Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File:                     I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier:          6H/VKBXniyARaWLJEJeeHxax0WcFFyAcTLpJJ/jQ6XA=
Subject key identifier:   95:26:1A:ED:92:69:97:6D:E4:60:6A:B2:0E:FC:7A:54:AC:42:7B:46
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer:       /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial:       0194BC732D2AB74542BE87E1F86C3F5E8514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number:          112E
Signing time:             Fri 31 Jan 2025 13:00:52 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:52 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:52 +0000
Files and hashes:         1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: FJxcTNYrNtGPMy928c9nJBqS214KgBjjUAF1dPvGBQU=)
                          2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=)
                          3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:2d:2a:b7:45:42:be:87:e1:f8:6c:3f:5e:85:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
        Validity
            Not Before: Jan 31 13:00:52 2025 GMT
            Not After : Feb  1 13:00:52 2025 GMT
        Subject: CN=95261aed9269976de4606ab20efc7a54ac427b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:16:66:4d:96:06:6e:bd:f8:9c:17:29:6b:
                    86:ba:1b:f1:88:db:e9:95:fd:42:90:4c:1f:e2:a3:
                    48:c0:76:73:13:29:70:22:21:db:b3:a2:70:c8:b8:
                    b6:ed:1c:97:98:49:10:7b:26:6a:cb:91:be:6c:be:
                    1b:bf:b7:f3:16:ea:f5:5f:ae:de:05:d1:21:d5:76:
                    e6:07:41:8f:c6:86:ea:78:ec:06:c0:12:1b:da:06:
                    17:7b:d5:b2:f6:86:29:e4:cd:fb:0e:8a:26:98:b6:
                    3a:82:96:8f:44:5a:43:71:fe:bd:b4:21:b7:e7:bd:
                    49:3f:ac:42:b9:a0:d9:66:e8:7a:77:32:a7:87:35:
                    c8:e3:56:2d:52:e6:a4:89:75:6a:c6:67:3f:34:f7:
                    24:a2:18:07:ca:d9:08:82:dd:2c:ef:d5:57:b6:fe:
                    f7:fc:05:de:4c:1c:89:23:43:24:6f:68:6f:92:81:
                    a9:56:a6:3b:22:65:e0:11:07:64:5d:de:11:75:69:
                    17:d7:b7:c1:21:c2:d4:cf:33:51:81:3f:b8:50:f8:
                    78:ba:84:11:3b:a0:b2:57:2e:e6:c8:a5:65:68:03:
                    f9:e3:43:8f:77:6f:65:74:16:73:eb:fd:49:56:4b:
                    b4:79:c5:4a:42:74:e8:a5:73:48:f1:f3:26:e4:b7:
                    c9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:26:1A:ED:92:69:97:6D:E4:60:6A:B2:0E:FC:7A:54:AC:42:7B:46
            X509v3 Authority Key Identifier:
                keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:64:69:6b:fa:ea:81:e8:83:eb:02:5b:17:5b:15:0a:37:43:
         2c:7e:ce:75:5e:49:24:6f:d1:9a:7a:fd:88:a3:42:91:3b:50:
         af:fc:08:d3:59:6a:7c:18:53:80:6a:66:8a:d9:58:de:a1:65:
         7d:2f:42:63:e7:2b:33:be:29:57:8d:5a:e3:37:80:96:5c:03:
         72:cf:0f:70:5c:22:e0:1e:d8:d0:95:72:56:46:ab:f4:d3:b2:
         73:57:61:90:8d:08:ca:fd:e9:8d:f9:d1:45:37:a8:9c:c4:dc:
         03:f5:8a:3b:65:86:d8:44:56:2e:01:7c:e1:bf:a8:35:4c:47:
         e3:ce:4d:a1:48:27:83:49:a6:2d:4e:be:10:cb:57:ae:19:c8:
         34:22:0d:52:f0:11:38:37:14:64:1d:e6:f5:b2:8d:d6:b0:67:
         0c:1b:62:6d:eb:14:be:4f:be:f4:06:96:e7:9b:bf:ed:3f:21:
         35:50:ff:b3:de:3d:9c:ab:de:87:d0:a6:60:a2:a6:1e:7b:10:
         5a:88:5b:96:83:e0:00:95:45:21:ae:04:36:53:0d:6b:97:47:
         2c:77:d1:fa:75:2f:51:21:9f:99:ad:b3:ef:51:54:22:e4:43:
         20:63:9e:b7:cc:a8:d2:ee:19:27:d3:6d:12:a8:85:e0:7c:90:
         b5:26:d4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:52 2025 by rpki-client