Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File:                     2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier:          SAt3vx4vt0AddvqFbZI4V2Z/UJXrQtQJEhKVDYnOVus=
Subject key identifier:   AB:5F:6B:3B:AD:01:7A:09:5B:8D:0D:EE:D9:43:EB:17:D1:AF:CF:B5
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer:       /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial:       0194BC72EBA3276FA1FE26F153176CD0AB1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number:          0B6F
Signing time:             Fri 31 Jan 2025 13:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:35 +0000
Files and hashes:         1: 0BDV4PoV5X4F__dwougvjtVPUss.roa (hash: 5WR5nSOIx+2EG8VqhNW6h1a6KSmwaUeuiPobGGbu1LU=)
                          2: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: PYT2ha/UquH+1PrPtO2HPNs9BAdueC+ANv3dHtBYKGc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:eb:a3:27:6f:a1:fe:26:f1:53:17:6c:d0:ab:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
        Validity
            Not Before: Jan 31 13:00:35 2025 GMT
            Not After : Feb  1 13:00:35 2025 GMT
        Subject: CN=ab5f6b3bad017a095b8d0deed943eb17d1afcfb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:e1:ba:7c:aa:7e:39:08:d6:04:28:e5:b3:
                    7c:7a:ba:0e:fd:b8:c1:bf:bf:e2:32:02:7c:58:e3:
                    44:4e:4e:5c:05:9f:f8:d1:c0:bc:19:ef:7b:fe:e2:
                    a3:f0:3b:63:d1:10:f1:c4:ed:8e:79:68:de:3a:55:
                    46:8a:7b:7b:83:d6:23:79:5d:88:12:8d:7a:7a:e0:
                    5d:2a:0e:6b:43:82:9f:ac:ec:8c:92:75:2b:8e:2f:
                    85:2e:b8:0d:59:ed:ec:32:1e:a0:60:e4:4f:77:11:
                    2b:aa:bc:b4:fe:35:d8:ee:cc:f7:3c:75:d0:e6:da:
                    60:0b:aa:ee:09:e4:30:5a:d1:f8:80:9f:47:50:3d:
                    99:2e:43:de:17:b5:70:87:f6:9b:09:25:b1:7b:d0:
                    3d:2a:de:2a:8d:6c:c9:f9:3b:69:c3:65:24:68:3b:
                    e0:60:a2:97:f6:2c:fa:57:12:5d:d3:73:3f:a4:87:
                    f3:50:5a:43:8c:bd:ed:5c:24:79:e6:21:dd:ca:6e:
                    0b:01:0f:a6:d6:9f:9a:d7:61:fd:b8:10:df:00:6f:
                    d6:2c:81:d4:c7:47:bc:3f:54:8f:a9:43:0e:1c:26:
                    22:9d:ef:c9:4d:52:a1:a7:64:32:9d:df:76:5d:3f:
                    32:8a:31:09:f0:15:53:db:61:ef:43:e3:2d:a3:32:
                    69:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5F:6B:3B:AD:01:7A:09:5B:8D:0D:EE:D9:43:EB:17:D1:AF:CF:B5
            X509v3 Authority Key Identifier:
                keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:01:db:1b:70:c8:29:cc:0d:d6:86:84:a6:ed:b5:90:c8:2f:
         50:a3:4f:2a:57:1f:4f:6c:38:ad:bc:c1:86:b3:b8:96:f4:6a:
         b1:ea:11:b8:dd:63:0d:2a:1e:cd:29:c2:0d:01:05:0e:d2:1a:
         47:e3:af:1d:71:a8:41:11:50:60:9b:10:3e:24:41:de:cd:39:
         b1:2d:fe:31:34:d3:be:12:7f:7c:54:d2:89:7a:8b:1a:de:75:
         4d:6c:b2:0f:5e:a9:e4:ec:b3:9d:2b:04:64:1e:dc:06:67:40:
         d3:02:75:29:60:a9:ba:4a:9d:47:79:44:77:d2:71:a8:65:30:
         d4:a6:62:26:ca:14:32:1d:b6:7d:64:1a:d3:1d:34:22:41:77:
         e4:3e:59:50:98:1d:66:33:d8:86:59:4e:0c:13:84:6a:2c:ac:
         4e:67:ec:9b:9d:c6:a9:69:d7:1d:1a:df:3b:3c:6d:76:97:c1:
         fb:c8:b5:ca:04:54:8e:e0:50:27:05:94:5f:f4:d2:80:44:18:
         70:7d:65:7c:da:f8:c6:45:57:38:67:f6:c1:a0:13:1d:f5:92:
         5f:22:a2:19:54:84:e8:f8:6a:5c:49:3f:b7:48:ba:63:ec:5b:
         df:d4:b2:24:21:50:7d:1a:50:8d:21:20:6d:d2:df:b3:a3:a9:
         75:ff:c5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:16:55 2025 by rpki-client