Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
File:                     1BsIHA35lAorAgpOvoqXScv-rVU.mft (raw, json)
Hash identifier:          LAG9P8g1b0P9OS38pHMipieDDySRKDqUjN0TBitjzcw=
Subject key identifier:   22:D3:2A:3B:38:F9:E6:4A:E0:D8:5B:56:99:BC:91:B2:8D:34:C8:FD
Authority key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Certificate issuer:       /CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Certificate serial:       0194BD85922603C416F2F099CB038EA33F0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
Manifest number:          C4
Signing time:             Fri 31 Jan 2025 18:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:34 +0000
Files and hashes:         1: 1BsIHA35lAorAgpOvoqXScv-rVU.crl (hash: MqXxcJmCSqOnSg/J+/JAFirUYie66SFCGm0dA0ZiTjQ=)
                          2: jj4Fs6tF4xq0DkAC9XMLg7s4mmw.roa (hash: sivrAn80+5m3Ncmw+RXEZVkYOB9TZa2z37JwsZzW78E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:92:26:03:c4:16:f2:f0:99:cb:03:8e:a3:3f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
        Validity
            Not Before: Jan 31 18:00:34 2025 GMT
            Not After : Feb  1 18:00:34 2025 GMT
        Subject: CN=22d32a3b38f9e64ae0d85b5699bc91b28d34c8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:39:4e:8a:1e:b2:bb:3c:cb:58:33:06:33:f2:
                    18:68:96:3e:67:ac:79:09:6d:73:4d:bf:10:36:4d:
                    81:8c:03:6c:df:28:2d:0e:19:c8:b5:99:f4:eb:52:
                    5b:3d:b7:4a:0c:56:4b:ce:4a:8e:1c:6a:7f:37:eb:
                    c6:59:1d:5d:bd:a3:34:25:61:fd:bb:9e:62:15:d9:
                    8d:e2:60:15:b2:65:2b:79:bc:2c:9a:94:27:ab:ed:
                    80:8d:73:18:7f:2b:13:7c:aa:52:74:66:84:40:81:
                    fa:8a:b4:c0:d3:bb:cf:e6:79:15:0b:db:5e:d6:02:
                    cc:4e:0b:f4:ce:21:a0:a8:64:8f:11:8f:52:99:e4:
                    36:22:45:20:21:eb:88:07:51:7d:d1:3a:c6:16:a2:
                    2c:08:01:b0:38:3f:8b:dc:75:f8:a5:17:86:de:09:
                    a7:96:cb:fb:cd:81:a6:d6:ab:db:d7:a6:3a:c1:bd:
                    77:4e:63:37:4e:43:af:77:d2:aa:80:f3:16:74:fc:
                    be:7f:ef:d3:cb:2b:7e:a1:3c:ab:8a:b2:4f:96:03:
                    e2:a8:c5:49:79:c6:90:d4:2f:84:fb:6a:33:15:52:
                    74:2e:f6:c5:83:b4:d2:04:cc:16:57:22:71:86:c9:
                    f9:46:0c:c2:6f:aa:75:19:48:94:6e:f5:47:00:1c:
                    dd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D3:2A:3B:38:F9:E6:4A:E0:D8:5B:56:99:BC:91:B2:8D:34:C8:FD
            X509v3 Authority Key Identifier:
                keyid:D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:63:2f:a8:61:08:a6:5d:dd:b6:14:7c:97:66:62:9a:73:d9:
         92:7f:c5:0f:e5:ad:76:2b:ca:7c:df:c5:0e:4f:09:d2:7a:2c:
         81:e0:df:4e:cb:2b:a3:7f:ae:e0:6b:8c:2c:85:3e:ef:37:97:
         29:e4:1c:31:88:1a:ee:07:cb:90:15:c6:b1:f0:6c:5b:0d:c9:
         d7:78:ca:10:cd:13:8a:a2:b8:48:71:04:87:6b:ab:64:e4:a9:
         77:c3:5a:2e:0a:fa:8a:fb:11:2b:f4:70:43:9b:6c:e7:bd:fe:
         a6:cf:b6:35:8d:a3:bc:15:ba:2e:f9:43:e9:68:12:f3:bf:bd:
         d0:7f:89:2f:aa:b8:e3:99:dc:7b:4d:49:fe:96:39:0a:4e:68:
         59:3a:39:91:94:9b:c4:fa:ab:f6:36:bf:d8:0c:b6:49:69:ad:
         d9:3b:7b:c9:1a:f9:ec:76:93:70:e7:7d:9b:93:4b:6d:c8:a8:
         93:2d:b1:50:ec:3f:06:1e:f2:49:23:ac:0b:ca:e6:4c:3d:43:
         b3:2b:f3:bb:f7:63:e1:9c:47:aa:b3:af:6b:8a:96:cb:87:9b:
         72:b9:b2:a1:72:c6:47:51:c4:f3:77:6f:c5:36:87:54:9d:b5:
         dd:3e:e3:a8:8a:1e:7a:d1:28:3e:30:f1:0f:05:f7:e8:4d:d8:
         3f:2f:df:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:03:03 2025 by rpki-client