Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
File:                     FycuwT2kL1s2HxB0xnUcw1RZPn8.mft (raw, json)
Hash identifier:          PQMDTmz1LZhnU5+WKDWOaoRVIMNm0KaFsOSDpcLwpII=
Subject key identifier:   54:4A:16:96:91:2C:0E:26:C7:76:A7:A8:7B:76:57:7C:92:10:06:B5
Authority key identifier: 17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
Certificate issuer:       /CN=17272ec13da42f5b361f1074c6751cc354593e7f
Certificate serial:       0194BCAA13915058BC14072436EC937E1722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
Manifest number:          1321
Signing time:             Fri 31 Jan 2025 14:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:50 +0000
Files and hashes:         1: FycuwT2kL1s2HxB0xnUcw1RZPn8.crl (hash: YQTAP3Hd1n/8yTUHfuVKGJKOQL87u7Cfr53bPnoOWuU=)
                          2: hni5Zm6l0tWgRkMPSWNQcz9bJXs.roa (hash: 5m+4OOvVIAL5ATC+IriCV/aH5fa2JcS0703gOVQtJWE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:13:91:50:58:bc:14:07:24:36:ec:93:7e:17:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17272ec13da42f5b361f1074c6751cc354593e7f
        Validity
            Not Before: Jan 31 14:00:50 2025 GMT
            Not After : Feb  1 14:00:50 2025 GMT
        Subject: CN=544a1696912c0e26c776a7a87b76577c921006b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:18:a7:f6:3e:5a:c3:0d:b8:e4:66:05:06:
                    1c:a9:83:7a:6c:71:c0:99:2a:cb:33:a7:71:c6:73:
                    79:4b:7f:15:f3:cb:35:16:53:ca:47:34:8a:21:80:
                    2f:73:62:5d:86:1d:af:6a:2c:65:79:2a:2a:34:d5:
                    bf:50:fb:ff:5f:33:e4:1a:61:c8:ef:46:9c:7a:8c:
                    98:ce:8e:9f:ba:b7:64:a1:59:b8:98:02:76:8d:cf:
                    9f:13:7b:0a:cb:08:50:6c:69:1d:8b:16:78:8e:c9:
                    d7:4d:ff:3d:1a:5b:89:d0:02:6d:b3:a7:8f:2b:18:
                    4a:30:a0:9a:05:d7:ae:27:22:c2:ff:4b:1a:af:79:
                    31:8e:b4:7a:ad:fa:b7:69:54:5b:33:ea:82:c6:3b:
                    c9:0f:a3:6d:27:7f:12:5b:2d:18:61:82:4b:17:bc:
                    1d:75:9b:22:3b:b4:ac:38:c9:18:c5:68:29:40:75:
                    c3:c9:06:26:f5:8a:dc:32:9d:68:9f:8f:9d:96:b8:
                    74:11:30:b7:15:fc:8d:b5:87:1f:de:87:97:b9:04:
                    88:29:c6:2a:8d:d7:0d:7f:c8:91:46:53:d6:02:40:
                    77:d2:b8:14:f1:d2:76:32:fc:be:e8:53:c3:e7:de:
                    dc:2b:5c:6d:4e:65:f4:55:01:6e:3f:21:af:43:1d:
                    30:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4A:16:96:91:2C:0E:26:C7:76:A7:A8:7B:76:57:7C:92:10:06:B5
            X509v3 Authority Key Identifier:
                keyid:17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:3f:a0:a0:33:e7:39:0a:47:da:37:37:f5:f2:ac:92:ae:9a:
         b4:dd:40:d0:35:20:9c:5f:9a:38:76:d6:99:8b:01:59:58:c1:
         04:77:d8:1b:fd:61:12:37:8d:9b:2b:6f:49:c4:7f:26:ab:83:
         b2:53:84:c1:4f:21:c3:cd:39:4e:f5:78:12:ee:b8:93:ac:14:
         d2:a2:79:bf:64:23:2f:6e:db:8d:66:a7:5a:7c:ca:ef:d6:6c:
         c8:9c:9e:ff:df:0f:6b:66:9c:e2:2a:3a:d2:bb:fe:96:97:8c:
         05:d9:eb:36:55:fc:94:8d:ad:cd:f0:94:8a:3f:79:86:18:75:
         7a:cf:9f:69:3d:da:f9:62:f9:a3:fe:58:fa:53:64:b1:77:03:
         53:bd:e7:09:b1:0e:de:94:4e:40:e7:1b:2c:c7:a1:46:a8:23:
         42:c7:c0:2d:55:a4:92:bb:5d:de:8c:2a:75:69:2c:c4:fa:a2:
         dd:d0:83:7f:07:02:43:b5:f9:ca:3f:ef:64:b3:41:dd:24:11:
         ef:39:b0:c9:37:34:0b:57:73:72:d6:e9:a2:ff:19:04:7d:40:
         85:77:fd:96:d5:8e:98:80:89:14:93:b3:1e:e2:d1:c3:51:86:
         23:de:a8:ea:e9:f3:66:a3:21:34:4d:bc:be:9e:a8:a1:a4:89:
         70:0c:ad:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:26 2025 by rpki-client