Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
File:                     j6mutCbCijSAh3b5Vok107nsngg.mft (raw, json)
Hash identifier:          6N54RYqV6DGKGGpFFPr0reiVNahT4ykvW/r2FM+5DQs=
Subject key identifier:   C9:34:8E:2A:69:E9:89:AA:D0:CF:6D:EC:1B:D4:31:5A:8F:C3:60:5B
Authority key identifier: 8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
Certificate issuer:       /CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Certificate serial:       0194BC052A05904ED744C9F300729CFE120F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
Manifest number:          0EB9
Signing time:             Fri 31 Jan 2025 11:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:42 +0000
Files and hashes:         1: j6mutCbCijSAh3b5Vok107nsngg.crl (hash: PV9Tw8K1IG85g+WumkztbCbu7DJjc+FpaSKNz1d/rtQ=)
                          2: pqaKQ_TLLBYikhcnNcdXTfV_Qqg.roa (hash: hN1kuDdul6eCFSiEm2Z9+yxnk4jIcJ1yoCv4DPl4iuU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:2a:05:90:4e:d7:44:c9:f3:00:72:9c:fe:12:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
        Validity
            Not Before: Jan 31 11:00:42 2025 GMT
            Not After : Feb  1 11:00:42 2025 GMT
        Subject: CN=c9348e2a69e989aad0cf6dec1bd4315a8fc3605b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:80:b5:82:36:36:70:f3:a5:80:dd:1f:d8:
                    57:5f:6f:d5:ce:97:cb:e2:87:09:eb:e1:df:16:00:
                    a5:17:f8:7f:bc:0a:60:23:15:d6:ae:51:2e:1e:80:
                    ac:e4:a0:ca:db:d4:21:97:82:a9:14:11:b4:28:cd:
                    e1:db:06:aa:9b:9b:aa:21:0a:eb:e1:e4:d4:ea:08:
                    61:63:31:56:d3:ea:a7:cd:96:43:55:68:81:cc:1d:
                    eb:5f:5f:dd:58:70:bd:00:77:ed:f1:11:cd:e6:53:
                    be:c4:ab:ff:8d:59:3e:a6:67:95:56:16:af:c7:cb:
                    e8:11:0d:f8:04:d1:18:39:af:30:5f:62:e4:ef:7a:
                    3d:6b:e2:84:57:f6:8f:99:42:53:f5:01:20:8f:19:
                    b9:cd:ed:c6:d8:a3:6c:62:44:bf:94:08:48:cd:8e:
                    ce:de:48:28:44:74:df:76:18:68:01:74:38:6c:f3:
                    89:2d:55:de:4b:43:b2:d1:aa:d4:e2:c2:67:f4:44:
                    2f:37:ca:21:fd:3f:c3:7c:52:16:98:60:5e:e1:d7:
                    97:3f:a3:aa:61:13:92:4c:9e:1c:bf:f9:03:eb:fd:
                    9a:42:6d:a3:c9:26:ec:f7:34:d6:df:00:92:73:34:
                    ce:ce:7a:37:09:d1:9c:eb:63:9e:f1:8a:e6:5d:0d:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:34:8E:2A:69:E9:89:AA:D0:CF:6D:EC:1B:D4:31:5A:8F:C3:60:5B
            X509v3 Authority Key Identifier:
                keyid:8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e7:80:19:74:fd:6c:93:27:f3:6b:cf:38:a7:8e:4e:a4:43:
         37:81:ef:8d:56:57:16:c5:dc:1f:55:47:21:4e:80:7a:7c:53:
         85:a1:6e:ef:fe:2c:65:ea:7d:dd:02:17:b0:ab:e0:d8:25:9d:
         55:05:91:dc:4e:74:2d:c3:90:1f:be:c6:76:b1:b8:3c:c2:04:
         42:c9:fa:03:3c:e5:29:61:4e:f4:f2:d7:e0:53:a2:49:dc:c1:
         b0:a7:8b:12:ac:58:07:96:16:2c:09:b2:6a:cc:9b:80:e6:d4:
         05:f8:64:c4:24:c8:25:44:df:66:bf:d2:d9:a4:46:2c:98:92:
         3f:a0:a4:34:76:21:8c:7c:3c:b3:04:2a:4c:c0:bb:27:be:ac:
         08:e4:c4:bb:cd:94:25:5b:bf:a9:50:e9:69:be:57:c3:f9:68:
         c8:46:59:11:fd:15:5f:fa:e3:21:35:04:d3:28:2e:c3:f2:88:
         bd:e2:14:8e:a6:43:ce:6d:93:1f:4f:45:2b:b2:f2:10:b4:60:
         df:09:3c:6a:ac:ab:cf:15:fa:e7:ad:90:9e:8c:0e:a4:33:cd:
         41:ef:ff:cd:c1:c7:29:23:92:7f:8a:6a:90:85:9f:e3:da:d6:
         ec:b6:64:25:69:4f:90:44:69:43:ec:91:a0:96:e8:d9:88:97:
         9f:e5:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:17 2025 by rpki-client