Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
File:                     RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json)
Hash identifier:          SdEYVZu644lDyaRAMu46q1zxn2LB3aT6uxJYv6M1wlM=
Subject key identifier:   FC:97:E5:5F:BD:5A:AA:FC:AB:9F:DD:CB:7E:08:65:51:0A:80:83:A6
Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
Certificate issuer:       /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Certificate serial:       0194BD85A29507565942C90DB8DFDDF3BCD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
Manifest number:          01E4
Signing time:             Fri 31 Jan 2025 18:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:39 +0000
Files and hashes:         1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: L3zD0NAiBIa1OkJ+X2QwthRS2iILayZN2k5xhZ3cCcs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:a2:95:07:56:59:42:c9:0d:b8:df:dd:f3:bc:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
        Validity
            Not Before: Jan 31 18:00:39 2025 GMT
            Not After : Feb  1 18:00:39 2025 GMT
        Subject: CN=fc97e55fbd5aaafcab9fddcb7e0865510a8083a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e0:9e:26:f6:f5:d6:38:72:2b:c8:29:20:95:
                    64:be:84:d5:27:ef:32:c8:d5:3a:15:52:a2:6a:fe:
                    50:f7:c4:6b:09:60:81:fe:ef:c1:28:55:4a:c8:ef:
                    b3:85:71:41:30:09:b4:f4:dd:eb:d4:76:04:bc:7a:
                    08:5a:25:b1:6f:5e:d3:78:40:11:6d:2f:96:9b:13:
                    54:fc:e6:f1:0e:86:61:2c:16:f8:a5:6f:c8:24:b1:
                    9a:cb:6c:b3:80:b6:19:9a:a5:8b:36:5d:41:5b:82:
                    ea:a3:34:7a:00:fb:e4:58:ff:19:69:69:b6:43:c0:
                    6a:23:eb:4a:98:1e:c0:98:2b:b5:60:aa:59:a0:76:
                    99:55:76:80:33:7b:d7:14:c5:7a:bd:20:7c:5b:70:
                    a2:4c:ef:cb:71:0a:e5:a1:3c:9d:d4:96:36:20:1e:
                    2d:9d:95:7f:0f:79:6d:fb:40:ac:b4:bf:ae:ca:98:
                    92:df:f1:85:f2:d7:ba:cd:0f:ce:15:ab:42:21:76:
                    93:90:9b:71:fc:9e:6b:12:1f:90:6d:80:74:b3:c6:
                    0c:08:04:68:0e:2e:5e:aa:aa:0c:28:2f:18:9b:95:
                    45:c8:6c:78:af:74:fd:75:6b:c4:aa:09:09:45:a8:
                    23:50:73:a7:33:93:5a:f2:78:88:0b:b8:d8:ad:6c:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:97:E5:5F:BD:5A:AA:FC:AB:9F:DD:CB:7E:08:65:51:0A:80:83:A6
            X509v3 Authority Key Identifier:
                keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:31:6b:3c:82:25:68:ad:27:be:ee:5a:ab:c9:9d:07:e7:5c:
         87:49:66:0d:1d:d9:46:79:66:e3:41:ad:cd:15:c5:f8:d3:c0:
         db:b2:ce:94:67:ff:0c:a4:b8:97:5a:5c:04:12:87:9b:6b:b7:
         4e:7d:21:0d:c3:d6:ff:11:9a:cd:a9:12:d7:d7:5b:f3:2b:64:
         c2:74:0c:92:62:f2:ab:c1:e0:7c:e9:fa:60:80:1c:5a:01:3b:
         6b:7a:44:5d:09:fe:35:e7:95:ee:d6:7f:58:84:9a:5e:99:cb:
         2b:e7:42:4c:f6:d8:d3:9e:94:33:57:a0:07:5a:9f:cf:a2:70:
         ac:67:72:4f:99:99:c6:c1:50:c2:c3:a5:b3:59:9b:5c:34:14:
         9d:e5:6a:18:23:61:55:32:2e:68:d3:38:ec:73:e5:18:b5:24:
         96:37:09:40:72:d2:1d:e9:57:07:3b:98:c8:e1:8a:32:61:bd:
         27:fd:b5:0c:c4:61:3d:26:d2:de:fb:9c:65:85:b3:18:07:97:
         42:4c:b9:08:71:d2:25:f0:5e:6b:58:2d:bf:d8:cc:b0:66:c2:
         b5:cc:95:7b:1b:45:d4:3c:25:cf:fe:fa:9e:e3:a9:ca:53:8d:
         32:77:61:e0:fc:44:99:7f:fa:60:37:d0:22:53:b5:9b:07:48:
         15:ba:ab:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:07 2025 by rpki-client