Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38803f-6947-4c9d-8ce1-03283d49adcf/1/N_jM8Mgt4ETo4uPCsSwIDVJMbxU.mft
File:                     N_jM8Mgt4ETo4uPCsSwIDVJMbxU.mft (raw, json)
Hash identifier:          KqGxfRc3uWNVNNEM09mXfr+MidjQpxrMfi6D6szkObs=
Subject key identifier:   29:27:88:12:CE:2D:58:27:F6:94:5E:B7:A4:9F:FE:14:4A:CB:B6:1A
Authority key identifier: 37:F8:CC:F0:C8:2D:E0:44:E8:E2:E3:C2:B1:2C:08:0D:52:4C:6F:15
Certificate issuer:       /CN=37f8ccf0c82de044e8e2e3c2b12c080d524c6f15
Certificate serial:       01958EBCDB2029FC328C748DCD8C0A01F28A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_jM8Mgt4ETo4uPCsSwIDVJMbxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/38803f-6947-4c9d-8ce1-03283d49adcf/1/N_jM8Mgt4ETo4uPCsSwIDVJMbxU.mft
Manifest number:          1495
Signing time:             Thu 13 Mar 2025 09:01:36 +0000
Manifest this update:     Thu 13 Mar 2025 09:01:36 +0000
Manifest next update:     Fri 14 Mar 2025 09:01:36 +0000
Files and hashes:         1: 1-Typ11RU8QWD79VPEDt9r35XWcU.roa (hash: hBF72mojE7/AKsdoRvMMcPw7rhC5BjKZ+RYdvTVZtkI=)
                          2: N_jM8Mgt4ETo4uPCsSwIDVJMbxU.crl (hash: oGD1EgiI9h/JjsNYQgIELlSHze9v5+MbLMK6eC47ugg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8e:bc:db:20:29:fc:32:8c:74:8d:cd:8c:0a:01:f2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37f8ccf0c82de044e8e2e3c2b12c080d524c6f15
        Validity
            Not Before: Mar 13 09:01:36 2025 GMT
            Not After : Mar 14 09:01:36 2025 GMT
        Subject: CN=29278812ce2d5827f6945eb7a49ffe144acbb61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f9:56:19:d0:1d:b1:43:58:b7:a7:54:a1:c5:
                    55:fd:ce:1a:df:9b:08:26:1d:bf:e5:11:ff:90:29:
                    e8:dd:ba:ea:0f:92:9f:6c:42:1e:4e:82:17:1d:7a:
                    e6:ef:0a:d9:2e:cc:2f:bb:b1:bf:8d:f3:6f:98:db:
                    78:af:b4:1f:30:cf:31:8e:0b:b3:c1:6f:ad:d2:04:
                    76:f0:51:3a:ae:4e:fb:06:1a:74:42:3c:21:03:8f:
                    b3:b5:92:15:ff:a0:63:ce:ce:fe:75:e1:a6:7d:67:
                    1c:4e:d5:59:21:d6:01:3c:8a:fd:07:17:17:8d:8a:
                    15:4d:60:ae:48:2c:ab:1c:56:aa:73:ff:35:c1:11:
                    f0:1d:2b:c0:ba:d0:be:ff:5a:6d:10:a6:50:d5:c7:
                    61:e5:4c:a5:d2:8a:8e:4f:d0:6b:2f:c9:a6:66:42:
                    a1:41:51:20:32:98:f5:fc:ad:34:ef:6e:9d:83:b2:
                    92:cc:13:b7:8a:2c:18:a9:62:2b:35:06:cc:ed:23:
                    7f:d9:2f:77:18:ae:7b:58:30:d9:b3:ef:88:02:9e:
                    dd:46:c5:c2:43:c6:a8:88:25:6f:93:f3:d1:a6:e3:
                    1a:5b:92:40:94:92:be:6c:a7:3e:f2:ee:1b:6e:a6:
                    81:69:0a:07:2b:5d:23:60:4d:ce:16:e4:80:20:3f:
                    ea:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:27:88:12:CE:2D:58:27:F6:94:5E:B7:A4:9F:FE:14:4A:CB:B6:1A
            X509v3 Authority Key Identifier:
                keyid:37:F8:CC:F0:C8:2D:E0:44:E8:E2:E3:C2:B1:2C:08:0D:52:4C:6F:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_jM8Mgt4ETo4uPCsSwIDVJMbxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38803f-6947-4c9d-8ce1-03283d49adcf/1/N_jM8Mgt4ETo4uPCsSwIDVJMbxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38803f-6947-4c9d-8ce1-03283d49adcf/1/N_jM8Mgt4ETo4uPCsSwIDVJMbxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c7:a5:25:c2:bf:a9:6e:fe:ea:c6:46:e4:9d:8f:8b:a0:db:
         a3:89:22:92:63:62:39:7c:0c:e8:52:f2:c3:8e:37:f2:c4:41:
         42:20:d3:a2:e0:0a:b0:d8:37:2d:15:76:b9:d9:75:8e:d6:66:
         47:3e:6c:00:68:e3:f3:63:07:e5:22:af:7c:6a:0f:59:06:26:
         26:99:73:8d:10:b0:b5:99:a1:30:8a:27:b0:bb:7e:a0:f4:f7:
         69:de:cd:7c:2e:16:12:45:02:b9:47:e2:c3:52:7e:6c:9f:d3:
         00:b7:9c:c6:54:ef:1a:7d:f8:55:57:96:3d:2e:27:83:19:7c:
         ad:7b:3d:dd:49:91:40:d7:5b:55:8f:e8:15:6f:af:42:e5:e2:
         18:32:fd:c4:e7:5b:fc:69:48:95:68:4e:06:0b:d3:e9:ee:50:
         4e:58:dc:a2:23:ea:b8:55:a7:fa:ce:8d:3f:c6:00:4a:29:67:
         03:9c:20:74:be:a3:4d:67:fd:4c:e9:ea:8c:90:8f:ff:18:b9:
         21:66:e5:e0:0d:de:c8:00:a2:f4:10:cc:fd:32:52:5d:cf:d1:
         f4:c4:24:31:86:f7:f4:d1:1b:43:1b:a0:b1:4e:83:27:eb:4a:
         3e:74:f1:89:1b:98:c7:25:99:ce:da:b7:fb:4b:cc:0c:08:1a:
         05:f3:30:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:13:30 2025 by rpki-client