Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/vowKdPRzEt8pikYJXkdSXVFYVKE.mft
File:                     vowKdPRzEt8pikYJXkdSXVFYVKE.mft (raw, json)
Hash identifier:          D5RCUmt6jw7baHwIcVH6pUk2SfFQV8DhQwlFqGGKkjk=
Subject key identifier:   42:B0:C4:49:17:2E:07:F9:36:63:25:11:44:A7:08:4B:0B:51:23:15
Authority key identifier: BE:8C:0A:74:F4:73:12:DF:29:8A:46:09:5E:47:52:5D:51:58:54:A1
Certificate issuer:       /CN=be8c0a74f47312df298a46095e47525d515854a1
Certificate serial:       019070F57E2DE2C5A201C079A1EFFC5C0C2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vowKdPRzEt8pikYJXkdSXVFYVKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/vowKdPRzEt8pikYJXkdSXVFYVKE.mft
Manifest number:          0A5B
Signing time:             Tue 02 Jul 2024 01:00:55 +0000
Manifest this update:     Tue 02 Jul 2024 01:00:55 +0000
Manifest next update:     Wed 03 Jul 2024 01:00:55 +0000
Files and hashes:         1: 3cqGH6ZdXOe0OcqxDoO4NW7F17w.roa (hash: Nt31i60bPIGlZyaGxnJVt8mbPX8vGb5q3T66vexLV6E=)
                          2: bmUuSlwCmSnhulY7FhNL1WiBGtY.roa (hash: vGcOfUYOkL3VmUZIjblzRBZFAX8+VlyYxZuXj/2BMoY=)
                          3: vowKdPRzEt8pikYJXkdSXVFYVKE.crl (hash: eXkwjVsOx6j0+wqla41Z4N1Q7lJM3a6KJbRZoU2L9RA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:70:f5:7e:2d:e2:c5:a2:01:c0:79:a1:ef:fc:5c:0c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be8c0a74f47312df298a46095e47525d515854a1
        Validity
            Not Before: Jul  2 01:00:55 2024 GMT
            Not After : Jul  3 01:00:55 2024 GMT
        Subject: CN=42b0c449172e07f93663251144a7084b0b512315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:bd:53:d9:73:a6:19:51:b9:65:29:af:c4:
                    ea:08:4f:cf:4e:3a:74:c3:b1:16:c6:d3:bb:34:98:
                    16:3a:d9:9c:d4:b8:24:6d:a9:a9:4b:66:8a:25:b4:
                    38:84:dc:4f:1c:be:8e:d6:e9:3d:29:77:49:77:20:
                    9b:39:e9:e2:98:f6:a1:9a:61:6d:56:0c:e7:c8:6f:
                    61:f5:96:da:b4:26:84:52:b6:da:b5:79:c5:ea:08:
                    02:f0:49:aa:10:0a:26:89:8c:5a:73:f8:6b:58:07:
                    2b:94:bb:58:37:c5:63:26:33:2a:79:43:eb:c6:90:
                    d0:76:a7:10:64:4b:60:e0:5c:aa:6d:3e:05:48:47:
                    ff:c4:c6:61:af:3a:db:ae:e6:f0:73:f9:1f:eb:e5:
                    ad:61:7b:69:49:5f:4f:40:3e:bd:20:b2:13:08:12:
                    60:ad:ea:48:d0:3f:9e:4d:af:75:9f:fd:72:4f:89:
                    fc:99:de:1c:69:d1:5b:c3:99:98:10:a8:64:44:02:
                    15:36:d0:d9:b4:0b:a6:32:74:58:6a:91:6e:19:f8:
                    f3:f9:87:90:18:57:f1:b9:f1:60:e5:db:f6:a0:68:
                    1f:34:d0:9f:81:25:fe:f9:b1:60:08:ce:90:08:9e:
                    cb:30:d3:97:67:9c:74:68:28:cc:38:c2:61:d3:3d:
                    3e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B0:C4:49:17:2E:07:F9:36:63:25:11:44:A7:08:4B:0B:51:23:15
            X509v3 Authority Key Identifier:
                keyid:BE:8C:0A:74:F4:73:12:DF:29:8A:46:09:5E:47:52:5D:51:58:54:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vowKdPRzEt8pikYJXkdSXVFYVKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/vowKdPRzEt8pikYJXkdSXVFYVKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fc80f0-5c27-4898-84ac-28e416cf11cf/1/vowKdPRzEt8pikYJXkdSXVFYVKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2d:0f:d5:85:04:6a:13:b4:6f:10:ee:a3:eb:03:cd:5a:34:
         c2:a3:b5:00:8f:69:4d:0e:a6:81:f1:79:6a:a1:17:ec:13:32:
         89:f1:48:f7:91:83:40:44:65:89:92:4f:24:4d:9f:f2:8c:01:
         2c:07:b0:c3:ea:48:4a:e2:22:29:4d:d4:95:69:a7:bf:73:b7:
         eb:99:e2:58:40:7e:9b:40:f4:74:80:ef:d3:86:5f:a1:38:ac:
         92:58:bb:86:ef:af:cf:d9:97:18:0a:60:92:29:19:89:30:a1:
         7a:2f:3b:ab:3e:94:eb:fb:3e:ac:7c:1f:2d:53:1f:88:3e:16:
         60:dc:47:2a:cb:e5:d7:cc:26:b0:fa:ed:bf:0c:b9:1c:a9:8a:
         99:35:2e:5a:45:d3:1e:48:d0:2d:99:72:f5:f8:fb:fa:15:f1:
         a7:c5:40:e8:50:d0:67:be:49:0b:d8:fb:86:ca:e1:42:a4:c4:
         46:01:ec:07:a5:fc:ea:90:7e:b1:22:e3:d2:60:62:8e:24:81:
         da:26:f1:f3:25:c5:13:11:ff:d0:ce:22:4d:28:4a:cb:36:80:
         d6:2f:d3:86:cc:8e:33:0d:06:7a:6b:c7:4d:95:26:49:c4:76:
         ef:c1:c5:7d:50:12:95:ed:01:dc:17:db:b5:b3:9f:d6:b0:b0:
         be:a4:6f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:28 2025 by rpki-client