Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
File:                     ESunl1d-pgpWGvmkWYxFBg47cIg.mft (raw, json)
Hash identifier:          DbMfoQwIeehsZunEarfyE7S/AmkjWkdy4Fxm9RRGbik=
Subject key identifier:   FF:07:85:CF:DD:72:54:0D:50:83:03:1E:C4:83:95:FF:57:5B:9F:60
Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Certificate issuer:       /CN=112ba797577ea60a561af9a4598c45060e3b7088
Certificate serial:       0194BD1782B6E251A6EF40BFE3DDEF100B6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
Manifest number:          1433
Signing time:             Fri 31 Jan 2025 16:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:22 +0000
Files and hashes:         1: 0mKnnBxNDPUWW0TdKD82TEOVdS4.roa (hash: Lo4k+eo1K7P5fia7s3jKfkvAW4fzukEV2ibTeSf86Xg=)
                          2: ESunl1d-pgpWGvmkWYxFBg47cIg.crl (hash: NL+YzVVh4N5oF4pi/oe9UB/IakvKacyvtpfJNmBTnWI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:82:b6:e2:51:a6:ef:40:bf:e3:dd:ef:10:0b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088
        Validity
            Not Before: Jan 31 16:00:22 2025 GMT
            Not After : Feb  1 16:00:22 2025 GMT
        Subject: CN=ff0785cfdd72540d5083031ec48395ff575b9f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:4e:5a:64:72:2f:83:0a:59:1f:ab:ce:84:
                    78:ca:53:d3:65:b1:cf:bb:8d:b3:a0:9a:a6:53:86:
                    08:9e:c5:a0:bb:5b:aa:fd:79:b7:4b:d1:5b:e4:ba:
                    c2:de:b8:19:10:c1:d7:78:52:f1:b3:a3:4a:40:7e:
                    d7:81:2e:28:d0:d6:41:7c:75:99:cb:28:24:df:0d:
                    2b:10:02:65:0b:d0:01:af:57:cd:67:e1:84:4e:fd:
                    f5:37:08:64:d3:5f:fa:81:6d:ad:af:bd:1f:16:6d:
                    c9:83:34:bd:95:e3:77:54:cb:00:9b:5d:77:12:e8:
                    af:c0:bc:ae:97:ba:c0:9e:c6:7c:8e:1f:83:39:fb:
                    dd:a5:ba:a2:29:21:6c:42:23:09:67:46:2f:f1:94:
                    bc:e6:81:60:f9:a6:04:ef:6b:1b:78:18:b7:35:f2:
                    92:94:23:d3:55:68:e4:64:ea:93:fb:23:ba:d3:1f:
                    a8:5c:13:cd:df:3e:ca:8b:ab:66:96:82:a1:d7:8e:
                    1c:84:4e:65:0c:c2:3b:08:a9:3c:3f:ad:7d:bd:d5:
                    75:88:26:29:3d:68:37:29:c5:37:95:41:ef:5b:23:
                    b2:da:93:9d:d2:6f:25:ec:e7:dd:52:e4:be:16:20:
                    d1:ec:9b:3b:78:49:6a:d7:a9:07:c3:42:0f:5f:e3:
                    b6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:07:85:CF:DD:72:54:0D:50:83:03:1E:C4:83:95:FF:57:5B:9F:60
            X509v3 Authority Key Identifier:
                keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:cb:45:39:62:26:d8:69:29:6b:7d:0e:14:3e:74:31:53:51:
         a2:5a:1b:5e:2e:11:8b:4d:0c:53:f0:59:5a:b5:b9:40:c4:76:
         40:ef:67:55:ac:b1:fd:19:b6:97:cd:fc:b8:c5:7e:af:49:de:
         00:e5:44:06:68:fb:ea:a8:c0:1f:8f:c9:61:44:e7:cb:cc:c8:
         35:fa:ad:1e:9d:78:71:39:91:91:fe:59:a6:38:05:05:ed:fb:
         87:08:b2:f6:6c:84:9f:be:a9:9a:e0:77:ef:8c:5a:b6:db:6e:
         62:fa:f2:79:61:33:08:a0:19:33:b9:0d:db:93:4f:17:44:41:
         78:da:41:62:0f:8b:ec:dd:36:3b:80:2c:55:af:b8:86:16:4c:
         e2:6c:25:5b:2b:51:b0:f5:23:57:ac:e8:2c:50:09:32:1d:82:
         52:f5:ce:52:74:45:1e:96:27:dd:f7:25:9b:e8:5f:de:68:b0:
         3f:e2:9c:16:8a:d3:ee:6a:f9:3d:bc:0d:92:2a:12:62:88:96:
         4b:cb:4f:67:87:22:02:9f:83:9d:58:92:2a:87:a9:dc:50:74:
         5f:20:ff:40:28:e7:dc:1d:79:20:81:6f:61:c3:fa:4a:89:ce:
         6b:3b:34:0f:18:ca:52:92:83:e4:57:fc:5f:f6:6f:a2:85:f2:
         d2:8b:de:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:17:43 2025 by rpki-client