Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.mft
File:                     QvSPf64BKRanddXjtvojEJg0PqA.mft (raw, json)
Hash identifier:          yDMwRgEOFN8x5u/pey8Y9FmB18j2cp9c9uFWPKAhMNQ=
Subject key identifier:   2F:CE:A6:7A:2E:75:55:53:3D:16:85:DC:FD:44:3B:70:64:F8:7F:42
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Certificate issuer:       /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial:       0185F23DAADB38E40C23C023510AD4819A7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.mft
Manifest number:          0862
Signing time:             Fri 27 Jan 2023 08:00:05 +0000
Manifest this update:     Fri 27 Jan 2023 08:00:05 +0000
Manifest next update:     Sat 28 Jan 2023 08:00:05 +0000
Files and hashes:         1: QvSPf64BKRanddXjtvojEJg0PqA.crl (hash: u/8fJSq1i4Tof9M35EwFVqJJ+RXwIaJCZ5Sp6W0lJbY=)
                          2: jGq3t-SD_2eqqu-sq5XyZ0IFk5E.roa (hash: VFh0tryf5gm5ca0NUia7k/MeWAIUk4ND/OlhfAeWeeE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:f2:3d:aa:db:38:e4:0c:23:c0:23:51:0a:d4:81:9a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
        Validity
            Not Before: Jan 27 08:00:05 2023 GMT
            Not After : Jan 28 08:00:05 2023 GMT
        Subject: CN=2fcea67a2e7555533d1685dcfd443b7064f87f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:70:79:aa:96:31:7d:4a:b9:c8:c2:3d:8f:1f:
                    84:16:60:14:6b:96:63:07:93:35:43:65:c3:5e:bc:
                    54:5b:51:b8:24:7b:4a:07:6a:e8:92:57:e8:85:6a:
                    13:83:cf:47:3d:7c:76:70:b9:56:1c:2d:0f:af:63:
                    91:3f:4b:f0:3d:c3:6f:a1:d8:bb:9a:36:d1:18:1e:
                    a7:7c:25:77:3d:b0:c8:58:3b:3d:33:13:3f:92:01:
                    ac:0f:c2:11:2d:2d:78:7c:ab:23:27:c5:2e:6f:21:
                    70:be:94:26:ba:a7:eb:0a:c5:cd:fb:8c:b6:38:a2:
                    cb:72:28:9a:77:65:32:d5:00:ed:d0:08:4d:00:f6:
                    de:09:58:e7:e4:3b:c0:30:39:4a:44:75:d4:97:9d:
                    05:3e:ab:75:7f:b6:33:31:fa:00:bb:c8:8c:68:6a:
                    a0:5f:45:d2:e6:b5:8b:14:81:d5:71:99:ce:4d:cd:
                    bb:aa:cf:19:aa:59:5f:0c:1f:8f:17:4d:c6:e4:bd:
                    5e:6c:70:6b:06:11:bd:92:a2:b1:90:a7:96:84:92:
                    bd:79:d9:97:0f:e0:d3:87:f6:57:c2:f7:49:03:1e:
                    62:9f:27:37:69:e8:25:4b:59:05:0f:73:0a:62:f1:
                    55:a1:5a:71:0c:0a:40:1b:db:c4:b7:66:e5:5e:13:
                    a3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CE:A6:7A:2E:75:55:53:3D:16:85:DC:FD:44:3B:70:64:F8:7F:42
            X509v3 Authority Key Identifier:
                keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:43:2a:a6:e4:c8:5b:4e:d4:4b:10:45:0a:98:89:b2:63:fe:
         d7:04:3f:bc:0c:26:e4:e9:4a:1a:72:08:fc:c1:0f:f5:d7:3e:
         3f:a7:83:bb:48:37:76:4e:e3:10:06:63:b2:84:e0:1d:07:a2:
         2e:be:a1:f0:25:f2:27:e8:b4:24:c1:e8:d4:74:30:17:fa:70:
         cd:09:d0:58:9a:81:45:55:de:b0:71:c6:36:a2:a7:17:da:c3:
         91:07:d5:65:38:6e:61:a4:42:28:22:a6:a9:a1:dc:6a:3c:8b:
         a2:8a:40:00:f2:87:ab:ca:ef:45:e8:fc:28:cc:63:7c:be:3d:
         00:b6:9a:82:a6:60:08:5e:83:53:00:46:c1:1e:33:cc:df:3d:
         05:2d:80:5c:4f:09:b8:90:9c:81:31:f0:5a:0f:a4:89:d2:3f:
         32:70:14:2e:fa:e0:ca:34:61:e5:cb:5f:e4:e1:fc:f9:96:56:
         0f:06:00:16:f8:e4:6e:a4:89:63:92:de:d7:36:3c:48:f4:f1:
         ab:a1:d6:9c:55:60:35:ff:d2:d4:cf:18:d1:66:55:85:85:75:
         81:8e:4f:6a:7c:02:06:b7:bc:c2:63:09:a5:25:57:3e:53:9d:
         71:42:3b:5c:2d:db:d3:a4:76:6c:05:d5:02:7a:90:f0:84:e8:
         fb:7f:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:05 2025 by rpki-client