Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.mft
File:                     m5baKyu6VqAZuAS3zQDlFDcJd6U.mft (raw, json)
Hash identifier:          QeQV+sjEOwW1tizLeEWhQmQHTUzlxhZ33KDfZMzoRsg=
Subject key identifier:   19:FA:A3:63:FD:4E:FA:F0:C0:82:58:EB:93:86:05:3C:98:C8:2C:57
Authority key identifier: 9B:96:DA:2B:2B:BA:56:A0:19:B8:04:B7:CD:00:E5:14:37:09:77:A5
Certificate issuer:       /CN=9b96da2b2bba56a019b804b7cd00e514370977a5
Certificate serial:       0195C83DDD82D6C9033A78902AD6CB738FEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.mft
Manifest number:          0740
Signing time:             Mon 24 Mar 2025 13:00:52 +0000
Manifest this update:     Mon 24 Mar 2025 13:00:52 +0000
Manifest next update:     Tue 25 Mar 2025 13:00:52 +0000
Files and hashes:         1: m5baKyu6VqAZuAS3zQDlFDcJd6U.crl (hash: 3SQI6NrduODw9ySHXrQziGCkSmwITwfZQoBWqvu65VI=)
                          2: w87Aon_q3Dh_buadzZYFIwp5KBk.roa (hash: 7IIsdhKEICY+k9oemxpxzAnNC22IAqB5l+eqfg/W2eE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c8:3d:dd:82:d6:c9:03:3a:78:90:2a:d6:cb:73:8f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b96da2b2bba56a019b804b7cd00e514370977a5
        Validity
            Not Before: Mar 24 13:00:52 2025 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=19faa363fd4efaf0c08258eb9386053c98c82c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:3b:e1:27:30:fc:b3:77:04:e9:e5:f2:f7:
                    d9:40:6d:83:ef:39:20:a1:96:c4:c9:9a:b8:02:28:
                    4c:b5:d3:c7:67:61:1c:8b:b0:e9:4f:64:bf:d7:6b:
                    74:c2:50:e2:f7:f7:4d:84:ec:33:2b:9b:39:84:55:
                    70:98:61:8d:0a:19:16:89:dd:6a:75:b3:fa:6a:73:
                    99:14:e0:80:aa:c9:a3:ba:a8:90:25:43:8b:63:89:
                    a1:ba:78:9c:d3:70:83:bd:18:32:b0:8d:84:cf:28:
                    a1:bd:51:47:4e:2c:21:d9:59:8c:ae:ea:09:c7:04:
                    09:92:7d:25:4c:c1:64:05:ee:01:f6:1e:9e:d0:b1:
                    a4:bf:a6:2d:46:07:e3:79:10:c9:4b:bf:d6:0b:9a:
                    c7:07:b5:7c:6f:15:0d:fe:75:59:c3:f5:c2:b5:ff:
                    52:1c:96:bb:a9:b7:3a:67:2f:4a:6e:5b:28:39:83:
                    ae:90:01:3f:2f:5b:be:70:41:17:1d:4b:15:88:eb:
                    48:d6:33:e1:41:e7:d1:2f:f1:8c:bf:90:e0:fa:67:
                    fc:24:3b:b9:fd:87:d0:c0:80:22:a2:26:11:17:95:
                    fb:77:ae:98:56:0c:3a:5f:df:f3:00:b7:02:67:10:
                    df:85:da:e3:da:e2:87:88:7e:78:ec:53:63:12:ae:
                    87:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FA:A3:63:FD:4E:FA:F0:C0:82:58:EB:93:86:05:3C:98:C8:2C:57
            X509v3 Authority Key Identifier:
                keyid:9B:96:DA:2B:2B:BA:56:A0:19:B8:04:B7:CD:00:E5:14:37:09:77:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:ca:ba:a5:1e:7d:df:1b:3c:b8:32:3e:8c:58:4d:e0:d8:58:
         3b:b1:9d:b6:ef:2f:80:5f:0e:06:45:ad:42:af:f9:eb:56:7f:
         1e:10:23:a3:2e:77:01:d5:b0:db:d2:16:60:dd:ac:5b:d4:46:
         ff:80:05:41:6f:36:be:b5:4c:eb:68:7e:4f:82:8e:cb:07:19:
         41:e4:69:89:61:26:4b:14:c3:3c:ad:28:7b:4b:54:b6:4d:07:
         8b:61:b5:8b:d7:d8:bc:43:34:df:de:fa:4d:6f:75:c2:bf:14:
         45:dc:f7:9b:c8:ad:a4:c0:9e:62:a9:c8:d5:7a:4f:5f:5d:6e:
         ba:51:62:1c:cb:36:c8:64:02:31:07:9e:69:3b:e4:4b:be:31:
         4a:9b:b2:0e:6b:7c:db:84:a3:82:c2:c2:f2:fe:e2:d1:a7:f0:
         b9:36:59:d8:14:e9:06:e2:46:e7:03:e0:a9:c4:75:82:6b:6d:
         7c:1e:1a:c3:f8:60:32:83:4f:25:73:69:51:49:d8:bb:29:29:
         08:e3:35:32:ce:b7:b4:6b:e4:c5:e8:8c:97:9b:07:b2:08:b8:
         5c:59:c4:47:08:ee:32:6e:55:02:0e:1c:fd:ee:af:b6:c2:cf:
         a7:aa:1f:1d:bc:40:60:8f:d0:d9:ae:86:50:ee:ad:3b:8e:8a:
         a6:ca:6d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:14:09 2025 by rpki-client