Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
File:                     sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft (raw, json)
Hash identifier:          NycdIrVyR62XW6Il6Ss8gEzxGUr3WjYy0F8mRbVDVCo=
Subject key identifier:   90:F8:93:64:B2:CB:4E:79:4C:63:99:0D:2E:7A:91:79:6E:80:39:0A
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Certificate issuer:       /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial:       0194BC04CADC6A83A7FDCA6B351072A790FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
Manifest number:          06FA
Signing time:             Fri 31 Jan 2025 11:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:18 +0000
Files and hashes:         1: RpILInX8NStLNGo-i8gOsmzL6zY.roa (hash: FpLee9KVIm2tnuSw+HOBh77bwO/f6Y21iVU1yWYIf/s=)
                          2: bt4jZ_Fg1p7_W1scNCt1lEzJp-I.roa (hash: NTiQWaRJGSQ8lYqtebC2mqNAEmw3CSrzTGYD0GLgxFA=)
                          3: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl (hash: K+xs6cI7Xx7cAiWltx68dsPJuUeb/Ki/0kroPiriOVQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:ca:dc:6a:83:a7:fd:ca:6b:35:10:72:a7:90:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
        Validity
            Not Before: Jan 31 11:00:18 2025 GMT
            Not After : Feb  1 11:00:18 2025 GMT
        Subject: CN=90f89364b2cb4e794c63990d2e7a91796e80390a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:33:b1:78:55:1c:dc:18:97:83:9d:a3:91:
                    68:c4:a1:21:f1:28:67:07:44:97:fe:0d:0d:c2:f4:
                    12:05:63:6b:e2:56:ed:25:a7:e7:f7:1a:0d:b5:b9:
                    2a:2a:c3:ed:52:90:13:ce:a7:1a:97:47:f2:36:1b:
                    02:7e:8e:77:47:ac:65:66:8f:e0:ec:5d:95:96:df:
                    97:96:be:04:ef:3e:0e:cf:89:4f:6d:38:4f:8b:06:
                    d8:0e:c1:8e:60:aa:2f:54:fb:6a:09:1d:cb:9c:6c:
                    da:93:a1:ea:72:49:7c:ef:b1:98:6f:4e:9c:48:04:
                    e8:d5:d1:7e:87:7d:82:b0:c7:72:5e:5e:2b:d9:ad:
                    18:42:a5:f3:d1:bc:ff:36:5c:67:09:65:e1:93:7e:
                    df:ea:bc:7e:9d:a2:41:cd:01:b1:fa:b2:a2:9f:7a:
                    26:62:9f:ee:3c:42:ea:fe:67:ff:f2:7b:dc:85:9b:
                    2b:31:fc:5e:8d:ac:fa:55:cc:08:ce:a9:2b:9e:f0:
                    e2:8a:90:af:50:eb:57:c9:df:f1:59:07:cb:09:ad:
                    a1:f1:ca:0b:e3:ca:b9:70:29:f2:b6:43:11:62:45:
                    41:3a:fc:92:9e:7d:c5:2b:54:70:46:99:b0:8f:1e:
                    d3:d9:aa:72:45:fa:70:05:f4:3b:85:0d:ce:63:8c:
                    55:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F8:93:64:B2:CB:4E:79:4C:63:99:0D:2E:7A:91:79:6E:80:39:0A
            X509v3 Authority Key Identifier:
                keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:6b:37:a9:b1:39:a0:1c:fa:98:4f:33:1c:2c:3c:88:22:6d:
         d3:65:ba:3d:71:2c:34:dd:b1:d3:0f:2a:f6:b8:6e:65:d7:8a:
         17:f2:15:d9:8d:cd:aa:0c:d4:27:a7:a1:99:6a:dc:0d:d3:d3:
         fd:b4:aa:47:10:32:ee:ef:48:6a:b2:92:c8:70:b1:7d:55:94:
         6e:41:7a:7a:55:cc:24:96:28:58:a2:29:ea:ce:9f:ea:f0:a0:
         e3:47:01:23:a1:c5:01:73:20:4c:4c:4a:8c:5b:af:21:8b:a9:
         ce:d0:ea:d8:b9:d2:95:07:6e:e6:ea:89:0e:13:36:e3:37:d9:
         4b:9b:7c:ce:fe:40:4a:cf:40:a6:32:0c:24:fb:74:40:d0:4f:
         37:ef:d6:95:e1:6a:09:f5:05:dd:a0:41:a2:76:70:71:05:81:
         a3:64:72:91:da:cf:ae:42:75:aa:7e:05:57:4f:a8:ae:f5:43:
         a3:46:1e:54:1f:b7:9a:3f:b2:80:e1:55:4b:a2:b7:80:92:a0:
         4a:ce:a5:dc:61:11:39:fb:37:d5:48:46:11:61:53:c1:ff:7a:
         9e:5f:06:a3:7d:d5:ba:37:c5:ec:cd:e2:a5:37:d5:b8:2b:04:
         92:0e:c7:6e:66:af:bc:97:86:88:fa:63:fc:63:4c:bc:c4:d4:
         9a:04:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:32 2025 by rpki-client