Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
File:                     aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json)
Hash identifier:          exchsjwKJkfxdNn3IZ3fZ/dQhEk5Ll2pl+mgMXoGkik=
Subject key identifier:   CE:CD:B8:43:02:2B:BF:F1:A3:06:AB:C6:1D:1F:E7:D6:B5:5D:52:01
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Certificate issuer:       /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial:       0194BD175CB144B212827386ED5EBC289BD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
Manifest number:          0E1C
Signing time:             Fri 31 Jan 2025 16:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:12 +0000
Files and hashes:         1: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: 3+B3zUqnQMSIEPo700ajeILeFx52SZrGT3NHvfJfKZo=)
                          2: njKb2eruHX8H9g3wi8a7hMHrArw.roa (hash: 6gW6VZJ5Gbs98ZjAseT0lvfg+/2Cg+ztPZG7diySUiI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:5c:b1:44:b2:12:82:73:86:ed:5e:bc:28:9b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
        Validity
            Not Before: Jan 31 16:00:12 2025 GMT
            Not After : Feb  1 16:00:12 2025 GMT
        Subject: CN=cecdb843022bbff1a306abc61d1fe7d6b55d5201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:aa:e2:bb:8c:74:76:8a:a7:8d:05:94:6e:
                    e3:a6:df:d4:b2:12:19:f0:4f:87:fa:4b:4d:c0:df:
                    00:37:bf:98:7c:73:98:52:ea:5f:df:2f:e1:6f:31:
                    45:e4:74:a5:2e:1a:97:80:f2:d8:a7:f9:42:e7:59:
                    2e:ff:48:bb:b1:b0:ca:d9:4a:67:fe:e5:82:3c:a3:
                    ca:e0:ba:e6:3b:fe:d8:0b:68:0c:0e:2d:0a:07:c9:
                    5d:b0:e1:f2:b5:b9:04:cb:7a:28:15:92:93:74:77:
                    28:95:29:ab:56:cf:74:28:60:33:86:4d:cd:b1:52:
                    4d:77:6e:56:73:ff:05:8f:b1:ca:48:ac:79:82:87:
                    06:a9:e3:a5:7c:8b:44:e5:b8:25:ad:2b:13:70:b8:
                    9f:4c:9a:d2:cf:69:23:4e:58:d6:4a:4d:66:a8:35:
                    4c:b9:8d:17:23:c4:a3:77:84:67:84:cd:7a:62:aa:
                    62:cf:04:38:d9:04:64:cf:d3:2f:ad:b9:fe:9c:5b:
                    50:76:51:ef:a8:8d:46:52:6f:2c:52:19:a0:c7:5a:
                    fd:0c:21:5e:79:ea:83:44:f8:e9:d6:92:8c:a3:7d:
                    59:f7:8c:8b:83:9a:9f:3a:06:cb:f8:8a:90:75:29:
                    f0:26:75:ea:08:9c:77:87:07:2a:d3:60:22:2a:bc:
                    ae:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CD:B8:43:02:2B:BF:F1:A3:06:AB:C6:1D:1F:E7:D6:B5:5D:52:01
            X509v3 Authority Key Identifier:
                keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:44:1c:f2:a4:cf:83:b3:a0:0d:43:ed:a1:7d:68:04:91:14:
         32:03:a9:30:7f:7c:22:68:b8:78:09:2e:8d:3e:70:0e:ba:44:
         13:1d:06:be:a5:4c:8e:9a:a5:68:a3:3d:ae:bb:25:d4:18:e3:
         25:27:cb:b7:7a:c0:ae:2e:31:26:a1:c4:94:b7:2e:e9:6e:5b:
         89:2e:0d:ba:75:f7:20:dd:92:18:ce:db:06:78:9e:d9:06:96:
         59:fc:c0:91:28:6e:02:78:a8:45:5d:b5:c7:9a:80:84:aa:97:
         38:ba:92:4a:55:0e:31:43:6f:09:34:7d:4a:40:b3:19:35:b2:
         b9:46:e3:07:80:1b:f4:1d:ab:6a:70:8e:3f:b3:c1:cf:3a:39:
         5d:15:77:d0:3e:5c:5a:42:07:e9:47:64:bc:a3:ad:d4:c1:f3:
         f2:3f:e5:24:3f:28:6e:eb:9a:fb:3a:b0:59:4f:d9:d1:32:49:
         7b:96:45:3c:8c:75:36:d2:29:a1:13:21:50:4c:95:6f:cc:fc:
         e2:5f:ed:bb:40:f0:1d:58:ab:87:5a:86:a5:f0:2a:d9:da:4d:
         ed:33:62:c6:05:65:2a:75:69:1e:5b:62:fb:89:c1:a8:4a:14:
         ad:e9:69:0f:6b:41:c4:a7:f1:c6:46:2d:fc:cc:b6:c8:e7:1b:
         a5:76:c2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:59 2025 by rpki-client