Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
File:                     94tjVHSP4-hS4GSYKCwhVAB1_GY.mft (raw, json)
Hash identifier:          6x+1oNKqMMuv06SznA6F1BVeLJf+a4jjpYN1Hze7UYE=
Subject key identifier:   40:4D:D9:79:79:DE:B3:82:54:13:F3:31:FF:A2:34:5F:B1:0B:BB:D4
Authority key identifier: F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66
Certificate issuer:       /CN=f78b6354748fe3e852e06498282c21540075fc66
Certificate serial:       0194D47B1E2BBC83574612E7251802A0824C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
Manifest number:          065B
Signing time:             Wed 05 Feb 2025 05:00:25 +0000
Manifest this update:     Wed 05 Feb 2025 05:00:25 +0000
Manifest next update:     Thu 06 Feb 2025 05:00:25 +0000
Files and hashes:         1: 94tjVHSP4-hS4GSYKCwhVAB1_GY.crl (hash: RrL2UJR410m0njAmMNyoE3AhmWubKDpQpHbqlpVZgjE=)
                          2: CxQQAahzMolSX6a9lJ0-pCP5sb4.roa (hash: 3ZL3ARUaIfvA3i9cxAwflRHX+yAdbwGwcvxYxx4l2zc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:d4:7b:1e:2b:bc:83:57:46:12:e7:25:18:02:a0:82:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78b6354748fe3e852e06498282c21540075fc66
        Validity
            Not Before: Feb  5 05:00:25 2025 GMT
            Not After : Feb  6 05:00:25 2025 GMT
        Subject: CN=404dd97979deb3825413f331ffa2345fb10bbbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:07:1f:d8:22:0d:96:7c:a9:92:e1:29:ee:
                    a1:93:8d:ee:fe:a5:0c:dc:17:bb:08:0a:f2:7f:a1:
                    f0:ad:cd:84:9a:19:94:0f:23:5a:be:8e:60:1e:92:
                    82:41:cf:2b:bf:b5:e8:2f:e3:42:25:aa:0f:fc:67:
                    13:10:bd:7d:43:1b:8c:6a:46:3a:2d:83:06:4f:12:
                    99:0f:bd:0f:63:52:43:66:bd:30:55:b7:0f:60:ff:
                    71:ab:07:f8:8f:6e:52:e7:a8:d3:29:87:eb:7e:25:
                    56:7f:fa:c1:94:af:40:84:88:f4:9d:13:ff:d9:e9:
                    79:a8:d9:43:78:8c:6a:da:f9:9b:40:be:be:00:6e:
                    a4:23:6e:52:93:31:d0:e4:88:6e:67:64:78:5e:27:
                    0e:aa:eb:35:fa:01:c2:d4:2c:01:85:08:d1:c3:87:
                    f3:1b:bb:33:20:d3:10:0f:4d:01:2c:6d:70:d9:52:
                    74:c5:04:27:8b:d6:d0:02:78:01:39:d1:2e:d7:8d:
                    5e:da:f0:28:b6:58:f1:53:dd:dc:7a:34:7f:bf:c6:
                    6a:bc:6c:7d:69:0a:13:de:5b:e6:d1:13:5d:4a:21:
                    fe:a5:7f:fb:7e:45:33:28:e0:ee:ed:83:e8:0c:2a:
                    76:f3:25:b1:0c:fe:76:1e:b2:aa:a1:37:41:db:a0:
                    8d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4D:D9:79:79:DE:B3:82:54:13:F3:31:FF:A2:34:5F:B1:0B:BB:D4
            X509v3 Authority Key Identifier:
                keyid:F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8d:01:c6:09:e7:54:4a:f4:83:76:59:d4:ce:17:35:d9:bc:
         6c:eb:80:b7:5d:91:e3:46:c3:4c:9c:a4:84:12:b7:39:87:27:
         84:1c:ad:91:22:e5:da:ed:aa:78:17:f1:bf:4e:6a:d0:c1:52:
         f3:22:dd:a3:fb:c0:72:66:08:d3:4f:d5:65:d3:da:23:18:da:
         20:3c:37:96:42:07:a3:03:e6:70:74:08:ca:d8:44:3d:b6:19:
         ff:26:8f:34:0c:15:44:31:1f:32:3f:f6:4d:74:db:40:03:3d:
         8b:97:2d:d7:6e:78:ca:f4:65:3b:ec:02:68:24:3a:34:b9:68:
         87:69:7a:a2:15:b2:a9:10:ac:36:bb:8b:14:f8:e2:29:2e:10:
         b9:d6:07:27:da:61:0d:0d:8e:b1:6f:8f:6f:35:b1:9e:19:a9:
         97:89:b9:34:ca:42:0a:43:b0:2a:48:b1:67:f7:fb:83:5d:aa:
         08:71:ca:33:c8:04:ab:33:28:83:94:07:c3:db:d2:0d:91:4a:
         fe:13:a4:b5:97:80:a6:66:be:17:d6:93:bb:d2:79:cf:ab:78:
         15:1c:c4:08:e1:9f:26:9c:a1:21:9e:3f:92:a6:20:bf:6a:b0:
         8a:7d:fd:2f:b9:48:06:29:29:06:86:77:03:38:a0:10:b6:e7:
         df:00:63:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:33 2025 by rpki-client