Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
File:                     Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft (raw, json)
Hash identifier:          9Rm+FoPXNvsYMuf/BXTGp2WvOqyuQT6D4rF+msOHDRI=
Subject key identifier:   E6:3C:78:1D:0D:A8:7A:AA:97:38:AA:2E:21:DD:03:88:FF:E9:23:7C
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Certificate issuer:       /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial:       0195DFD970587D3AC4C837688EF0EC85B1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
Manifest number:          1301
Signing time:             Sat 29 Mar 2025 03:02:03 +0000
Manifest this update:     Sat 29 Mar 2025 03:02:03 +0000
Manifest next update:     Sun 30 Mar 2025 03:02:03 +0000
Files and hashes:         1: Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl (hash: VPO6Z2mMXRAUaJU6oQDaG3fc61g6I+AslK1YuaKJKE0=)
                          2: vd7D-3mdClrE2pBAFW5I8DbmNHQ.roa (hash: XeWgnqjmy+ysQNojNpVwYywd9xnz6oTic5jOkSU+sTo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d9:70:58:7d:3a:c4:c8:37:68:8e:f0:ec:85:b1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
        Validity
            Not Before: Mar 29 03:02:03 2025 GMT
            Not After : Mar 30 03:02:03 2025 GMT
        Subject: CN=e63c781d0da87aaa9738aa2e21dd0388ffe9237c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:58:d3:02:bb:4a:47:a0:2d:60:85:fc:d5:
                    f1:4d:b9:26:f6:e2:d8:06:6b:57:30:64:70:00:b7:
                    91:4f:f9:37:43:87:2d:66:e0:82:99:6d:87:86:39:
                    e9:ce:3a:7e:4e:8d:f0:5e:06:f7:fd:06:05:2a:ec:
                    3c:a6:b2:d6:49:de:4f:3d:fa:64:c7:3f:fb:fe:53:
                    8e:00:a6:9a:8e:d4:a5:27:c8:aa:0b:45:4b:60:aa:
                    5a:89:bf:a4:54:9d:af:75:0b:f5:27:3d:b3:cd:a4:
                    b1:b3:09:ed:a3:05:a2:61:53:aa:89:c4:2b:19:6a:
                    40:90:61:6d:a2:c6:90:34:94:2c:72:0c:aa:fe:88:
                    fe:7a:35:dd:ba:d1:2e:af:c2:d0:48:cf:de:c2:ba:
                    b8:11:44:1d:4b:9e:45:dc:e4:cb:7a:4a:ad:38:d2:
                    36:06:c7:3b:52:38:38:d2:e5:f2:b9:c6:b4:71:ae:
                    98:82:35:00:0e:15:c5:89:44:73:96:2b:87:8d:18:
                    fd:2a:c3:a0:ab:26:f3:05:04:5f:80:5a:b2:9e:1c:
                    6a:2f:30:09:33:2f:fc:48:5f:e5:a7:15:55:13:0a:
                    d0:50:49:f3:12:d3:a8:5a:97:d6:a3:4c:46:80:d4:
                    42:72:ff:cf:3a:b4:10:16:e7:a8:37:f2:0e:f5:5c:
                    03:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3C:78:1D:0D:A8:7A:AA:97:38:AA:2E:21:DD:03:88:FF:E9:23:7C
            X509v3 Authority Key Identifier:
                keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:d9:14:f0:ac:ba:3d:a3:87:e8:d0:53:10:05:2a:ea:33:1b:
         83:c0:8c:08:70:a1:88:7a:97:10:f5:77:be:52:f6:ae:b5:6c:
         12:0d:f9:05:80:fd:24:82:37:cf:f6:82:fe:1d:1a:93:13:9a:
         ec:4b:b5:c3:93:44:a7:5e:73:37:fd:4f:62:21:20:10:98:34:
         6f:6c:e0:7a:67:45:ac:69:e8:42:cd:b1:22:b9:ac:9a:50:bd:
         09:79:88:ff:25:e0:47:c7:74:30:b3:a7:02:2a:04:50:95:99:
         e9:dc:0e:85:83:03:fc:80:5b:7e:f6:a2:8c:a5:11:2a:d3:7d:
         6a:34:a9:a0:27:e7:63:e7:23:3c:62:8b:4f:71:28:00:24:02:
         56:11:6e:ae:8d:7e:ea:4e:ab:f1:19:99:f9:c8:d5:ca:80:0b:
         60:04:21:e4:e3:81:70:e8:9f:3d:df:f9:5f:d1:cf:1e:a1:ce:
         26:20:95:23:c5:5f:58:55:b2:2d:bc:f7:2b:e3:73:0f:fc:2b:
         66:68:67:ee:60:c5:e3:5a:27:20:42:28:c7:02:6f:5f:2c:2b:
         1f:f5:c9:de:5c:38:28:f7:ce:e8:a1:13:b3:e4:47:ba:bb:a2:
         f0:be:d9:4d:7c:ee:ff:22:d1:69:86:3c:ea:0e:4d:b6:bc:40:
         b3:97:ae:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:05:36 2025 by rpki-client