Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
File:                     MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft (raw, json)
Hash identifier:          8Nrhrj8KN6mrOAH4V718CiRQoQaXhpj+tcms6A2K6LI=
Subject key identifier:   98:17:A6:50:62:31:4C:0F:02:C2:7A:F0:D8:30:AB:AF:B0:CA:5F:5E
Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
Certificate issuer:       /CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Certificate serial:       0194BCA9A1A10AD7E9D752538A438D7F135F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
Manifest number:          0ACE
Signing time:             Fri 31 Jan 2025 14:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:20 +0000
Files and hashes:         1: 8epfI_mMakP3Lc2UTESKvosKkSQ.roa (hash: TdgdgIhwNAm+SCbAnoUIw15ZVzHOK/dqP386QKWeMpw=)
                          2: MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl (hash: 4Ng3ANhAikUKu3WjUb8LSh2nMeaIiBsek0o0LywIN5s=)
                          3: QGmT3Sq2OPr697a4jgYrgI5vyvo.roa (hash: cuVDNdIzZEyCh+DXAd1wDhu2rpRcNesepLeBXruUFrc=)
                          4: wrK5q_yhp6CSYsOOeb2tBzjXlME.roa (hash: GpJJNVkvPjxKFXFwN00ofjrbHt5+9rV8i+MDqv4Rs8s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:a1:a1:0a:d7:e9:d7:52:53:8a:43:8d:7f:13:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0
        Validity
            Not Before: Jan 31 14:00:20 2025 GMT
            Not After : Feb  1 14:00:20 2025 GMT
        Subject: CN=9817a65062314c0f02c27af0d830abafb0ca5f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:5c:82:50:fb:2c:39:e2:72:aa:91:8d:cb:
                    e1:be:c2:79:d1:5e:59:c9:b9:c9:c7:91:23:43:12:
                    14:39:34:b0:94:5b:b0:81:1a:a7:fc:d4:01:a3:df:
                    44:1f:55:cd:95:12:98:39:41:c9:f2:aa:29:34:d3:
                    f0:85:f5:8a:0e:76:e2:f7:9c:7e:c6:9d:c2:ab:d1:
                    ea:9c:34:da:e6:de:40:ed:23:84:e4:d6:0c:20:c0:
                    41:dd:40:f5:32:92:7a:87:56:9a:02:3d:d9:e6:44:
                    27:0d:a0:f1:d8:7c:f1:f9:e9:65:f1:b9:df:5a:71:
                    22:8a:05:26:d3:72:92:51:28:4b:5c:78:6d:83:c7:
                    b3:93:73:43:82:ea:2b:f2:52:9c:59:eb:52:8f:c5:
                    f2:dd:10:ae:98:62:a0:90:2d:76:5c:04:2f:5c:d4:
                    32:ec:a0:8c:a8:d1:20:ff:e2:6e:f0:8e:0e:0b:41:
                    5a:e3:a8:6a:6d:4d:bb:86:a1:fe:85:76:23:4f:f3:
                    03:17:2e:6c:ba:15:5e:29:ab:67:c5:8c:7c:df:6a:
                    0c:37:4f:2d:6d:39:73:28:e1:d3:e0:1c:8c:ca:3c:
                    25:04:eb:0b:54:19:58:7a:e3:e0:43:bb:97:38:ef:
                    f0:e2:48:c3:27:a1:6f:99:35:d2:13:fe:5e:0d:f3:
                    5a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:17:A6:50:62:31:4C:0F:02:C2:7A:F0:D8:30:AB:AF:B0:CA:5F:5E
            X509v3 Authority Key Identifier:
                keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:02:48:d6:5f:d8:20:3d:97:ee:9c:5f:69:28:78:ca:19:26:
         88:ae:1d:01:13:95:f0:fc:c6:16:1d:b2:b1:2e:27:c0:24:91:
         3e:d4:40:5a:34:6b:60:c1:e2:23:b1:e0:a3:fa:7d:56:a1:da:
         3a:86:94:bf:d9:de:8c:56:e9:b3:df:53:2a:a1:0b:c6:e7:a1:
         66:0a:6d:29:f4:73:57:fa:18:d3:88:78:56:5c:64:97:77:4e:
         a2:4c:f0:ba:60:ad:f9:a1:67:ca:9c:0d:ca:3a:97:74:cc:f0:
         c0:64:5e:1d:31:06:f1:33:af:1b:41:93:2e:4f:e3:b5:72:a1:
         fc:e5:de:12:dd:c5:30:06:2a:91:ab:25:76:92:83:7a:15:c0:
         d1:86:ec:39:ff:ac:3d:ea:87:67:0f:48:e1:63:1c:b0:bd:c9:
         f7:b9:3a:45:e8:ee:e6:45:6b:37:88:b0:7b:60:0e:8e:d0:3b:
         f4:f9:07:ae:c4:28:ee:db:01:1f:52:de:43:ad:5b:dd:16:63:
         05:ac:79:f8:4a:c8:8f:1b:bc:97:ef:34:00:fc:61:69:52:b1:
         31:b3:d7:d6:30:b2:ad:54:63:ff:a0:1b:99:84:92:ef:80:10:
         ba:ac:7a:a5:86:3c:ed:f9:45:a7:81:cc:53:1d:ec:d8:1c:c2:
         c3:52:cc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:58 2025 by rpki-client