Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
File:                     TxSbhH0xKT9wHhz5ndjKDruwtb0.mft (raw, json)
Hash identifier:          c4oPpgzINCNN2dFAu6MiX4tkEfFxXod84ygigQ1SkEs=
Subject key identifier:   06:F4:84:65:81:FD:64:58:B9:BF:7A:3E:02:77:CE:F2:AC:CF:EA:96
Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD
Certificate issuer:       /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
Certificate serial:       0194BBCE989FCABD4CB0AAD11E3EE2847B4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft
Manifest number:          0D85
Signing time:             Fri 31 Jan 2025 10:01:06 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:06 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:06 +0000
Files and hashes:         1: IyhkNaIs3qTvuGaX5ox1MpjaGj8.roa (hash: 6i+xa2CzH5AfGrHLBcHql63DVH+1xXl8pX8U1Gdvh/4=)
                          2: TxSbhH0xKT9wHhz5ndjKDruwtb0.crl (hash: ZKWvokbngOF21mCc6+kU1PQHioXvq2KU2bql1ggPdsI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:98:9f:ca:bd:4c:b0:aa:d1:1e:3e:e2:84:7b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd
        Validity
            Not Before: Jan 31 10:01:06 2025 GMT
            Not After : Feb  1 10:01:06 2025 GMT
        Subject: CN=06f4846581fd6458b9bf7a3e0277cef2accfea96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:e3:3f:52:67:e1:6d:58:c2:11:4c:bb:b8:
                    ff:67:99:24:b9:f6:6d:31:36:bc:7b:28:97:44:2e:
                    68:4f:46:47:73:ce:b2:7a:9b:1b:41:5f:42:34:32:
                    e0:52:d0:ca:4d:63:8c:8b:8e:01:78:d2:fa:8f:1d:
                    89:bb:18:a5:e9:61:f1:81:67:f8:8b:13:6b:49:51:
                    73:f3:37:5a:a7:d5:9b:fa:6d:98:35:9f:63:8e:91:
                    ef:b5:e7:ee:34:8d:6d:3d:7d:3a:eb:53:a1:58:77:
                    4b:61:e5:02:4a:c8:dd:02:87:d6:64:4e:d7:6e:b1:
                    4e:be:88:b1:65:31:cd:fb:44:47:41:38:dd:c5:bb:
                    ad:32:97:25:7b:d3:ff:9d:d8:4b:f4:bd:10:0e:14:
                    4b:2e:ab:58:80:4f:a1:77:d7:eb:6e:1b:84:4f:dd:
                    4c:26:15:cd:18:01:8b:31:17:24:21:af:84:7c:79:
                    71:24:ef:4c:0e:f7:5e:5a:e8:cd:3e:53:da:44:b5:
                    ad:6e:16:5a:37:8b:f5:e7:38:3c:66:e0:f5:7f:fd:
                    99:1d:48:64:c9:46:ed:4c:1c:a7:11:26:80:63:54:
                    c9:c3:60:98:e0:26:6d:2f:a4:ee:9f:7c:46:3d:77:
                    26:3c:09:c6:9d:01:68:23:d7:50:0b:6d:59:b3:f1:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F4:84:65:81:FD:64:58:B9:BF:7A:3E:02:77:CE:F2:AC:CF:EA:96
            X509v3 Authority Key Identifier:
                keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8d:4f:32:fd:85:26:f4:d3:f5:40:3b:aa:dc:df:25:01:f1:
         90:5a:2b:c4:18:ce:51:a6:d2:eb:bd:7d:4f:2b:33:20:cd:c1:
         29:eb:15:2b:e6:d4:19:d3:95:b6:07:be:ff:07:d2:81:53:c3:
         2a:b3:80:17:54:25:13:39:a8:08:7f:1e:5c:ae:b7:8b:af:ad:
         68:e9:af:a1:1e:15:93:3c:1f:d1:f2:ba:01:92:59:4c:0a:e3:
         95:9b:57:3e:54:3f:d1:9a:27:c1:96:fa:b9:c2:58:9a:c1:21:
         2d:1b:e8:49:82:aa:0f:72:1a:24:94:11:58:94:b1:71:a0:cf:
         72:36:94:99:e0:4b:c5:a2:89:3f:2d:68:0f:be:4b:28:c3:d4:
         e8:e1:52:cd:33:b9:04:88:39:b4:11:f0:bc:b6:3a:55:76:b5:
         c1:ad:80:08:a0:98:99:be:60:28:64:24:c0:53:91:bb:19:e6:
         84:e0:9e:7e:3b:29:0c:81:cc:c6:ad:03:d5:66:98:c2:02:17:
         f4:6d:3b:a2:ff:c6:ab:b5:69:79:02:ef:fc:06:d2:f4:d5:d8:
         06:0c:3f:27:59:4b:35:df:b1:31:e7:17:8d:47:b9:ae:cf:15:
         8b:93:eb:3a:69:ef:b3:64:c8:30:e2:58:90:c6:db:dd:8d:10:
         e3:20:98:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:39 2025 by rpki-client