Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File:                     jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier:          9zHm22bL8HFS+uX7kGl6e+xn9dm24K+Q96t7we94xZ4=
Subject key identifier:   90:40:35:A3:05:92:04:9F:6C:6E:7E:B7:97:73:FC:E6:4B:F4:48:12
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer:       /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial:       0194BBCDCB0BC0C8E5E2D04A192C7EFA7DF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 10:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:13 +0000
Files and hashes:         1: 6xQfGOt_4QRi194ctt1Yy_IpWvk.roa (hash: Zeq/X7clOOaPFxvhWK8RPC5T2Ckw08yRW0DPBjzvh6E=)
                          2: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: ya9ZdAHV21hw0lsbGyXQZvDkSamHXk0rHay2ik6iFAI=)
                          3: nMDCAx4S7BvyRseCP1AtruhoXlQ.roa (hash: MzKXqieiYhEALeqU1AUv5CMaIkFtOJxEDtJDUquvAg0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:cb:0b:c0:c8:e5:e2:d0:4a:19:2c:7e:fa:7d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
        Validity
            Not Before: Jan 31 10:00:13 2025 GMT
            Not After : Feb  1 10:00:13 2025 GMT
        Subject: CN=904035a30592049f6c6e7eb79773fce64bf44812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2d:d7:a6:5b:40:fe:b7:38:7a:69:9f:2b:56:
                    bb:6c:ff:e7:20:de:5d:d4:1a:72:65:4a:fb:b2:fd:
                    0b:1a:15:57:6e:9b:a5:63:3e:84:d1:55:0a:52:5a:
                    32:ba:5a:d7:99:7b:6b:b9:d2:e5:16:b4:ac:98:e7:
                    1d:d8:ed:29:35:4a:c6:b7:e6:11:a2:f5:9f:d1:a6:
                    a5:75:22:a1:36:cc:1d:b7:47:96:bf:cd:bb:5a:5b:
                    dd:c8:a3:e4:d8:8e:f4:e6:87:a7:f4:27:e0:33:74:
                    dd:31:f5:3a:f0:a1:b7:43:af:b8:19:1a:de:75:75:
                    e1:14:0e:81:1f:d3:5a:28:bb:b4:b2:d3:57:8f:9d:
                    04:9c:a4:c0:47:fe:a2:e0:25:91:db:13:ba:72:e9:
                    b2:68:fb:ce:17:11:ba:65:c9:0b:4e:87:33:57:42:
                    67:e1:17:d1:be:76:6a:47:50:44:37:68:23:c2:e2:
                    54:37:b0:a8:e9:8d:c6:cf:10:7c:1b:ec:dc:8a:32:
                    2e:b0:b0:eb:24:92:cc:16:f1:89:90:1d:56:49:02:
                    e2:da:1d:0a:2b:b4:80:74:a3:6c:81:90:03:50:2c:
                    63:2b:60:b9:1d:46:69:9f:c4:a6:ba:9e:26:de:55:
                    ba:3b:40:9c:39:3e:07:f5:73:b3:72:cc:2f:86:95:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:40:35:A3:05:92:04:9F:6C:6E:7E:B7:97:73:FC:E6:4B:F4:48:12
            X509v3 Authority Key Identifier:
                keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e2:02:15:6d:68:be:cc:78:44:6a:5d:79:d9:a9:10:24:f0:
         69:6a:0d:d4:c6:26:b1:5d:f9:b0:46:f4:05:63:3f:fd:08:04:
         f7:57:ba:2e:bc:48:4e:b0:71:b1:97:c3:d4:72:19:a5:1a:3c:
         f4:36:41:05:85:69:aa:d9:a3:f3:68:32:3d:ac:16:56:b8:d8:
         50:c1:d8:cb:b0:64:8a:4e:18:ba:2f:0d:d0:2a:12:76:44:f3:
         2e:7f:58:e1:55:13:cb:a7:ec:70:64:53:90:28:09:89:bf:97:
         b3:01:65:93:c6:67:a2:bc:bf:6a:ef:f5:65:90:20:44:4e:e3:
         ac:db:65:90:5d:56:17:e3:49:f5:33:0c:39:7d:70:59:58:3e:
         09:3e:16:15:d1:d7:17:44:09:76:ef:49:96:dc:ca:a6:be:54:
         bd:fa:49:61:ae:74:40:bb:ac:82:68:6f:8c:05:12:42:e1:c1:
         14:6d:31:35:13:83:90:74:d7:1c:87:54:ba:1d:e4:8e:bd:32:
         0d:db:23:0d:81:9e:2b:3f:d8:d8:df:ea:72:2e:a9:22:cb:57:
         b4:88:e1:c7:7e:81:75:a7:a5:1f:b8:63:f7:cb:41:ba:78:b7:
         e3:08:df:b7:01:9a:1d:d7:a8:2e:60:1b:4d:e7:6e:94:e4:ae:
         26:12:aa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:20:31 2025 by rpki-client