Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File:                     Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier:          cNOBxC0A6PtN/nnRljPAum3ZsmlsVhaY9RDzayv7Srs=
Subject key identifier:   FB:B9:46:F2:78:58:25:7F:3A:15:94:81:AE:ED:61:EB:CF:F6:D8:EF
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer:       /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial:       0195E159A02E3CE9F9AA3C9A0304E0A62A14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number:          03C5
Signing time:             Sat 29 Mar 2025 10:01:42 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:42 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:42 +0000
Files and hashes:         1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: cmrFQlebgIsTobDDxvgMNxClCCWL09FmRlaN7zzkZDo=)
                          2: iO_CtKh3Y4ZrGmH0YqMWnYKlZNg.roa (hash: P3pxw91zYoBZsgP5Nx/MtBU2YXLYa7WtbiOEl2i4Gb0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:a0:2e:3c:e9:f9:aa:3c:9a:03:04:e0:a6:2a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
        Validity
            Not Before: Mar 29 10:01:42 2025 GMT
            Not After : Mar 30 10:01:42 2025 GMT
        Subject: CN=fbb946f27858257f3a159481aeed61ebcff6d8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:31:cc:43:c5:53:25:64:04:b9:ab:aa:36:
                    a9:ce:ee:f3:82:81:7a:01:50:11:9d:be:dd:c7:4e:
                    26:70:d4:5f:8b:ac:27:0e:65:ba:39:ba:a9:9d:98:
                    0c:a8:9f:e2:1f:55:30:5d:4a:82:06:1d:e4:e6:ee:
                    4f:16:42:c3:a3:f9:d7:8a:c9:c9:1b:6e:ad:28:e1:
                    ec:81:29:77:8e:ed:8c:04:91:ba:b0:c3:91:3d:19:
                    9c:10:c0:09:17:ed:2c:00:ef:e9:eb:25:95:32:23:
                    0f:76:6b:91:11:66:bb:f0:a8:d1:47:6a:68:30:ac:
                    7f:9b:ef:f7:b0:a6:28:b0:ae:40:f3:1e:53:3b:b6:
                    3d:2e:c0:52:6f:b2:f5:8c:47:98:0a:a8:ee:3a:2c:
                    4c:44:c8:30:d9:7f:72:7e:13:ca:73:0c:a4:5b:15:
                    35:f5:e8:a8:d9:12:52:57:ec:b9:b2:1d:b4:c0:bd:
                    3d:7c:f3:ae:cc:1d:8f:31:3c:7c:5f:e6:09:46:a3:
                    c8:2a:41:2c:de:ae:7d:41:14:49:8b:fb:84:7a:46:
                    8a:a4:97:dd:9a:ba:03:ef:21:8e:a9:b8:cb:b4:2c:
                    ef:60:a2:18:c6:c8:6c:f8:31:fa:84:56:77:28:5a:
                    bc:67:07:dc:65:a3:39:ce:ff:dc:c5:36:7f:15:2f:
                    d4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B9:46:F2:78:58:25:7F:3A:15:94:81:AE:ED:61:EB:CF:F6:D8:EF
            X509v3 Authority Key Identifier:
                keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:66:38:b7:7b:23:90:35:55:59:98:ab:9b:cd:43:18:11:ed:
         9e:17:d0:7a:ad:81:6c:a7:47:36:e4:12:12:16:47:a9:35:c5:
         7c:f6:b6:30:6e:ce:82:08:f4:3f:3b:72:ef:8a:eb:20:c3:3a:
         0c:fc:a2:35:c7:9f:14:92:ef:ea:36:96:3b:a4:7c:49:91:08:
         75:2a:44:e7:a7:88:f8:6b:af:56:25:0c:6a:06:26:43:87:9d:
         82:0b:c4:c2:6b:d1:3f:77:3f:be:53:e5:47:47:48:14:f2:67:
         16:c0:07:d9:67:b5:2d:94:01:7f:d2:cd:c8:10:a3:83:ac:a5:
         28:28:c2:6b:1b:6b:52:b8:f9:4e:8d:46:cd:95:8b:0e:e7:ef:
         2c:ff:bf:4b:ad:a1:1a:b9:67:59:4a:38:ff:d4:01:18:28:ff:
         53:74:17:39:03:b2:09:08:25:c8:68:50:42:3c:0f:d3:58:bf:
         87:69:c1:f4:f8:b7:02:7e:0d:85:1c:e5:88:72:e8:cb:5a:a7:
         74:3c:85:ed:1a:44:2d:93:cb:01:45:96:fc:b2:a6:2b:33:42:
         dc:c7:c5:c7:85:21:14:c9:96:8b:71:f4:1a:09:49:47:8d:1a:
         bc:2b:97:92:e6:f2:6b:81:e0:fe:a9:cc:2a:9e:74:95:b4:88:
         b1:bf:69:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:20:03 2025 by rpki-client