Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
File:                     uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft (raw, json)
Hash identifier:          AqQaMVIf7/HfBwMp2HpEFSevf5AGcBCWYUEM9468B4Y=
Subject key identifier:   82:23:4A:67:0C:4D:67:A2:0F:3D:68:B4:9D:6D:C5:8F:03:50:6E:CD
Authority key identifier: B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63
Certificate issuer:       /CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563
Certificate serial:       0194BC0507F297388347139E4F334D666B50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft
Manifest number:          0828
Signing time:             Fri 31 Jan 2025 11:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:33 +0000
Files and hashes:         1: FpN3CNrpC7an-iJQGSmMT_sDhCQ.roa (hash: IP5LQBH3slQY1vq5cW96oTpQwzobOGLQLnnmLh+kv0c=)
                          2: T2xZGAQ2utapiNKAxRkC6LvmPaU.roa (hash: wOG+SGzxtaS4DLVV01zxTU+InL0GZso9vp2F1RAwi2M=)
                          3: knjugsz4dO-GRlfWjJa4TPEo8dc.roa (hash: pgS04K1pxu870WaArIBezAQBjlsLTOobzOHJ29I84kY=)
                          4: uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl (hash: if5QH9bwenyVlbH64Uyi+sFZ0sPziB/7tNgRdBRisak=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:07:f2:97:38:83:47:13:9e:4f:33:4d:66:6b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563
        Validity
            Not Before: Jan 31 11:00:33 2025 GMT
            Not After : Feb  1 11:00:33 2025 GMT
        Subject: CN=82234a670c4d67a20f3d68b49d6dc58f03506ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:61:86:f4:f8:b0:31:8b:ac:4f:84:4d:06:
                    64:cd:7b:a3:71:75:2b:d4:22:55:95:eb:29:71:7b:
                    9a:70:d5:8e:1f:4f:bd:51:5b:d8:a8:23:b6:d9:0f:
                    cb:20:59:f6:4b:d6:76:ac:05:fd:b9:2a:84:d9:ae:
                    e1:4e:cc:e2:7b:4f:0b:6f:3b:d1:7d:8a:7e:e2:9b:
                    03:0f:b8:94:55:73:d5:3f:9e:21:e6:ad:8c:e7:59:
                    ae:e0:80:a7:73:73:af:9a:30:13:ad:da:ec:c9:ea:
                    59:45:4a:97:05:b5:ad:67:30:bf:bd:20:11:96:02:
                    51:cb:74:f7:37:6a:68:9e:76:45:c5:dd:ae:b7:53:
                    84:ef:69:6e:07:cb:74:f8:f0:b1:07:77:16:9c:19:
                    f3:ea:93:0f:3a:14:51:3a:b8:b4:bd:1e:d0:12:27:
                    f0:18:ba:2d:10:06:48:b4:80:b8:52:6d:1b:52:48:
                    57:e5:3e:35:39:e6:b3:38:e4:4f:6b:f9:c9:19:97:
                    f2:70:f7:f2:26:48:0c:eb:dd:fb:e1:6c:92:41:a9:
                    48:54:e0:7f:b0:22:69:11:2d:fa:c0:da:25:a1:9f:
                    00:89:08:5a:d4:31:3b:3f:32:78:ab:81:d6:0a:bf:
                    61:11:50:39:8b:45:22:6a:76:a9:b3:2e:b0:8a:24:
                    af:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:23:4A:67:0C:4D:67:A2:0F:3D:68:B4:9D:6D:C5:8F:03:50:6E:CD
            X509v3 Authority Key Identifier:
                keyid:B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0a:58:4a:8d:b9:6d:a5:3a:50:10:ab:4e:a4:05:7c:f8:06:
         59:12:ab:2e:a0:16:c8:13:05:53:87:5e:12:d8:85:a4:a3:e1:
         b7:63:5f:7a:aa:01:fa:a6:a2:a6:16:91:88:3c:26:e7:f4:0f:
         ac:31:a1:23:d1:68:1d:ab:59:b3:29:7f:6f:18:c5:db:08:10:
         5d:e0:c4:39:3d:1a:95:46:9f:0e:e6:b4:f3:fe:13:11:c0:2c:
         2b:53:74:f8:ce:a5:a8:bb:fc:6c:09:aa:b7:01:93:93:d5:53:
         5c:87:91:aa:ca:42:0f:bf:71:4d:2a:dc:47:72:de:f8:40:02:
         e1:28:8f:ed:00:bd:bc:97:2e:2e:aa:30:16:e4:b1:5f:51:92:
         e5:7c:fb:4e:e6:c9:41:4d:e4:e3:ff:6c:ec:eb:08:ef:09:38:
         52:c3:9a:26:0d:64:b5:a4:2a:95:89:d6:1c:a8:b8:c1:ef:e2:
         67:ae:b6:14:d6:01:d6:60:66:f2:5c:96:0a:8f:8a:97:59:9b:
         de:0a:2f:f3:79:89:45:71:5d:bc:92:c4:a0:0f:2f:03:94:df:
         f0:0d:63:fd:4e:00:08:3f:78:fb:cc:67:fe:c1:06:5a:11:35:
         61:ab:db:8b:02:cc:cf:20:02:52:6f:d8:49:df:80:0a:b8:d5:
         ce:89:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:33 2025 by rpki-client