Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft
File:                     EyMNpwIy9meEcw_WwSVRNbf40J8.mft (raw, json)
Hash identifier:          8W5jVNzkYCwgeRX9t2M5HWUBUzNfFKrMvUMG/fMc7yA=
Subject key identifier:   2F:64:25:A2:F7:8F:3D:B5:B0:AF:E9:B2:6E:EE:7B:CD:6D:C1:4E:69
Authority key identifier: 13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F
Certificate issuer:       /CN=13230da70232f66784730fd6c1255135b7f8d09f
Certificate serial:       0195E0469D468C724AEB40888F856B6C55A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft
Manifest number:          14C3
Signing time:             Sat 29 Mar 2025 05:01:18 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:18 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:18 +0000
Files and hashes:         1: EyMNpwIy9meEcw_WwSVRNbf40J8.crl (hash: mVGEsPNfhxDOMPVWKcFltHKK4IBpkEGTv2sCaUojT/A=)
                          2: FQ08SQHuDvgVY6-vPXOmsMLAo8o.roa (hash: +WAwLsz7zfr0/VzLYZMmCYMqBgn9Wh4IQM0OezR1NSE=)
                          3: vKEgB0Axxq_vhvipNh_yyOaG4yg.roa (hash: 4yc1yltpHrzDr+Gx1FWQMUfwlna9IEYvSirw6/GV188=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:9d:46:8c:72:4a:eb:40:88:8f:85:6b:6c:55:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13230da70232f66784730fd6c1255135b7f8d09f
        Validity
            Not Before: Mar 29 05:01:18 2025 GMT
            Not After : Mar 30 05:01:18 2025 GMT
        Subject: CN=2f6425a2f78f3db5b0afe9b26eee7bcd6dc14e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:74:a0:8c:2f:09:4c:40:9a:27:fd:e8:a8:78:
                    95:7e:b8:23:32:f1:d8:a6:48:ff:b6:e4:8b:38:b1:
                    d1:a7:51:5f:33:a8:82:01:46:73:90:d1:25:34:f0:
                    64:a1:8f:3c:6b:e0:78:6f:65:d6:94:8b:d0:91:5a:
                    3d:cf:9c:a4:ce:78:46:68:8e:82:fe:96:83:b9:a8:
                    fe:94:2d:82:f4:ae:a3:86:3c:0e:2b:9b:e9:fe:68:
                    e3:fb:f2:bc:11:b1:39:cd:46:9e:21:50:96:03:f3:
                    4a:ff:cb:76:df:c0:69:6f:fd:17:27:9b:3c:3a:99:
                    47:b9:fc:7d:2d:4c:2d:35:f2:20:8f:85:cd:b5:2b:
                    00:12:21:98:46:b0:c4:04:71:60:01:16:7f:a3:12:
                    87:2e:f9:eb:78:e6:a2:51:cd:d8:bd:2f:98:72:67:
                    2f:8c:2f:94:dc:b6:12:f7:0d:c5:00:dd:1e:24:74:
                    0b:44:03:05:9c:63:d4:c6:00:15:87:3a:e9:fe:60:
                    82:3c:73:bf:6a:7b:61:e3:01:77:37:84:04:1d:24:
                    cd:2d:8f:06:c0:94:2d:88:16:8e:69:3c:02:fc:34:
                    91:e8:b0:2a:73:9c:6d:90:3b:e4:0b:bf:0e:bb:c2:
                    0e:5d:fc:38:22:52:0b:1f:c9:d5:31:6c:3a:77:99:
                    4d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:64:25:A2:F7:8F:3D:B5:B0:AF:E9:B2:6E:EE:7B:CD:6D:C1:4E:69
            X509v3 Authority Key Identifier:
                keyid:13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:2c:54:01:2c:42:d2:30:94:ed:87:c4:64:11:55:56:04:4d:
         09:c6:a0:e2:58:c6:a3:1e:b2:37:93:b1:70:3c:26:10:b1:d0:
         05:a9:4c:e3:5c:28:f5:dc:2c:1c:e6:38:99:23:e9:da:3f:77:
         4f:cf:dc:09:26:9d:b8:77:55:60:ba:d2:3c:29:73:76:b0:a8:
         8a:4a:35:b9:c3:ac:a5:b4:7e:3d:11:38:1c:6c:48:d9:ed:17:
         34:b2:ef:25:5d:5d:0a:03:5c:1d:fe:f2:11:d9:b5:76:05:d0:
         77:e8:67:04:fd:3c:c9:dc:61:6d:6c:03:84:af:18:30:b3:0a:
         fc:5e:5d:dc:cb:bb:0f:6d:32:2d:b0:71:3b:be:5d:81:66:c4:
         8a:35:46:eb:5c:93:e3:62:d8:cd:87:2f:7b:6f:38:3c:41:36:
         cb:9f:4c:4b:b5:fa:5c:42:51:10:59:8b:6d:d4:b8:c1:9a:70:
         fd:ce:41:f9:16:16:d6:3a:5d:db:5e:ec:e2:62:c9:6e:f4:bb:
         a3:e0:64:97:40:da:76:c2:46:40:aa:2b:a0:bc:73:af:68:de:
         8c:07:37:34:33:80:0d:48:89:10:80:9f:72:5f:fe:e1:5e:5a:
         a4:b2:cf:f7:5b:b8:79:d8:31:0e:d8:74:c3:6c:63:bd:3e:eb:
         5e:de:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:42 2025 by rpki-client