Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
File:                     M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json)
Hash identifier:          qviII/OPbypRbJk6S/OBVKUxhrmNxPHbruDWKRzV4mQ=
Subject key identifier:   EF:1B:0D:7C:E5:19:1B:E8:32:BC:C7:A1:FA:FC:E8:9A:A5:3F:D6:BB
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Certificate issuer:       /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial:       0194BD4E94D6EE0B156FD670171C7B930E93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
Manifest number:          0CC8
Signing time:             Fri 31 Jan 2025 17:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:31 +0000
Files and hashes:         1: 1-f1gUau53_sy3TW5P4gG3FwDhSk.roa (hash: pHF5PYgAc9CB+XpxL2l9y3N2Zu2yiqeSaK0EFUgqKco=)
                          2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: Ew2AP78KfBRpKXb4lXr39W3IObMy8/PKxUSqkXKDsm0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:94:d6:ee:0b:15:6f:d6:70:17:1c:7b:93:0e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
        Validity
            Not Before: Jan 31 17:00:31 2025 GMT
            Not After : Feb  1 17:00:31 2025 GMT
        Subject: CN=ef1b0d7ce5191be832bcc7a1fafce89aa53fd6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5f:0d:ab:63:99:53:3d:1d:e9:7a:14:ad:2c:
                    e9:df:b6:46:e4:88:c2:07:81:a2:ca:46:25:55:89:
                    8a:13:38:68:fd:65:9e:52:6d:9a:e7:f8:e5:03:f6:
                    90:64:47:58:3e:36:3f:55:94:bb:41:64:bc:fb:4b:
                    60:0d:3a:d1:4c:05:b7:79:17:7b:20:ce:07:c1:ea:
                    bc:e2:7a:14:c6:f9:68:3b:05:2c:f8:5c:87:5d:9b:
                    a4:9d:14:6a:58:20:58:da:ce:b6:19:d7:80:81:ac:
                    21:4b:b6:19:89:5d:db:67:c8:d5:4a:f1:bf:f2:4d:
                    88:21:57:d7:fd:dd:60:eb:86:81:57:c1:dd:95:b2:
                    71:7a:ba:6e:78:4c:fc:bc:73:13:e9:a2:7f:90:0a:
                    87:70:be:14:15:83:7b:e8:88:bc:26:53:89:d6:9a:
                    9d:65:2c:45:02:8f:7c:65:91:db:c5:54:14:d0:3f:
                    8c:15:7e:bd:d5:66:86:5e:8b:b7:41:6f:3b:36:08:
                    b6:55:05:69:b5:5d:b0:67:ed:bb:64:6c:36:06:cf:
                    97:14:47:a1:19:f3:8d:6f:e7:8d:42:c5:fb:ca:a7:
                    b2:2a:88:cf:b1:3f:8d:be:f5:2c:d3:e2:a0:d6:18:
                    b1:5f:dc:b5:5e:d2:e4:90:d6:3d:f2:9b:99:d4:87:
                    f9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1B:0D:7C:E5:19:1B:E8:32:BC:C7:A1:FA:FC:E8:9A:A5:3F:D6:BB
            X509v3 Authority Key Identifier:
                keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:26:c7:02:81:04:36:0f:f7:ce:81:91:73:af:25:a9:33:30:
         11:ab:38:27:35:9d:3f:d0:d4:dc:7f:7c:2b:dc:2b:a2:4d:c6:
         67:3f:28:5d:95:4a:1b:91:65:f6:da:b3:dc:e5:f9:e3:e4:9f:
         03:5a:80:9e:45:a5:b8:45:5a:a5:8f:4f:6e:56:18:8f:32:65:
         7d:e1:14:d1:19:62:aa:fd:14:c2:3b:51:a7:55:f1:53:35:0f:
         57:b1:5a:24:d1:8b:04:ff:5a:09:7d:91:05:45:49:78:58:29:
         15:c3:7d:9e:53:0f:c4:57:8d:93:cf:ba:9d:b4:56:d2:06:a6:
         81:bd:91:95:21:56:5f:95:b5:db:9c:ed:b7:b6:3f:f0:48:50:
         ab:b3:14:f7:f8:1d:5a:84:04:43:2f:dc:b2:6f:75:1b:d6:25:
         6b:87:38:b0:53:25:21:38:44:6f:81:4c:c1:69:be:df:06:eb:
         09:9b:1b:b8:7f:6f:7c:a2:3a:66:68:45:34:18:1f:f2:42:65:
         48:f2:15:b0:4a:03:dd:f7:d4:cf:26:3d:74:95:56:80:1f:22:
         6a:95:b8:7c:f2:cb:31:95:b8:9c:5d:50:8a:3f:86:ef:7b:ab:
         0f:46:76:6e:17:fd:fa:c3:08:c9:94:08:57:c9:32:b7:97:fc:
         39:5f:9c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:24 2025 by rpki-client