Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
File:                     1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft (raw, json)
Hash identifier:          qAB8nyRA03BOLFCpO9v1EKM6mKxQI0bM5wi24xWYVOE=
Subject key identifier:   0F:5B:8E:CC:3D:AC:21:34:B4:46:61:2E:AE:43:0A:B8:3B:8C:F4:A7
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Certificate issuer:       /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial:       0194BC72C1DA2F0938F57087CF2C0827C2FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
Manifest number:          1456
Signing time:             Fri 31 Jan 2025 13:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:24 +0000
Files and hashes:         1: 1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl (hash: DpZCUilszxSMiiOoZwGS+AwAP+kX24YCEu7XpT4+Q5s=)
                          2: 1ZZeKP6zifRveU5BXtqbVQOUTio.roa (hash: kevO7xVkWW6qLIF6W52RYdReyLebybd5sum2JIJBywU=)
                          3: EYydWYT52AseBx7Jyj7IOF-OzmA.roa (hash: GK6vk4anX7z/I8eBH+vrNfeD1sOFhaY4rFH4DXjiXHk=)
                          4: b9Swgbyi8aTH1O0OC-2I7fXvGdg.roa (hash: 8RdzEqBVWL+eVL3upz2RyziKuXk4zkc2m9Hr+J95JO0=)
                          5: dyWZ1snIdkm7MzI4bl5TDSV-wlw.roa (hash: c5Q5HYNXnXOXbjKeML4h1NiOwHlTy2XijhCu+thdxhI=)
                          6: qwfpbZbB9H4pmnOq-s2i5gsgcuE.roa (hash: VAaj3/8cDKMwIIG2eTZYgcjnyyPg52qaqO6aqeN1eEc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:c1:da:2f:09:38:f5:70:87:cf:2c:08:27:c2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
        Validity
            Not Before: Jan 31 13:00:24 2025 GMT
            Not After : Feb  1 13:00:24 2025 GMT
        Subject: CN=0f5b8ecc3dac2134b446612eae430ab83b8cf4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:61:a1:04:7e:cc:ba:a6:59:30:04:4c:e9:
                    7f:29:4f:5c:ef:27:d3:23:f2:69:e2:65:41:0d:27:
                    a3:ac:5c:f2:8a:57:e7:a8:37:a1:f0:4f:ba:83:ff:
                    d3:82:67:cc:48:0c:63:ff:23:72:c6:f8:6a:37:89:
                    8a:04:30:44:df:3f:70:2d:52:21:f5:0e:af:e2:dc:
                    8e:06:1c:0f:01:0f:97:e9:b9:ff:be:be:19:a3:4d:
                    d1:b7:e7:29:9b:ba:ad:a1:c9:47:a8:a7:6f:9f:03:
                    f6:ed:0c:dc:f2:08:5f:ff:36:9d:f6:14:1e:a0:2e:
                    3f:6f:92:39:a0:bf:28:8e:16:54:5c:38:2b:4f:54:
                    5c:02:f4:e5:b0:85:a1:37:3c:50:fc:9a:dc:ef:eb:
                    82:59:66:2d:98:83:96:fb:6e:a6:1e:f8:c7:7e:84:
                    83:a7:e2:78:b6:b4:65:d9:b7:b2:f1:0f:09:30:ad:
                    8c:6a:99:6a:5b:e8:c0:82:05:cd:69:7a:35:79:65:
                    e2:9f:e2:42:46:af:6b:38:72:c7:cc:7f:97:19:b2:
                    1c:f5:d9:bb:0f:a7:a8:31:05:18:d9:79:9e:37:98:
                    c2:fe:b8:82:e5:60:9a:53:cd:78:cb:fd:fe:b2:82:
                    fa:7a:10:68:d7:be:ee:ec:2e:48:0a:ee:f9:ae:cd:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5B:8E:CC:3D:AC:21:34:B4:46:61:2E:AE:43:0A:B8:3B:8C:F4:A7
            X509v3 Authority Key Identifier:
                keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:54:4d:6d:d0:93:e1:ec:72:3d:a7:10:28:49:ba:b6:57:14:
         28:da:0f:62:90:25:a6:6e:be:ba:73:ca:c3:be:d6:1c:c9:f0:
         db:cc:00:91:3e:04:12:7b:8e:59:bb:d0:1c:48:e5:9b:12:49:
         8d:2c:f0:71:51:83:9e:c0:e4:27:64:d9:d7:7a:22:47:53:7c:
         6e:7b:fb:c6:a5:f2:ea:8c:39:d0:a0:89:cc:d2:0d:c9:63:9b:
         a8:dd:ea:d4:02:14:09:20:a4:9f:c6:fe:e6:cc:a8:9b:97:0c:
         b2:91:ca:e8:f9:ec:8c:6b:44:0c:a5:40:28:09:96:65:54:11:
         28:84:f3:cf:96:95:c5:b4:4b:c1:ff:ee:28:c8:8b:80:7c:4a:
         73:90:e9:5a:57:75:c6:d1:eb:86:f1:b0:9c:4c:ce:aa:db:20:
         41:5d:9d:bd:1e:e3:d5:90:12:82:6d:62:cb:01:87:45:3b:f3:
         cb:d7:7f:6d:9e:88:63:8a:1e:20:c9:96:10:27:72:89:b0:fc:
         99:b8:dc:67:89:79:59:c7:f0:2f:25:5b:f2:69:6f:6c:53:fc:
         1e:9e:ad:ba:6b:73:4e:e2:53:a7:7e:a4:63:21:7d:46:be:18:
         60:4c:51:40:c3:a2:db:95:44:77:94:39:08:23:a0:51:99:95:
         d1:a2:20:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:26 2025 by rpki-client