Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
File:                     JijMfwbqCaJH9r6enldMTze06bY.mft (raw, json)
Hash identifier:          N35LHDHDOWNLl5kdEXl+w7/ja76e/M5UoEs66pyM8sU=
Subject key identifier:   14:B2:5A:F0:E3:C6:5E:CA:B7:2B:1B:7B:FB:80:33:74:5B:B4:C2:1D
Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
Certificate issuer:       /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Certificate serial:       0194BD17A109B8D71623EB1201E6BE242B76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 16:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:29 +0000
Files and hashes:         1: JijMfwbqCaJH9r6enldMTze06bY.crl (hash: n1nXACsdON+evF+JB7slMSpG9Rx6sv+Ugg5xqp6/3TI=)
                          2: hwIYyALOwoBN5zxSDcMvXKZuEhU.roa (hash: UgZLdR3szHuIjLGcrVjUdsIwYk5m69uSb6Pgyz7tXrM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:a1:09:b8:d7:16:23:eb:12:01:e6:be:24:2b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
        Validity
            Not Before: Jan 31 16:00:29 2025 GMT
            Not After : Feb  1 16:00:29 2025 GMT
        Subject: CN=14b25af0e3c65ecab72b1b7bfb8033745bb4c21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:05:20:d8:39:43:8f:f0:dd:c0:c2:d7:af:bb:
                    ab:dc:02:2b:32:51:9c:62:5b:3d:cf:9d:24:18:32:
                    af:36:f4:0c:9e:ee:21:45:45:c5:61:73:f2:4b:c6:
                    4f:6f:b4:90:64:70:95:b4:a6:4c:4a:19:8f:63:4b:
                    ad:dd:fd:c1:75:d7:f8:51:36:13:ba:c5:ed:d6:f8:
                    ae:e6:21:1c:81:ae:90:f6:90:9c:7a:66:3b:e4:9a:
                    62:33:ff:32:1c:4d:70:b8:fc:9b:4f:be:73:3a:e0:
                    6b:8c:29:ce:c3:59:7b:26:7b:3b:ce:2b:a1:83:d3:
                    98:e8:2b:65:50:c7:52:3b:a7:40:57:3e:31:6b:c3:
                    61:e6:43:37:0b:0b:d6:d0:cd:23:07:09:1b:d3:0a:
                    68:2c:b7:87:ca:f7:1a:b0:26:07:bb:f2:a8:b8:27:
                    44:04:25:ce:7d:a5:2f:21:86:94:8c:7b:c4:e4:cc:
                    22:48:6a:1a:16:1d:55:07:da:f2:8b:8e:b4:37:39:
                    48:29:98:32:c4:1b:84:3c:cc:31:5d:e4:e9:65:e2:
                    41:ef:22:43:c8:bb:63:09:36:71:ed:c8:0b:04:93:
                    dd:33:38:76:a0:fd:d4:44:35:fa:ff:a2:76:c2:54:
                    49:ac:53:ea:3a:32:48:14:d5:8e:63:c2:e5:d0:c1:
                    63:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B2:5A:F0:E3:C6:5E:CA:B7:2B:1B:7B:FB:80:33:74:5B:B4:C2:1D
            X509v3 Authority Key Identifier:
                keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6e:b4:66:79:5e:fa:45:19:05:24:ea:e3:6f:c0:9a:3d:2e:
         03:44:1a:75:8d:b3:c1:30:2f:66:71:68:f5:b2:89:a9:68:29:
         e5:a8:d2:0f:ac:73:4a:67:50:7a:aa:d4:f1:f9:5d:1d:cf:37:
         16:ff:99:6b:7f:ed:ed:ee:4b:63:b9:7d:c5:2c:54:0c:75:0d:
         1c:73:5c:5f:3f:ef:0f:16:e5:5e:5d:59:65:a2:6c:ec:b6:be:
         38:81:2b:b5:e3:44:ca:2b:50:0f:3c:d2:45:1d:74:ca:9a:6f:
         27:4f:54:23:d0:44:72:fe:90:bd:a7:45:29:f4:f1:10:e9:f2:
         69:2b:ad:f7:d1:69:c3:5e:16:29:4f:d7:84:6e:a8:af:c7:7a:
         62:db:41:3b:29:45:c7:a7:8b:92:b5:ce:25:02:09:45:1d:de:
         37:d3:59:ca:46:ff:bb:dd:2f:71:58:3b:4a:ae:c1:26:b8:cb:
         f2:82:9a:ce:08:d7:98:8e:0c:76:33:0d:02:31:9e:a0:15:88:
         a3:44:58:63:05:4b:d3:9b:5c:d1:e7:87:d0:aa:21:d1:98:b7:
         fb:13:14:c2:02:11:d8:21:bd:9a:1e:a8:f8:60:62:3d:0d:0e:
         9f:97:c6:b9:bf:71:8a:39:c0:50:89:ab:41:6e:20:59:dd:1b:
         b5:ee:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:06 2025 by rpki-client