Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
File:                     pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json)
Hash identifier:          v+txBmPBsOFQF4Ir6kUFUjgqY4fxPmPtlxt8ysAFEKg=
Subject key identifier:   1E:BB:B0:58:50:92:79:78:E7:50:FE:A8:C9:56:F3:E2:D7:89:07:69
Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
Certificate issuer:       /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Certificate serial:       0194BD4E5B134CFE365367246F64C28CDCDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 17:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:16 +0000
Files and hashes:         1: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: lfNb5bxVG+RAq8+YW8BD/fL3H1S+ZpgARAm82TegpXU=)
                          2: vUo_vlJ6sLUoSusR9Owa3qVO6yc.roa (hash: tQbWOVu74034awYo0QKVFApUcQf9SPwefFwA/Lt3iQE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:5b:13:4c:fe:36:53:67:24:6f:64:c2:8c:dc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
        Validity
            Not Before: Jan 31 17:00:16 2025 GMT
            Not After : Feb  1 17:00:16 2025 GMT
        Subject: CN=1ebbb05850927978e750fea8c956f3e2d7890769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6f:bb:22:e3:48:52:28:92:24:5f:af:b9:2d:
                    8d:71:56:2a:ff:5e:a6:60:b7:d3:f1:d4:6c:de:e2:
                    69:76:e3:d3:df:d3:ce:f7:81:0c:ec:72:da:be:07:
                    14:4f:4e:ab:f7:3e:89:68:8e:1b:a0:f1:68:cd:cb:
                    1d:21:f8:62:38:92:a1:ac:00:a6:78:25:94:6b:18:
                    cd:97:1b:b1:be:81:e7:d1:f7:ab:53:92:38:7c:be:
                    bc:a5:40:90:6e:9e:ee:38:a9:ec:59:fb:8d:3f:c6:
                    01:97:c0:2b:e8:38:97:71:ac:3f:de:fc:69:fb:21:
                    f2:e8:0e:9a:aa:f1:ba:b3:e5:2d:1c:40:d8:1b:96:
                    e0:00:78:ca:df:e9:e7:3c:bc:e0:90:c0:eb:f0:e4:
                    53:7d:42:1b:5d:35:f4:cd:e6:87:0f:7a:f9:27:68:
                    a9:19:69:dc:05:94:a4:8b:e4:02:b5:64:92:53:a5:
                    73:fa:ed:ee:b8:70:25:b3:30:3a:d5:82:2d:6b:b5:
                    c2:0b:af:f3:76:f2:57:6f:25:43:bd:6d:50:3e:55:
                    df:ab:f9:af:87:8b:12:41:f5:7a:f8:80:05:4b:78:
                    cc:2b:3b:d5:b2:78:d2:f6:4d:3a:7e:a4:10:a4:c8:
                    3d:9a:5c:dd:30:64:2d:56:a0:73:b5:44:41:94:d8:
                    28:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BB:B0:58:50:92:79:78:E7:50:FE:A8:C9:56:F3:E2:D7:89:07:69
            X509v3 Authority Key Identifier:
                keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c6:52:00:c7:77:79:86:c9:d6:d8:1c:19:8e:14:4e:6d:a3:
         34:35:c4:b3:54:97:ae:be:3b:50:55:52:c8:96:55:bb:d8:fb:
         78:dc:4d:80:2a:68:16:28:91:01:a0:7c:3e:bb:c2:ea:df:5d:
         f1:15:c5:cf:d8:41:90:86:f9:09:3e:50:5e:18:d1:08:d8:a0:
         81:31:63:95:d5:4e:e3:69:f8:55:a2:d7:92:03:9f:45:90:fb:
         b7:4e:28:9a:3f:b3:75:23:8f:87:f2:a6:9e:57:5a:1c:5b:7c:
         41:07:8a:da:af:a3:56:21:59:2e:c3:95:e4:a5:ee:6c:b6:f2:
         0b:96:45:09:2f:de:d2:55:92:88:8c:84:67:d2:73:21:da:e5:
         99:c3:36:80:26:56:1b:0a:28:8a:ea:35:28:f8:dc:5d:14:d1:
         d5:7c:97:6d:77:3a:2b:76:b7:71:1e:58:54:be:f9:af:f6:19:
         d7:c2:0d:a8:1d:12:dc:90:91:38:84:f8:4f:c9:21:78:d2:f9:
         8e:c8:4a:4a:52:bf:ed:5f:99:b9:72:a2:77:0c:33:af:38:4c:
         7a:b3:b7:a1:e6:76:9f:22:87:2c:0d:50:ca:37:db:b2:0c:bf:
         1e:02:32:91:cd:73:16:34:24:ec:76:bc:19:97:34:45:15:b2:
         eb:15:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:42 2025 by rpki-client