Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
File:                     oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft (raw, json)
Hash identifier:          wxOMOiNEeFEIBjA8K7GkXKBEn0cU0zPYOPOXAZzSfZg=
Subject key identifier:   E7:65:7F:99:09:64:C5:BC:5D:CC:95:A8:BE:F5:A4:B4:70:60:8F:DE
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Certificate issuer:       /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial:       0194BC05125359135D04711E810FD396B521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft
Manifest number:          1164
Signing time:             Fri 31 Jan 2025 11:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:36 +0000
Files and hashes:         1: EZbYUKlbHnDupSiI6vHg0ScrIQc.roa (hash: yrslRTQqqMutFqrXn7kHXajy2V9WRPNQRVUgaXrJw9E=)
                          2: oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl (hash: ORUjuk1ubQ+y7RAqqp1hWSk3T3WBbXg2P3JT/V8rW9I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:12:53:59:13:5d:04:71:1e:81:0f:d3:96:b5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
        Validity
            Not Before: Jan 31 11:00:36 2025 GMT
            Not After : Feb  1 11:00:36 2025 GMT
        Subject: CN=e7657f990964c5bc5dcc95a8bef5a4b470608fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:13:dc:11:0e:64:a6:ac:c1:95:3e:0a:7a:
                    69:ed:21:04:04:1e:f9:b2:af:27:6d:06:49:fe:81:
                    7c:31:4b:2f:c3:dc:fc:f9:4a:a2:b2:6d:9a:86:f0:
                    48:69:d8:71:b1:ff:f7:f5:e9:fd:21:9a:bf:08:b3:
                    73:da:50:49:ad:8b:ad:80:0f:64:61:8d:dc:08:ed:
                    9c:01:86:92:8a:f4:8a:aa:be:ca:78:8f:01:8f:71:
                    e2:dd:39:96:21:77:d0:35:37:2b:e7:8b:65:de:fe:
                    dd:31:14:b9:11:6f:c7:f9:f9:91:2e:f4:f5:31:3c:
                    64:c0:fa:7c:01:eb:1b:e7:5d:db:10:35:3f:63:1f:
                    27:4f:53:27:46:fe:2a:45:94:bf:e5:7f:ff:16:8a:
                    75:2e:c3:0b:eb:4b:4f:f4:af:a9:99:d8:eb:c4:44:
                    af:e1:16:a1:2e:3f:d4:89:a2:cd:de:4d:a2:66:01:
                    b4:29:5f:f6:38:3f:d3:bc:33:81:c8:b6:f6:0e:2a:
                    b0:e2:a4:03:85:7d:93:04:ca:19:e1:37:f1:ef:61:
                    ed:b4:99:1c:04:8c:62:61:ab:be:b2:a0:0c:ad:92:
                    47:d0:9d:1b:a2:9b:12:b5:20:81:dc:22:f8:1c:fe:
                    8f:e3:88:4d:77:f0:c0:ad:ba:98:9b:56:43:0d:1b:
                    4c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:65:7F:99:09:64:C5:BC:5D:CC:95:A8:BE:F5:A4:B4:70:60:8F:DE
            X509v3 Authority Key Identifier:
                keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d4:17:7a:83:56:40:53:46:82:50:af:a5:22:1b:30:10:4c:
         a6:02:63:14:c6:29:7c:b5:82:cd:d2:61:81:83:ee:98:cf:df:
         d1:e1:2a:29:6c:ac:74:ee:f0:01:57:1a:75:ce:34:6c:0e:5a:
         8f:c8:cb:e3:b2:68:32:a1:cf:aa:89:71:82:a0:b3:70:cd:75:
         e6:7d:26:53:f7:6d:df:93:00:ea:d9:e9:2c:ea:8a:c0:0e:4e:
         46:d3:23:57:e5:1b:5e:ac:ca:b2:41:a4:43:55:cb:db:f6:84:
         45:10:f5:f3:43:43:52:32:af:a2:9f:78:2a:10:95:68:41:a6:
         95:9f:eb:ed:83:38:81:94:54:60:d8:69:5a:e8:54:f6:91:76:
         3f:ea:8c:0d:42:c5:28:de:96:ef:b2:87:97:a1:2f:7f:c2:77:
         02:fc:bf:98:7d:0a:c3:92:67:bb:1a:ea:10:17:a5:28:99:0f:
         d9:e5:d3:5f:17:fb:7e:2e:29:5d:68:40:ce:16:cc:f0:c3:f4:
         0c:f6:3e:50:11:07:df:af:50:6c:af:0a:32:86:85:df:88:da:
         9c:50:50:d0:e8:c5:ae:76:99:b6:6c:4f:81:fb:10:42:e8:16:
         9f:1d:08:69:97:56:f0:30:df:3c:f1:46:15:81:ba:63:e8:8b:
         91:07:c3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:05 2025 by rpki-client