Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
File:                     N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft (raw, json)
Hash identifier:          LDwB0w+wIfzDT14khoAzyq70CMDaiNdttPo5Pika+tw=
Subject key identifier:   D3:F5:C7:73:EA:D3:FB:52:D0:29:FD:9B:DB:3B:29:3F:83:CB:E3:87
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Certificate issuer:       /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial:       0194BCA9E6C4D6F2982218BAA20B08FC8830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 14:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:38 +0000
Files and hashes:         1: MstP95zOzuruszF1xnk5WwohZes.roa (hash: Dd3ffiYJWQ1ODq8HBmZJ5uvdbho1vmy4ZZ9l1KbRzqQ=)
                          2: N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl (hash: hnc06oB7kRn6YyxEP91RtDHB4dXjQ9W0dKJapx9gtg0=)
                          3: hZQ03z7hQseGqeqTK23z9sR3KoU.roa (hash: BE/vA6xe/FX485GgKXSnHBPVCcNJNeizsyA4atJDjzU=)
                          4: mZJe0dOtlVGQXR5nCGtTxDjtYUg.roa (hash: vhmVQoIhA3FIJBKAD6bm8klXoG45fnkM5F0sTYLfvS8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:e6:c4:d6:f2:98:22:18:ba:a2:0b:08:fc:88:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
        Validity
            Not Before: Jan 31 14:00:38 2025 GMT
            Not After : Feb  1 14:00:38 2025 GMT
        Subject: CN=d3f5c773ead3fb52d029fd9bdb3b293f83cbe387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:9a:62:8c:1c:10:6b:7d:f3:90:a2:6e:3b:
                    99:95:d4:6a:40:47:ea:fa:d0:d7:8a:a2:02:28:cb:
                    68:e4:96:4a:f7:1c:39:10:f8:d9:e9:cf:6f:b3:ca:
                    e7:11:29:1e:83:dd:06:b5:25:15:fb:5c:6f:93:86:
                    31:03:e6:7e:68:46:a6:58:9e:92:57:25:49:71:e1:
                    67:8d:42:32:40:12:bb:3c:95:ef:b6:c3:4f:62:b4:
                    65:24:d4:e3:fc:c2:70:1d:00:85:54:53:f4:9d:d3:
                    9c:89:c3:e7:45:c6:cf:31:66:18:f3:ea:3f:45:e3:
                    cb:fb:51:02:57:a4:70:1b:63:0c:44:25:71:dd:1f:
                    52:00:6f:e4:4a:5e:e7:a5:cc:83:ac:7e:32:4c:f3:
                    c8:7d:bc:14:9c:28:cd:de:4c:b6:37:83:e6:4e:94:
                    ee:fa:7b:a1:3e:4e:1e:4c:11:ea:ca:f2:7f:2a:3b:
                    6a:9d:82:cc:ef:a2:a2:cb:ef:6b:0f:98:d5:d4:79:
                    40:7c:7e:cf:73:cb:21:37:1d:8f:f5:dc:4e:dc:c0:
                    ca:ab:64:31:6a:2b:6e:ab:14:cd:f2:76:d7:e9:69:
                    ac:8c:e0:01:87:8b:00:46:16:2a:d2:39:90:ab:38:
                    1a:01:d3:b6:08:84:83:ad:15:0a:f2:45:5e:b1:67:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F5:C7:73:EA:D3:FB:52:D0:29:FD:9B:DB:3B:29:3F:83:CB:E3:87
            X509v3 Authority Key Identifier:
                keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:34:fd:02:da:c3:54:10:9f:4e:07:b3:f3:83:17:c9:9e:31:
         fb:d3:6f:50:2a:7b:a0:c1:c1:f0:e4:3c:dd:18:83:ba:a6:31:
         5f:c2:10:61:3e:15:06:9a:51:32:f3:cb:c8:db:19:63:26:69:
         81:72:7f:f3:b8:33:74:04:71:c8:72:93:2d:cc:9e:bc:b5:46:
         5b:5c:d9:06:0c:a7:f8:a1:85:51:fa:83:41:af:78:c8:b7:3b:
         de:39:11:83:72:30:41:d8:a1:3a:ee:aa:f5:fb:a3:9c:9f:a7:
         fe:6b:87:30:60:61:6e:cb:17:23:a8:bc:36:7a:4d:1a:7b:5d:
         af:75:cf:3a:86:34:33:bd:10:6c:df:a2:39:0b:12:1e:1d:97:
         e5:2d:c0:14:79:aa:15:00:27:a9:88:93:da:58:72:8a:39:55:
         c8:5d:39:fe:4d:8d:ca:30:19:56:96:87:c7:31:77:1f:9f:1c:
         ee:3c:d9:ad:9c:ba:85:1f:13:64:ae:fe:17:a9:18:a0:3d:c3:
         d7:68:e4:33:89:22:31:bc:40:a9:aa:a2:1b:d3:4b:8d:9e:71:
         20:90:26:14:14:db:70:d8:35:5a:89:e6:c7:15:b5:06:e1:dc:
         5a:c3:8c:3f:a3:58:72:00:1f:39:82:95:10:30:7f:c1:17:de:
         05:b4:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:03 2025 by rpki-client