Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
File:                     RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft (raw, json)
Hash identifier:          wAXpYMh5AsQ5eqSdLxUFuKycue2iHVLu02n/qlh5vTA=
Subject key identifier:   72:96:E2:0C:F5:CA:6A:73:7A:36:EE:F1:34:2B:B4:E8:5D:C3:7E:D1
Authority key identifier: 46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
Certificate issuer:       /CN=46224dc9396e580ff7120f257353a70c72379c93
Certificate serial:       0194BC04F6D1BCCF3C7645DCD339820F5B56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
Manifest number:          1400
Signing time:             Fri 31 Jan 2025 11:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:29 +0000
Files and hashes:         1: 237nnYKB7i2VaJ7m52nEdfcb0Ac.roa (hash: dLnbAiBZCTSW/Pqjq4dBaGgbhjyCcK3BPz7BIZYga/k=)
                          2: RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl (hash: sj3dEwBudavLaa8jCmN+ohCXINfl5j/1zt4FJKKCLOM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:f6:d1:bc:cf:3c:76:45:dc:d3:39:82:0f:5b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46224dc9396e580ff7120f257353a70c72379c93
        Validity
            Not Before: Jan 31 11:00:29 2025 GMT
            Not After : Feb  1 11:00:29 2025 GMT
        Subject: CN=7296e20cf5ca6a737a36eef1342bb4e85dc37ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:d3:b2:1c:82:42:f3:95:24:cd:af:bb:c3:
                    b6:dd:e0:47:77:7d:ec:59:64:dc:dc:f1:44:07:06:
                    b6:59:df:ab:e9:2b:14:bb:d4:3a:1d:65:1f:7b:72:
                    81:63:24:8c:e5:7a:6c:fa:01:13:be:8e:60:f2:b7:
                    0b:05:0e:a3:5e:1b:60:6b:7b:be:a0:e5:20:54:19:
                    95:f6:e3:4c:2a:f8:69:b6:eb:63:36:dc:a9:c2:0e:
                    98:22:03:e9:59:e3:e8:c3:1c:75:d6:bb:9e:20:32:
                    fa:81:ad:38:0d:ed:c5:1c:1e:e7:55:fb:9a:12:0a:
                    4a:c7:9f:dd:05:d3:40:58:b0:e9:6e:dc:24:c5:01:
                    4f:b3:da:b7:33:84:fd:49:8f:7d:ef:31:d5:2e:ed:
                    c0:77:97:8a:e5:8e:7c:86:7f:ee:f8:7d:0e:a1:cf:
                    8e:74:42:2b:66:34:fb:f9:39:dc:6c:7e:aa:32:bf:
                    09:0c:1c:22:70:55:c3:29:11:df:e2:70:de:92:9d:
                    50:30:2b:55:a6:30:e2:e0:03:a9:18:bc:65:c8:76:
                    f9:e8:10:06:3a:74:ea:a8:c8:7d:58:da:bd:f9:68:
                    59:e5:bb:20:1e:b5:76:b5:1b:46:63:03:af:49:b3:
                    90:6d:04:1d:7d:c8:01:ca:fd:87:40:5f:ce:42:45:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:96:E2:0C:F5:CA:6A:73:7A:36:EE:F1:34:2B:B4:E8:5D:C3:7E:D1
            X509v3 Authority Key Identifier:
                keyid:46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d5:e8:e4:2d:d3:96:6c:f2:0b:ac:19:e8:5d:7c:6f:6b:1d:
         4e:62:2d:78:5b:f2:3d:1f:cb:43:07:e1:0d:c6:e7:05:b7:10:
         e7:45:8c:32:43:f3:8c:0a:af:6d:05:65:b5:71:9c:10:12:c4:
         5c:32:48:e5:90:e6:4b:cb:a8:86:66:81:d5:94:51:aa:a7:29:
         73:8e:b2:6d:22:24:78:a6:32:a7:e0:a1:95:06:79:e4:66:26:
         57:5d:35:25:61:4b:e1:04:37:57:bd:95:ff:39:98:c9:bf:33:
         6a:30:78:f2:f3:29:c0:7b:a9:e0:0f:c7:9f:52:02:2c:3b:c9:
         0f:96:18:47:d6:d5:2d:df:3d:88:6a:60:e3:64:50:c2:1d:f1:
         f3:46:20:e1:de:3e:70:c7:bf:3e:34:b8:ee:92:c1:c6:ef:41:
         2a:b5:88:d0:a8:95:a2:e2:f6:02:4a:6f:cc:c6:a7:a5:48:95:
         4f:c4:1c:27:c3:28:b7:c7:13:24:48:88:b3:91:36:6b:c3:e5:
         94:4c:18:8a:53:d6:38:85:e3:4e:ca:36:34:37:e2:2d:3f:5e:
         b1:6b:13:30:f7:25:e1:d8:cc:a9:db:6d:dd:28:f6:a6:3d:18:
         03:3d:1d:5d:b0:d3:40:71:96:8a:15:93:47:42:a0:02:df:4c:
         68:1b:d3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:31 2025 by rpki-client