Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File:                     3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier:          srfSFVBjSCvS2b1ad6YALUNWRAQOxYe5i3j4bA/OklM=
Subject key identifier:   16:EE:5C:C2:1F:94:36:1E:76:B2:A6:07:1F:9A:F2:17:67:A5:B0:A1
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer:       /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial:       0194BC3C0BB66EECA0E0E214BE83F58D186B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number:          02F5
Signing time:             Fri 31 Jan 2025 12:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:39 +0000
Files and hashes:         1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: bjlUTEuCm7Cx9uLwmRjr62qNJtNbZzwgKzArXP7IPTs=)
                          2: Mvk_oqElVRdnhvvvd2d0ON2M6O0.roa (hash: h/FNSiffcYfhZT3VlgEkLi4vidisAmOMBIjfYdnqCDs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:0b:b6:6e:ec:a0:e0:e2:14:be:83:f5:8d:18:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
        Validity
            Not Before: Jan 31 12:00:39 2025 GMT
            Not After : Feb  1 12:00:39 2025 GMT
        Subject: CN=16ee5cc21f94361e76b2a6071f9af21767a5b0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:a6:88:61:2f:b2:b5:b4:67:6b:f3:cd:03:
                    40:39:2a:3f:a0:8e:a2:5e:94:00:ab:08:20:96:6d:
                    82:88:5a:4d:0e:d4:36:c8:e6:3c:7a:66:3b:01:a7:
                    15:18:90:25:4b:95:4f:e3:49:40:03:5e:63:81:6f:
                    63:eb:c7:dd:fe:c1:e3:c6:c7:fa:f7:7c:4c:cf:26:
                    c9:8c:af:33:2a:c9:18:5c:5c:7a:db:01:0b:eb:e5:
                    e2:d2:c6:64:f9:1d:04:34:04:40:29:f2:7a:b5:4e:
                    90:6b:56:bb:1f:19:af:0b:d1:d1:5f:92:6c:44:2a:
                    87:10:04:5d:3e:0d:8d:95:98:86:fd:64:e0:85:78:
                    a5:3d:ee:2c:a0:78:c8:c6:fa:c7:07:6f:05:6b:c0:
                    8a:29:a9:c0:e0:7e:5e:03:2f:2c:6a:5a:aa:31:ad:
                    f2:7a:94:ed:a1:5f:8a:fb:ae:18:4f:b7:50:f2:b0:
                    f9:5f:65:2b:3f:e7:4a:e0:61:26:5b:de:18:90:bb:
                    9b:9e:52:34:90:f7:c1:7b:69:ff:6f:e3:4f:68:4c:
                    a1:8e:80:9a:f3:02:83:9d:87:d8:b9:a6:bb:48:4e:
                    31:3b:46:b6:04:e2:14:5b:c9:6a:de:2c:5f:87:45:
                    ac:74:4a:e3:93:3d:42:45:fe:3a:a8:2c:86:6b:e6:
                    ca:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EE:5C:C2:1F:94:36:1E:76:B2:A6:07:1F:9A:F2:17:67:A5:B0:A1
            X509v3 Authority Key Identifier:
                keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:dc:76:90:cc:99:a1:d8:c2:7d:3c:06:cc:13:0c:c4:a5:ee:
         0c:48:83:e9:31:56:88:ff:64:d5:2c:fc:8a:ea:45:9b:c0:92:
         0d:b0:2c:ff:7f:34:87:a5:3a:63:c8:28:92:36:b7:66:85:52:
         ee:f0:39:0c:f8:5e:1b:98:4f:4f:5d:3e:0e:5b:9f:2f:32:89:
         b0:d5:cf:3e:c4:b9:14:07:9b:a0:c3:2c:30:94:85:84:46:35:
         93:52:a6:c3:0a:4b:54:fb:48:7f:d0:cf:42:c5:c9:ca:5e:63:
         ad:05:62:c6:a6:22:70:da:f8:f8:1c:1f:0f:a4:34:25:6f:9d:
         94:cc:73:6a:02:9a:a2:50:33:93:d7:5f:f9:4f:39:17:80:97:
         dc:27:f8:bc:75:9e:ea:50:1a:e4:2f:5c:1b:66:b9:0c:68:b6:
         e5:8c:ca:a9:7f:ef:2e:83:9c:e0:10:9c:74:c3:31:87:a2:12:
         69:22:36:bf:96:dc:57:4b:b1:04:00:db:1c:de:3f:d5:f2:94:
         a6:76:2b:d4:ab:1d:eb:7e:82:f1:db:9b:9c:e1:cd:0c:9c:e8:
         a9:ea:0e:11:05:26:39:c3:1d:eb:f7:df:9e:86:2a:2a:38:de:
         47:bf:6c:bb:aa:e6:11:f4:f9:e8:4a:6e:8d:55:61:68:60:f9:
         a4:2b:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:40 2025 by rpki-client