Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/sjbyMfNb7vG8bC_CQXULRGD0aMM.mft
File:                     sjbyMfNb7vG8bC_CQXULRGD0aMM.mft (raw, json)
Hash identifier:          YWZwYKM7u/wiv1LFqMzFcTWOmCMg0BCekZ+eLVC2xRk=
Subject key identifier:   30:27:8A:67:BA:FF:5E:96:1B:A6:E7:A4:70:28:B0:E4:63:B8:D7:F0
Authority key identifier: B2:36:F2:31:F3:5B:EE:F1:BC:6C:2F:C2:41:75:0B:44:60:F4:68:C3
Certificate issuer:       /CN=b236f231f35beef1bc6c2fc241750b4460f468c3
Certificate serial:       0194903F114EE5955A2D416268742F3BDD0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sjbyMfNb7vG8bC_CQXULRGD0aMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/sjbyMfNb7vG8bC_CQXULRGD0aMM.mft
Manifest number:          0D3A
Signing time:             Wed 22 Jan 2025 23:00:39 +0000
Manifest this update:     Wed 22 Jan 2025 23:00:39 +0000
Manifest next update:     Thu 23 Jan 2025 23:00:39 +0000
Files and hashes:         1: ALjfx6CpJea_kzUES-73DSY_1tc.roa (hash: YLGbfEbEQFv7HytZDdFbBRA4Ug5ozlQbHd8gwEIfR6k=)
                          2: eDgbQxfoQbs1b3JIJ6SKJOfz-58.roa (hash: 0cvzDo/8Q85v6bkj8KMq0vsZWXEubtGPZaPvBe6D4tk=)
                          3: sjbyMfNb7vG8bC_CQXULRGD0aMM.crl (hash: osDau2m8vHoBfeE3hJlu2n/RYiI7wMV8djvRCY4j1Do=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:90:3f:11:4e:e5:95:5a:2d:41:62:68:74:2f:3b:dd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b236f231f35beef1bc6c2fc241750b4460f468c3
        Validity
            Not Before: Jan 22 23:00:39 2025 GMT
            Not After : Jan 23 23:00:39 2025 GMT
        Subject: CN=30278a67baff5e961ba6e7a47028b0e463b8d7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:25:a9:7e:c6:5b:61:ea:60:9c:53:b6:f8:
                    42:e2:af:31:07:df:f7:bd:d3:76:08:38:a5:c4:e9:
                    b6:93:c8:38:73:c8:7a:fc:6c:59:be:6f:ad:b4:9f:
                    26:5a:a5:b7:01:94:59:a7:ef:2a:6e:e0:83:43:e6:
                    b1:29:ef:1e:b3:28:89:5b:03:11:4f:43:35:e7:53:
                    ee:af:a0:14:db:3a:23:9f:2a:71:fa:22:0f:ca:92:
                    ab:1e:f4:49:03:61:75:cc:47:39:76:a8:20:ed:c8:
                    17:d4:e9:a2:fd:99:9c:78:4f:68:a7:9d:10:95:7f:
                    ef:63:35:2e:7f:82:1f:a3:f7:18:44:be:a3:f0:32:
                    12:6c:d1:e7:fa:18:fe:7b:a8:d1:6b:e6:38:9b:36:
                    36:d0:ba:70:ae:8b:08:b8:83:b2:c7:d9:aa:20:e6:
                    c1:68:b4:7b:21:63:49:82:b6:4a:bd:32:fb:3e:47:
                    a9:90:6d:66:4a:b2:50:21:50:50:a9:a5:71:c9:4a:
                    10:fa:40:2f:de:54:7e:6e:86:19:31:ff:d5:9e:d7:
                    34:99:8b:19:3e:1b:18:f9:45:69:a3:8f:78:88:af:
                    c8:49:9b:1e:c0:76:e8:56:eb:11:40:5a:48:42:7b:
                    89:ed:aa:ca:c5:3d:fd:fd:6a:e0:85:c8:66:66:cc:
                    32:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:27:8A:67:BA:FF:5E:96:1B:A6:E7:A4:70:28:B0:E4:63:B8:D7:F0
            X509v3 Authority Key Identifier:
                keyid:B2:36:F2:31:F3:5B:EE:F1:BC:6C:2F:C2:41:75:0B:44:60:F4:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjbyMfNb7vG8bC_CQXULRGD0aMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/sjbyMfNb7vG8bC_CQXULRGD0aMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/sjbyMfNb7vG8bC_CQXULRGD0aMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4b:ab:b5:fc:80:ce:51:9d:5d:ac:b7:07:4a:b5:83:61:04:
         13:f4:64:7c:49:2a:ba:96:f7:fc:5a:94:b0:06:81:04:f2:f8:
         69:b8:70:c6:9e:4d:c1:e4:7b:6a:41:59:8b:aa:49:17:bb:0e:
         9d:ad:a5:f2:1e:c1:8a:b5:3b:c3:85:0c:7d:5d:14:5f:47:bf:
         53:be:29:81:e1:72:14:e2:9e:16:7c:84:4b:82:a2:27:1e:85:
         c5:31:d7:75:cc:ad:82:ac:82:54:ec:c1:ac:f8:c1:1b:10:25:
         40:36:1d:34:05:5c:7e:89:0a:69:6c:47:ac:31:81:45:48:1d:
         fa:53:e6:16:75:69:88:be:43:d7:f6:db:e5:3c:b5:cb:e9:66:
         07:26:89:4a:77:86:1f:29:f6:39:e0:ed:c6:4e:15:bc:6a:49:
         69:f1:73:1d:36:a8:08:0f:0a:fb:fb:79:46:7a:81:5f:ac:82:
         58:76:2b:8c:ca:fc:2a:2e:be:93:d9:39:cb:2e:15:f1:bc:5b:
         83:0a:c5:92:ed:75:d0:44:f1:6a:33:ee:36:0f:bf:3e:74:dd:
         b9:d1:61:5c:44:e8:f2:c5:c8:67:31:a8:17:dd:9c:ca:26:82:
         89:46:ae:a8:a3:83:e6:e2:d4:99:ba:ee:e5:5b:77:98:4f:9f:
         34:cc:5b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:37:42 2025 by rpki-client