Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
File:                     X6e2rvC9JBEwTk88aVfILrJWfNM.mft (raw, json)
Hash identifier:          j9Iw56cc4PKOEQ69YuKMq7+sYsQcVO9UuFG56k6xvZo=
Subject key identifier:   19:4F:78:C8:8F:7B:68:6C:39:B6:E1:19:FE:57:E2:8D:26:1C:39:09
Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
Certificate issuer:       /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Certificate serial:       0194BBCE708F341BFAFF04E25807D343201B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
Manifest number:          0850
Signing time:             Fri 31 Jan 2025 10:00:56 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:56 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:56 +0000
Files and hashes:         1: X6e2rvC9JBEwTk88aVfILrJWfNM.crl (hash: 18ZCw3xfQShXiTo3v5jpNS8ZmOuLUQt/fPVHBZEklaI=)
                          2: zbAgIhB9UBueLLgs2g8PDDqXLXM.roa (hash: Zu8ptrGKP7ppJOnD5tDff+kFIkcbbAr6zSQsVh6Ogok=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:70:8f:34:1b:fa:ff:04:e2:58:07:d3:43:20:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
        Validity
            Not Before: Jan 31 10:00:56 2025 GMT
            Not After : Feb  1 10:00:56 2025 GMT
        Subject: CN=194f78c88f7b686c39b6e119fe57e28d261c3909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d6:df:5f:2e:1a:1d:cc:8c:b8:4d:98:54:db:
                    ea:be:da:7c:d0:e9:77:cf:dc:b3:ea:f2:1d:b6:83:
                    f0:26:62:80:b4:71:2f:8e:d9:b8:27:ad:78:cc:27:
                    5a:d5:44:cb:89:dd:fe:31:ce:55:41:1c:d1:ba:57:
                    d7:5d:59:90:81:90:7c:a0:cd:dc:00:ee:b7:99:7b:
                    46:82:97:4f:56:ea:c9:0c:38:9d:64:bb:51:5d:cf:
                    32:7e:f8:06:61:c7:7a:5e:6e:6e:79:fa:5a:a7:80:
                    79:dd:03:7b:9b:d8:0a:9e:ad:c7:58:c1:c1:69:1f:
                    b9:4d:7f:a2:19:af:a4:3c:f8:26:25:1d:c6:18:d2:
                    9b:77:d2:35:58:12:47:80:5b:f0:28:43:96:32:2a:
                    78:08:69:a3:02:01:41:8b:b4:ed:60:12:f6:64:43:
                    bc:b5:37:dd:d8:81:ab:33:d4:7d:1d:f8:18:92:c1:
                    16:62:0e:b3:21:4f:d9:95:e2:ba:3c:a5:f4:19:0e:
                    37:a9:0f:c6:ae:93:8f:a7:44:bd:d0:4d:51:cc:e3:
                    b9:33:dd:97:41:62:02:24:7c:bc:30:cf:e2:35:50:
                    ff:9b:6a:4d:bb:a1:a3:30:e9:b7:9f:9f:8a:2c:de:
                    45:78:c4:70:4e:ca:ad:9b:21:1d:a1:18:10:f5:0e:
                    10:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4F:78:C8:8F:7B:68:6C:39:B6:E1:19:FE:57:E2:8D:26:1C:39:09
            X509v3 Authority Key Identifier:
                keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d8:f6:db:d3:9e:9c:0a:02:2b:bd:76:76:24:07:69:ac:cc:
         26:9d:c3:36:87:03:30:01:3f:76:40:e4:79:74:6c:0d:7e:69:
         df:83:76:ff:ff:a6:7f:47:bb:01:12:95:44:96:61:f4:2f:47:
         37:49:12:c7:08:97:24:96:e6:b9:1f:e7:5c:e4:13:b2:70:c5:
         f3:05:dc:0e:74:22:83:fa:e0:df:8e:dc:8e:a5:c0:89:e9:ec:
         55:3b:23:2c:2f:32:30:6f:17:c6:a4:e9:0b:2c:f3:24:e4:e0:
         d8:a5:23:d4:fc:00:bc:37:29:2c:e1:62:a3:3b:a0:81:1a:27:
         0a:96:21:4c:e3:25:d4:7b:48:d3:d3:15:be:f7:60:5c:68:d9:
         bc:de:02:3e:0d:a0:21:41:6b:0c:6b:08:f2:c6:e7:db:bb:c1:
         b7:08:e2:66:1a:70:cd:a1:3c:f1:e1:fa:14:aa:af:b6:2a:76:
         52:18:f3:29:9d:b0:14:e3:88:e3:c2:e9:00:95:f0:a3:a1:6b:
         49:49:2c:7c:07:7a:74:59:bf:7b:70:4e:60:8e:96:e9:3c:1b:
         6e:75:e4:48:f3:67:3c:6a:77:76:fa:c9:0f:70:74:94:e6:e6:
         1d:40:7a:24:8b:16:91:1b:d1:3c:d9:ac:c1:7d:43:c3:8c:ff:
         9f:27:11:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:39:08 2025 by rpki-client