Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
File:                     r1vEnV8BojWvkonPSSav_vevkrA.mft (raw, json)
Hash identifier:          sbcN7eX8GNCJZcSsaZqSnJaGMWBbl22CASjYbrxIP9U=
Subject key identifier:   1B:8D:7C:E0:C6:04:BC:35:C9:8A:FB:5F:E8:BD:04:F1:7E:67:C5:C9
Authority key identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
Certificate issuer:       /CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Certificate serial:       0194BC3BC23E5BD44D8AC9926D48B2B85E75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 12:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:20 +0000
Files and hashes:         1: 6d-AyMF7ZaaM5Mjt7QfO5cW_2AY.roa (hash: ZUwXdaD1P85dbAvt2mEWIMU5POb+euNbtRK/RK4dLgk=)
                          2: r1vEnV8BojWvkonPSSav_vevkrA.crl (hash: tkImqTSl25iLAWO2gNW/3HUi+1cR6ClDiMF0DwKjSsI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:c2:3e:5b:d4:4d:8a:c9:92:6d:48:b2:b8:5e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5bc49d5f01a235af9289cf4926affef7af92b0
        Validity
            Not Before: Jan 31 12:00:20 2025 GMT
            Not After : Feb  1 12:00:20 2025 GMT
        Subject: CN=1b8d7ce0c604bc35c98afb5fe8bd04f17e67c5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:c8:4f:31:aa:dd:25:6b:6f:db:44:57:76:
                    e9:5d:4f:dc:40:bc:88:44:12:4d:8d:6f:26:ea:77:
                    31:75:49:d8:bd:83:c6:e4:ff:e1:34:2d:49:bb:12:
                    1c:56:9e:ad:0c:15:7e:e0:43:86:7d:47:56:8d:b2:
                    41:70:80:82:ad:31:eb:f9:a9:1d:48:0b:bf:f0:2c:
                    40:23:a5:48:fd:6f:00:cc:a2:26:1d:19:b8:e4:96:
                    6b:19:6e:49:cc:54:8f:5c:e7:ec:15:2d:92:2a:87:
                    a9:e6:2a:2e:11:1c:89:b5:c1:45:15:d9:b5:9d:ea:
                    2c:f6:f7:1c:70:ed:9d:80:98:3b:8f:7a:3b:ff:f2:
                    ed:dd:3a:9a:b3:02:96:f5:28:72:5f:99:c5:17:b2:
                    f9:50:bd:ea:d1:76:23:3b:89:4a:12:7c:da:75:bb:
                    5c:ac:58:49:61:e3:d9:bd:81:dd:e6:7b:96:9c:69:
                    7f:37:4c:78:c7:77:0f:de:41:49:0e:11:af:65:35:
                    a1:77:e4:9a:00:16:03:6c:23:26:22:5f:07:9a:97:
                    d3:a6:68:c8:c4:93:42:2b:db:61:af:1b:81:cb:14:
                    f7:78:56:94:44:d1:bf:1b:b1:0f:cf:3f:e5:38:00:
                    8e:2d:09:2d:72:d5:cd:51:81:71:65:1e:de:84:83:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8D:7C:E0:C6:04:BC:35:C9:8A:FB:5F:E8:BD:04:F1:7E:67:C5:C9
            X509v3 Authority Key Identifier:
                keyid:AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c6:2d:63:50:1f:86:94:41:bc:3c:f7:4c:4f:a6:98:8e:4a:
         d3:9c:02:bf:5f:4c:1f:17:02:0a:ff:57:db:29:23:f9:3f:f2:
         ea:3f:02:6f:a4:28:08:3f:df:ac:ed:6c:75:70:82:fa:a6:2f:
         55:84:c0:90:1c:94:81:22:e3:47:1d:9d:af:c5:39:73:af:f6:
         d7:4a:8b:80:1f:4a:f2:41:05:50:d6:76:cd:3f:4a:ff:3d:45:
         c8:ee:f8:3b:d1:5c:ef:3d:4a:6b:46:0d:04:7e:49:07:bb:79:
         8c:a9:8a:98:50:5e:44:4f:1a:f5:63:4f:f5:aa:bb:da:69:2d:
         25:40:ea:fe:72:1d:48:d9:bc:88:d1:74:af:11:0b:5c:95:26:
         45:96:03:05:b7:95:85:77:83:25:b8:16:e4:6c:03:f0:e2:ee:
         cc:f0:d0:1e:3d:02:89:ca:40:f7:a1:cf:6b:91:3f:71:2b:b6:
         60:98:b5:18:7a:42:ba:d0:2e:5c:5a:ee:86:e6:e3:cc:2e:ff:
         8e:c7:33:a6:68:12:0b:dc:13:3c:08:c2:90:30:0c:42:f6:c2:
         d3:44:62:5a:ba:3a:a3:93:5f:fc:9e:f5:44:3e:02:41:55:3f:
         7a:e2:c0:60:98:ba:3c:60:20:fb:79:c7:ea:01:d9:db:0b:f6:
         06:e9:0f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:22 2025 by rpki-client