Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File:                     6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier:          ohKZQBbcCvA+Aazvjf1TLUPi65BCEE1liSRYoZVuZY4=
Subject key identifier:   08:45:BC:CB:92:6D:97:E2:FB:AF:11:2F:8F:C0:27:52:4F:A7:E7:59
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer:       /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial:       0194BC72AB4E34E8D6AFE653E7B603559ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 13:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:19 +0000
Files and hashes:         1: 46IkgipDtz-gl4yWGt7SVQgrM2Y.roa (hash: xd1tjAJC9B4oABZm0yY50qZfUkL+C2aunMu/YZc9css=)
                          2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: o/UNwew9Pn8WsCPyiFa47/d47o/qv5c+fTOSFAIwspM=)
                          3: TJ9h-OeDoNwLJy-bpo2ooNFoYYY.roa (hash: uSX/ck6PKaNlZa7GifLSaPti7K35d8cXLGS+lgOUDKc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:ab:4e:34:e8:d6:af:e6:53:e7:b6:03:55:9a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
        Validity
            Not Before: Jan 31 13:00:19 2025 GMT
            Not After : Feb  1 13:00:19 2025 GMT
        Subject: CN=0845bccb926d97e2fbaf112f8fc027524fa7e759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:dd:c5:fb:b1:75:b9:3f:7f:13:c5:ed:66:
                    04:74:bc:2e:5b:0a:46:7f:fb:30:fc:e8:2e:f0:56:
                    d8:5a:09:8a:62:fd:91:a7:f6:eb:7c:ef:37:b5:5f:
                    60:3c:7d:4e:3a:ec:50:e2:9c:c8:2a:6b:9f:ef:62:
                    a6:e4:68:dd:ac:42:c8:56:4a:11:95:c8:62:d2:dd:
                    88:28:9a:36:77:95:1d:c3:ab:6d:89:7d:cc:26:58:
                    c5:ea:95:3d:06:79:b8:ec:22:bf:04:aa:25:66:69:
                    eb:98:c1:8f:33:12:ea:20:2e:5f:78:7d:e2:58:d8:
                    ec:9f:42:24:5c:aa:24:6e:69:ee:1f:1b:34:6b:d0:
                    1a:cc:32:7c:5c:66:22:d6:0b:76:55:4c:ad:9e:a6:
                    da:96:5c:8b:9c:4c:44:2b:e9:80:cb:39:9f:f3:fc:
                    ca:cc:8a:f4:7b:7a:61:19:1a:34:79:27:ad:0d:0d:
                    b3:96:82:a3:eb:03:67:d8:6a:a1:e4:38:f9:15:a0:
                    f2:6c:de:70:8e:f4:b3:c5:94:a8:a4:b9:e9:2b:b3:
                    aa:73:63:7c:53:42:cc:1d:22:3c:73:04:ff:c6:d8:
                    4b:94:05:c9:43:50:44:74:b1:f8:3a:ff:f5:10:d2:
                    12:f1:30:73:56:3f:6b:0e:84:40:76:3e:43:61:11:
                    48:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:45:BC:CB:92:6D:97:E2:FB:AF:11:2F:8F:C0:27:52:4F:A7:E7:59
            X509v3 Authority Key Identifier:
                keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:d1:52:54:f8:d8:b8:a9:6c:7d:92:64:cc:42:2d:4d:b8:b1:
         17:84:fe:31:8b:93:95:77:a7:92:8d:ba:f7:15:7c:cf:96:9d:
         cf:c0:49:a3:4c:d1:d5:4c:98:3c:1a:3c:f0:f5:c7:fd:b9:3e:
         29:e3:dc:65:08:94:34:05:cb:7f:99:66:fe:24:0a:f6:0f:00:
         43:22:37:bd:96:9d:b5:dc:99:1c:49:d7:b3:0f:6a:d7:82:84:
         bd:0f:ee:3c:e3:2a:f5:62:fc:2f:f2:c7:71:40:9f:8a:80:b9:
         9a:9b:e9:6a:f2:83:29:dd:ec:b6:a8:05:25:9a:90:1a:68:fc:
         74:98:64:6e:d3:ad:5c:e3:63:27:e6:6d:2a:02:a6:ef:fe:fb:
         c8:68:69:81:c3:01:91:da:79:98:4a:82:8d:c8:21:dc:cd:1b:
         3c:91:c2:ce:46:06:8e:ff:0c:76:52:c5:d6:db:77:27:08:04:
         da:c6:36:ca:74:56:80:10:40:f3:6c:a7:9d:25:94:7e:85:48:
         5a:83:67:1f:4a:94:fe:e8:92:5c:1d:82:e6:ee:36:e9:17:c4:
         f9:bd:e1:4d:b2:d3:7c:13:ad:9e:17:cd:c3:67:59:32:3b:28:
         d7:47:b0:44:08:ec:db:d8:32:dc:10:2c:c5:32:a9:9e:a6:b1:
         40:11:f0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:46:08 2025 by rpki-client