Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft
File:                     AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft (raw, json)
Hash identifier:          2umg/Tloo4QdApE+uuwOMcVPjHEaXXD2cNGP8eFZ53U=
Subject key identifier:   9F:DE:E7:90:B8:1D:5C:00:2B:EA:46:69:03:C9:FF:82:A2:F1:5F:6A
Authority key identifier: 00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7
Certificate issuer:       /CN=0046801e45ca1eed3f78d99277d0193f576665c7
Certificate serial:       0194BC72AF06299A0DAC8AADFC6659123AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft
Manifest number:          0C44
Signing time:             Fri 31 Jan 2025 13:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:20 +0000
Files and hashes:         1: AEaAHkXKHu0_eNmSd9AZP1dmZcc.crl (hash: WZHf1PAo4CAdWhuhOctvo6ATKLu2RvmgRgwy7afaQiY=)
                          2: xiLGUGhf0T0iqyzSwJ-LQ5BF6Eo.roa (hash: YJzbP/5C/6ILVfg0WwaPWZ9SyS6RHby3juochsRhU0U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:af:06:29:9a:0d:ac:8a:ad:fc:66:59:12:3a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0046801e45ca1eed3f78d99277d0193f576665c7
        Validity
            Not Before: Jan 31 13:00:20 2025 GMT
            Not After : Feb  1 13:00:20 2025 GMT
        Subject: CN=9fdee790b81d5c002bea466903c9ff82a2f15f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:c2:3e:10:48:f4:51:c5:47:9a:50:df:90:
                    63:d8:3d:17:c8:3c:eb:74:82:a2:ca:4e:da:fc:53:
                    3a:44:3b:9b:07:f7:b4:66:47:34:fe:0c:78:a3:54:
                    ca:6a:c4:70:31:8b:98:5e:63:75:ca:83:4a:94:6d:
                    20:3d:54:50:be:09:63:29:7f:d2:78:dd:36:41:05:
                    6d:a1:14:e7:80:66:b2:88:26:50:90:f5:2d:13:19:
                    70:5c:2d:de:e3:0e:38:5e:95:a2:3a:79:47:8e:f3:
                    d3:1b:20:5d:9a:23:01:48:3e:63:bf:2d:c4:6d:14:
                    21:a0:30:07:9c:f1:ad:8f:92:ec:ff:3f:c1:ca:a2:
                    35:e6:ea:66:3f:2a:c0:4c:34:0b:37:c6:99:99:68:
                    9d:1e:df:5f:f3:f3:1a:30:c2:72:6f:25:a5:fa:ce:
                    23:27:97:1a:ea:98:e8:ea:72:21:33:5c:5a:73:5c:
                    e1:33:88:e7:1a:3f:b8:96:a7:c5:0a:58:60:3c:fb:
                    48:21:cd:d3:43:20:cf:a9:ad:d4:cf:7f:d9:a1:28:
                    b2:9c:b0:94:81:0f:22:a4:be:30:c1:75:2f:0f:7a:
                    a6:02:3e:27:e9:32:f9:e1:42:1c:61:43:11:93:35:
                    c4:eb:ac:da:4a:3e:cf:73:14:18:3e:50:8e:34:b8:
                    39:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DE:E7:90:B8:1D:5C:00:2B:EA:46:69:03:C9:FF:82:A2:F1:5F:6A
            X509v3 Authority Key Identifier:
                keyid:00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:a5:b6:e9:62:19:f9:5d:e5:3e:7c:64:39:38:20:20:bb:92:
         ed:83:2f:7e:39:bc:a2:f8:9e:e3:fd:d9:45:b3:71:55:49:ef:
         20:25:d0:71:78:f9:b8:c1:f6:3e:fa:32:c2:7b:f7:f3:76:b9:
         58:d0:56:21:c5:67:41:1f:20:be:9b:92:5d:63:da:52:d1:25:
         9a:bf:4d:8f:f8:cc:e5:e5:0f:76:07:05:2f:ed:c2:09:a1:3d:
         aa:0f:06:e7:9d:e7:27:57:1b:7a:f6:d6:58:b0:fd:dd:e7:b6:
         73:03:5d:6b:9d:7b:c4:b2:e5:16:10:b4:c3:d7:df:78:d3:e7:
         ab:66:a4:fe:6e:eb:df:d3:07:54:c5:3d:06:e9:c8:1f:99:fb:
         25:51:87:4f:ab:c5:ef:38:1c:89:f2:bb:b7:1b:ab:69:2e:a1:
         d0:c3:62:14:62:db:cf:5d:b2:69:63:63:49:0e:88:61:a6:f9:
         a6:51:04:a5:52:98:f1:c9:c7:53:8a:4a:7d:05:a8:c3:cb:4c:
         37:d6:cb:17:08:2a:27:63:01:9d:89:bd:61:2c:2a:58:20:06:
         c4:9a:92:fb:61:19:6b:d2:67:91:56:ac:8e:e2:11:68:c7:7b:
         c2:37:b6:b8:c9:78:56:91:ee:9b:cd:37:64:45:c9:be:d5:69:
         01:b0:19:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:14 2025 by rpki-client