Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
File:                     MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json)
Hash identifier:          2n4IiMkp2VLSCDZnN748wnq0FLFXzzPLk7+l9Asszis=
Subject key identifier:   07:9F:D4:2C:B4:1D:CB:BD:53:CF:E2:7C:62:2F:42:CD:F2:11:2B:DD
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Certificate issuer:       /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial:       0195E1224122480AB517C2F391ADE5B28E82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
Manifest number:          154F
Signing time:             Sat 29 Mar 2025 09:01:13 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:13 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:13 +0000
Files and hashes:         1: 7g1UwiwWgWmfdzsfq2_nM6OnGY8.roa (hash: ZYwmQQtabWzHCr8QKyMRnDvZXsiCEimSnMIySNLvaCg=)
                          2: BEWUUb6Sb5YAERA7Rm-cdwFsmF0.roa (hash: +Qt2yDKsz2L2j/WArrE4B6qzTe0DbfXxEvpfQa5HyZw=)
                          3: LlMngn95TdQ9s1lobSIfFiaxwMc.roa (hash: WeKn9zwaRRHjlRd4WIjiQWXgKdTTEMZ6BTo5nLZ3Ai4=)
                          4: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: GKZhNnqw/Q7I4IDmcL/HlXN7rAN/KdCGqbZq+zIucUA=)
                          5: QqT-BvbiqSOYuM4Lk4hz0YSVQ1I.roa (hash: F9VEIK5Zux7AgHQDn3EERLEADA0kYEbfVteSN7+buqQ=)
                          6: SeWVIKVcFZf5OfSUSvJx8xzrGmw.roa (hash: R1Xjt4d6fbhtdYnW5OsTMCBTcoqdj84LM2GJBD6GMIY=)
                          7: SuAwx53ztZ8nH6iQDl-exiTpB9U.roa (hash: OW4UNz0fPDN3E3BkjgDIvFCnQ13CpXoOp18yw+GY/do=)
                          8: aQ0BCg7T0qvdq_rjilld2qmDCCA.roa (hash: FUk+EtDI/Bw1Ith6izcMbGQJ0XgwGEmYYqaLt5/+JX8=)
                          9: e9kzaC5aK1AvC-cHsDdx9haP07k.roa (hash: QuaA/YDvF9Gcy4o2L6hDN/avQ+2ifpi3IVCtvCyZW14=)
                          10: kexkh65vQ7bMWtG8mnCvje3Zp-w.roa (hash: Pg9AL21punrl7WTntjhvGX0o4iTm5IvkXrJIfPr6Vw0=)
                          11: rELDabhnIWczGPpdcFPbIHRUmiM.roa (hash: C3tLRE4vf2kTivHGIZ50gcjmBmCNhZmWayfOhcglSbg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:41:22:48:0a:b5:17:c2:f3:91:ad:e5:b2:8e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
        Validity
            Not Before: Mar 29 09:01:13 2025 GMT
            Not After : Mar 30 09:01:13 2025 GMT
        Subject: CN=079fd42cb41dcbbd53cfe27c622f42cdf2112bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:6e:9e:f7:41:5e:bd:40:43:d9:78:42:21:
                    66:79:f7:76:56:0b:94:0b:c7:b7:19:90:6c:7f:14:
                    57:b5:57:18:b2:f9:6e:a2:13:91:06:ba:a9:79:86:
                    70:e6:e0:85:b0:aa:b4:51:94:57:fc:48:7e:9c:6f:
                    46:f0:10:4f:ca:64:a0:3d:26:19:46:6b:6a:07:52:
                    82:af:cf:29:30:63:08:23:27:e0:4b:84:22:c1:2b:
                    04:48:cd:86:12:d1:e7:b0:97:d2:75:7e:c0:cc:fa:
                    90:70:96:db:08:50:cc:d0:9e:20:f0:a6:eb:b1:23:
                    f1:60:2b:ba:0d:b0:29:7f:90:e6:37:1d:c5:3c:9e:
                    61:b3:7e:e9:9c:f4:e3:72:2f:3b:b7:79:1a:3e:1f:
                    87:0b:1f:c8:3c:9b:2b:42:b9:c8:d0:41:67:ff:d7:
                    9d:7e:6e:e4:8b:dd:ce:ff:49:19:45:f9:f4:d9:1f:
                    ed:f2:f7:6b:08:19:bd:9c:b5:56:9a:68:e1:67:29:
                    2d:06:d6:9b:8b:ca:be:6e:49:0d:ec:8e:2b:87:2b:
                    4b:94:4a:70:b5:c9:fd:31:03:d9:15:83:27:54:35:
                    50:39:10:4c:e7:ea:d1:89:28:62:27:de:78:88:52:
                    a0:2e:3f:12:59:1d:af:39:cb:36:f1:c2:4c:fb:44:
                    4d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9F:D4:2C:B4:1D:CB:BD:53:CF:E2:7C:62:2F:42:CD:F2:11:2B:DD
            X509v3 Authority Key Identifier:
                keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ce:ea:53:12:51:cc:5d:50:d9:cc:cd:9d:ef:4b:2e:c0:a5:
         bd:aa:a5:b6:47:c6:84:f7:52:db:a0:57:8b:29:b6:87:5c:ca:
         d3:d8:fc:38:4f:4b:98:93:95:66:23:7f:b3:46:46:d7:01:7f:
         c8:ec:02:c1:70:66:53:b2:87:de:05:4b:b7:1b:95:64:35:5e:
         ea:b9:02:53:7b:ff:fc:54:b9:6d:06:cc:c0:de:6e:07:b1:f8:
         1b:5b:99:18:67:1b:35:d4:a0:1b:01:9f:0c:dd:fb:bc:81:ff:
         bc:18:b9:d8:34:8a:73:04:10:6c:e2:d4:78:a3:35:19:22:8a:
         df:23:b1:42:8d:91:c3:f6:ca:a7:36:95:c8:5d:25:28:2a:7f:
         c4:07:ce:2c:39:74:bf:56:11:3c:f2:d7:09:51:8b:08:84:8c:
         e8:8d:a3:6c:81:9d:eb:93:03:21:d2:93:c0:f9:34:e3:1d:69:
         66:fb:32:d2:43:86:0c:21:50:05:0f:57:1b:63:4f:19:63:15:
         04:25:7b:a0:10:c2:a6:fc:57:9c:b0:fe:6f:2a:63:8f:64:ea:
         c8:9b:02:b8:ef:9d:70:24:1b:b8:71:b1:d2:93:f3:c4:60:70:
         35:3e:7c:86:32:28:0f:e1:de:13:56:64:9e:1d:cb:5f:af:a5:
         6e:0e:c2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:28 2025 by rpki-client