSQ7QXXebBUQmq4DvY0aiBXzg+9N65PGGfZ0e8j8mTY=
Subject key identifier:   FA:22:9B:B1:BE:59:48:65:D3:0A:33:B4:29:7E:91:62:05:D3:03:C1
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Certificate issuer:       /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial:       0194BD17EED4609ABC4FA17A8F69B553A86B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
Manifest number:          0CFE
Signing time:             Fri 31 Jan 2025 16:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:49 +0000
Files and hashes:         1: Bx14mrPyOkGCiRnCoQiK8xyZi2Q.roa (hash: C2g4als5ZUHI2t4/02+/9yFNtLBjw/6au4Fyo7199Fw=)
                          2: FL4VCP2ebS0KpzdEEjgpeOZ0WHU.roa (hash: a8hxfR30jfZG7itjDgkJbvAUR1rTEz6wQmvQZHvY+Vg=)
                          3: LWIsGZerMX3p84vU2rGIj-HLsj4.roa (hash: V653yeNd9OWwSecStXWVbNQrGBjKZX6SHpE0zx75CIQ=)
                          4: NXFNvPreWKmytgudduJxNubp9ag.roa (hash: x5KCpK9l6cPAujJ1sPogi+1hAmWtq6th1heWKUVMPlY=)
                          5: kbTOh855t8tddDIlGKiPIgCKjmo.roa (hash: O0yoE+XLznGQKt8h9/FERhJPYLw6A2Fz2mE/56qBkRw=)
                          6: v66jWK7ut9C54Pk9I_Z9KafsYsg.crl (hash: +zrddKqpi0lAUpUa4Sw0NwzuCkdocljD89dFtPrkcKM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:ee:d4:60:9a:bc:4f:a1:7a:8f:69:b5:53:a8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
        Validity
            Not Before: Jan 31 16:00:49 2025 GMT
            Not After : Feb  1 16:00:49 2025 GMT
        Subject: CN=fa229bb1be594865d30a33b4297e916205d303c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:48:3f:df:67:8e:38:17:06:b8:11:9e:d1:
                    78:59:95:42:a1:55:3e:ce:35:9f:fb:45:83:2f:43:
                    08:ae:60:36:04:1d:1a:e0:ea:84:51:ff:d9:73:ce:
                    c1:b7:62:15:1c:2d:c9:8a:cd:13:bb:dd:40:55:76:
                    17:dd:47:91:8d:24:0b:9f:e4:c9:b0:4c:3a:d1:b9:
                    c9:46:b8:d4:85:14:92:c6:04:ba:b4:65:1e:29:cd:
                    2c:1f:0a:c3:d6:e9:c5:c4:6c:e8:c4:70:67:4d:56:
                    78:91:a4:8a:d6:b9:3b:9d:cd:ec:24:d8:8e:e2:90:
                    52:bc:18:11:d9:b0:ac:08:3e:fb:69:7a:12:05:c3:
                    8f:d2:27:47:a3:df:c2:72:99:29:fc:80:a5:4b:3a:
                    7a:95:97:09:ea:14:1a:d1:fd:b2:d7:21:3a:16:cd:
                    ba:93:d4:c4:eb:07:e0:b8:99:97:43:37:3c:f3:a0:
                    84:ad:d1:5d:7c:81:8c:6d:5c:1b:b7:9e:a0:45:c4:
                    1d:22:d5:5f:d5:e8:50:21:72:b8:ee:69:d3:1f:2b:
                    70:bc:a9:95:4c:07:77:94:51:85:10:62:e8:9f:aa:
                    af:bd:a7:0e:69:69:fc:2c:e6:92:37:bf:c2:c1:8f:
                    08:f1:dc:f3:2e:96:97:0e:ca:7c:79:e8:89:bd:f4:
                    ef:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:22:9B:B1:BE:59:48:65:D3:0A:33:B4:29:7E:91:62:05:D3:03:C1
            X509v3 Authority Key Identifier:
                keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:e2:d8:13:6a:ab:a6:55:e0:80:74:e7:37:c7:6b:fa:9f:
         72:32:c4:66:4c:e4:1d:86:8f:82:e6:13:5e:0e:a7:97:c3:75:
         7c:1b:36:35:a5:81:27:65:16:f9:ce:6a:5a:bf:43:e1:21:84:
         01:d0:05:d2:20:33:5b:31:25:5d:a8:44:25:8d:e8:67:a8:bd:
         52:16:ae:ff:0e:fa:38:78:e0:fd:34:47:57:93:bb:f0:b1:b0:
         f3:f8:04:38:4b:11:03:5c:48:42:d0:25:71:bf:54:84:ad:4d:
         7c:49:01:cb:93:ca:f2:80:d4:ea:f3:ec:22:a1:06:58:30:4a:
         15:cb:89:7b:f3:f4:65:b3:59:3e:e6:1b:93:3f:a5:20:e0:80:
         ba:da:fa:43:2b:05:30:f4:80:3b:e9:d6:c6:ed:b0:e1:e7:88:
         0d:d8:b7:30:80:71:0d:87:31:a7:99:44:e7:4a:3b:6a:1b:6a:
         86:12:7a:d3:03:30:87:af:1e:da:b1:8c:ae:34:20:b3:61:5f:
         b0:05:4a:30:80:94:fb:e6:cc:24:fc:0f:88:a4:4b:cf:1a:49:
         b2:54:83:a5:46:81:37:5e:12:45:ce:0c:80:a3:2d:67:dc:a4:
         7f:4f:2e:62:57:6b:8f:3d:93:15:05:0a:6b:9d:ae:d7:a2:31:
         a6:69:0d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:07 2025 by rpki-client