Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
File:                     qw8tGCnW-40kf6TpZY6hfwbACwU.mft (raw, json)
Hash identifier:          HP+P2Mzq9RWTFMieHD6mIWxmYzNYGE+PH3KYqUFycQs=
Subject key identifier:   93:74:1A:52:4A:16:C9:9E:FE:15:1B:5F:8B:EA:7B:E3:34:8C:1F:53
Authority key identifier: AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
Certificate issuer:       /CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Certificate serial:       0194BD859ED028275862241D3A624F4D10F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
Manifest number:          02C0
Signing time:             Fri 31 Jan 2025 18:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:38 +0000
Files and hashes:         1: OUpskfGQwP1azsM6n4Ec-VCqNso.roa (hash: +d2WLz7J+vMS5D/Rs6fGhF8erps5E2C6DQvq3JVrWbY=)
                          2: qw8tGCnW-40kf6TpZY6hfwbACwU.crl (hash: hfD8yfNiR5vEJUy190O68t4gMBobHeQ0Z4H827/a4bU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:9e:d0:28:27:58:62:24:1d:3a:62:4f:4d:10:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
        Validity
            Not Before: Jan 31 18:00:38 2025 GMT
            Not After : Feb  1 18:00:38 2025 GMT
        Subject: CN=93741a524a16c99efe151b5f8bea7be3348c1f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:29:c4:dd:89:0a:69:b6:96:6d:69:de:09:67:
                    1f:a9:6b:53:6e:d2:89:67:34:e4:21:65:f4:61:c0:
                    34:7b:b2:af:88:da:f5:0a:21:f7:fd:08:61:af:b1:
                    89:d1:62:87:3c:71:3b:b0:57:c3:97:8d:e3:f8:25:
                    9c:60:d3:2f:6a:26:cd:5c:34:f1:7a:f4:5c:f6:b6:
                    ec:49:62:62:ee:e5:86:c6:27:da:3c:5e:41:c2:08:
                    d9:79:52:fe:a2:60:e2:c4:20:84:da:f2:97:d8:94:
                    6c:6c:a3:c0:f1:13:7e:57:e2:80:dc:6f:06:a2:d5:
                    be:86:33:9f:3a:7a:3a:12:6c:6c:0c:dd:be:e8:68:
                    4d:6a:45:b6:14:82:f6:bf:44:66:e3:f8:60:e4:c0:
                    76:3e:14:6b:a8:88:42:95:80:ee:7c:48:5e:b7:ca:
                    61:63:d7:cb:e1:ed:66:c4:0b:f8:95:2d:26:19:05:
                    89:89:2d:ad:47:72:f9:6e:8a:60:7c:04:45:a7:81:
                    de:41:7c:06:91:30:49:f3:53:6d:7a:81:73:ff:2e:
                    e5:0f:d1:a2:56:ec:14:fd:d2:02:c8:24:fb:82:9c:
                    2a:ea:01:e6:57:77:47:32:fa:c8:e7:3b:21:a7:9a:
                    bd:82:20:b7:d3:55:ea:72:f9:3d:a5:cd:15:fd:42:
                    50:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:74:1A:52:4A:16:C9:9E:FE:15:1B:5F:8B:EA:7B:E3:34:8C:1F:53
            X509v3 Authority Key Identifier:
                keyid:AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e8:3e:52:46:9e:99:17:54:ee:7e:23:2c:22:6d:69:77:94:
         80:22:17:2e:b4:95:62:e3:3f:e3:72:af:ca:82:72:16:d3:d5:
         bf:7a:50:be:f1:85:b1:74:a6:68:f5:c6:09:21:41:46:6d:a6:
         6d:18:d1:3f:de:d4:ba:46:2f:ce:3e:71:02:84:0c:a5:56:1b:
         2d:ad:7c:14:a4:9b:4f:2f:1d:e4:f1:07:dd:a9:7a:ec:09:2a:
         b0:46:be:d6:38:c9:30:6a:ac:5e:2f:28:c9:d7:69:88:21:be:
         3b:af:3e:34:61:78:ef:92:74:b1:a2:90:4a:ec:90:99:d4:61:
         9d:e2:f5:c4:55:41:5a:d3:a6:bc:df:bf:d7:b9:b7:b7:b2:1b:
         40:cd:12:44:0a:35:8e:d5:a0:cc:59:bc:9e:7c:93:9f:8e:5a:
         3e:18:cf:30:67:ed:6f:75:d3:25:bb:e1:45:f2:33:b5:98:c3:
         83:a8:6c:40:9a:63:21:64:b0:e7:cd:82:ab:32:7b:05:5a:c6:
         8d:32:8c:7a:72:36:99:bb:70:67:d1:e9:a5:40:5c:0d:a5:d8:
         d2:c7:07:0e:64:ca:fd:5b:d3:f3:a7:0c:5c:b4:52:18:1b:05:
         4e:fe:7a:55:5c:e6:e2:2e:5c:9b:40:f5:63:b4:12:08:2b:5e:
         29:c7:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:46 2025 by rpki-client