Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
File:                     pcJJ62-mtduvarnes6d3juDrNIc.mft (raw, json)
Hash identifier:          0S4da7301jsg0ngwL44qa+87D3dQgbOaMQ8YU8ZcpcU=
Subject key identifier:   78:8D:08:45:B5:A7:C1:5D:A3:77:BC:03:87:6C:A6:E1:EC:EE:CE:CF
Authority key identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
Certificate issuer:       /CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Certificate serial:       0194BD85900E10A538381C4E7046118AEB2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
Manifest number:          03C2
Signing time:             Fri 31 Jan 2025 18:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:34 +0000
Files and hashes:         1: iI8Orlzgb6VVuw4zGceAk4Y_gdo.roa (hash: xavQWQ+h3Wh68WfrJKGu7Ge405dFSg9FX+cO3lDgnEY=)
                          2: pcJJ62-mtduvarnes6d3juDrNIc.crl (hash: UEK+skI91+9lSkhvSGcp05oJxc7QBdZ/BDWxWHHcERQ=)
                          3: u9Sx8vquonuxfGSR4H7LLp3rbKI.roa (hash: 2NhtYGZCkznHHTIw/AAV97Orzomj5GZcOrYU4RhtX1Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:90:0e:10:a5:38:38:1c:4e:70:46:11:8a:eb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
        Validity
            Not Before: Jan 31 18:00:34 2025 GMT
            Not After : Feb  1 18:00:34 2025 GMT
        Subject: CN=788d0845b5a7c15da377bc03876ca6e1eceececf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:00:41:fa:c8:d3:a5:bc:e7:01:ef:b8:aa:
                    80:0a:8e:20:5e:bb:96:79:0c:fc:92:59:c3:ef:50:
                    9f:63:b6:63:71:39:75:85:e7:39:bd:8e:d0:a9:c0:
                    e1:77:5e:b4:24:02:7b:e5:03:ca:69:ab:c9:0f:c9:
                    e3:3a:56:24:6d:45:b0:ca:f3:09:de:39:1f:d4:0e:
                    8b:bd:c9:c0:3c:61:be:2f:e5:26:48:07:2e:c5:56:
                    ff:fe:42:a2:b0:51:82:bb:de:09:52:fe:b4:58:ef:
                    cd:fe:7c:95:ab:4d:07:3a:7a:e4:63:63:b7:f2:e4:
                    31:7a:2d:05:51:07:2e:6b:83:bc:7b:3b:98:07:35:
                    7a:f8:bc:2d:95:c0:4a:29:82:60:43:c8:48:49:a0:
                    d0:84:ce:9c:c3:f5:4c:94:4c:08:bd:16:d9:4c:20:
                    ab:0c:92:d4:d3:a2:5e:fb:49:0a:46:1b:b1:dd:7d:
                    c5:fb:f6:61:01:9b:7f:c1:7b:bd:e9:34:8c:81:97:
                    3d:11:61:f0:10:62:e5:0c:6d:66:18:44:2f:b2:8c:
                    17:9e:b6:50:d8:f5:f2:c0:59:82:1c:67:a2:df:fc:
                    cf:c0:30:9c:21:6c:a2:e8:e8:b4:44:20:4f:ff:2b:
                    65:27:77:a9:f7:75:fb:1c:a7:1d:e2:0f:52:c9:03:
                    5a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8D:08:45:B5:A7:C1:5D:A3:77:BC:03:87:6C:A6:E1:EC:EE:CE:CF
            X509v3 Authority Key Identifier:
                keyid:A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6e:0c:f0:33:8c:be:8a:26:bd:60:12:47:9a:a6:cc:8a:66:
         19:e9:a6:bb:1f:53:a1:4a:20:c3:b6:55:00:b0:73:9c:4f:a5:
         cc:b2:78:6e:ae:b5:ff:4d:b5:bc:a0:d5:c2:ee:7c:28:2e:41:
         86:7d:a2:49:7a:50:91:0f:25:12:cb:cb:92:0b:92:bc:15:67:
         08:10:09:94:1d:94:dc:0c:7d:c9:1c:19:a4:ce:78:60:c9:12:
         59:f9:09:d9:69:91:4a:59:9c:a4:82:17:29:11:e6:5b:3f:ae:
         e3:e6:4c:64:57:4d:f3:a1:01:72:9b:af:44:61:d2:6e:b2:a4:
         97:c6:7c:6f:1f:8a:58:6a:af:cf:43:bb:e8:c4:50:72:ea:b3:
         2c:85:00:34:1c:29:2a:e3:05:3a:14:99:ef:b8:e5:99:8b:e3:
         f4:c2:45:8a:13:c0:16:66:65:e6:da:4f:fc:af:4e:53:bd:be:
         71:39:e3:ef:81:d0:23:cd:b8:80:41:a3:8b:ca:70:96:9b:a7:
         22:79:56:6a:e2:bf:2f:9e:66:68:e5:aa:b3:07:b1:93:db:82:
         63:78:6c:a6:32:d3:c2:29:0d:02:55:e5:97:8d:90:1d:08:6d:
         b6:cf:1d:8e:02:2a:75:5d:04:1c:1b:78:54:c2:d6:d4:73:2f:
         9a:a6:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:19 2025 by rpki-client