Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft
File:                     s57NJPMhmI3rfBncoFKk48SbYOo.mft (raw, json)
Hash identifier:          t4McU1NWUwWPefQqiXw7EBmSjSrNg83tjQFsCgamIh4=
Subject key identifier:   9C:D7:56:8B:D2:33:8F:B8:34:50:74:99:6C:AE:8E:D3:30:0C:95:DB
Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA
Certificate issuer:       /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
Certificate serial:       0194BD8532DEDE13D169BD55ABDD2B7F68EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft
Manifest number:          1449
Signing time:             Fri 31 Jan 2025 18:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:10 +0000
Files and hashes:         1: 6JZ9UH910yHAUEGFoLesp07dQhE.roa (hash: 6A7831IzFX8zPNnCTSH8sfKdbN8FCRKu/kOaOqRxzqQ=)
                          2: 8z8XE_zuJT7iRxfD3Nm7JW35RaM.roa (hash: Awo7zmRR7YufMgqjiQFtGr6JAX7ENjcIdiPBtAhhV30=)
                          3: 98vaNEm95pt-uwkA18ziAJaWi38.roa (hash: iAHScneGNquN5STpcXMFp/ADnva4h2JPLkaQ+DHaQxg=)
                          4: Nootmr_1fD6DdEiatPiPGuH10S8.roa (hash: Iq+mDaKD0pEih7QU9s0tMTAbnr2OC0dHlN8xlYA9ft0=)
                          5: OItafVoscno7FuyNNvGBp-DW6j0.roa (hash: GX87BGesq0ZALsrb7s01c+j4Bu2tQMGcbQCDBFji5sQ=)
                          6: QYMBoTP839ez6fMKYJDIpy0Y8cs.roa (hash: dcm0OYfvcaGkXdf87oK+gQ2QoJurOOn6byziNndBdkg=)
                          7: WX-zXY7_Lpqf3-w9BlOeR-P02fQ.roa (hash: TOnw01flSFnZG1U/0q4jkvWcVULoeu2jfCDPU/4ulAc=)
                          8: aSysxnkmwlKt5KafMm9eaom1Mes.roa (hash: WLfi1/mK1I3HkwHidkvn9gv6UB5TEtKdlEgaiWslQF0=)
                          9: cuCge9KM2TKAhVTi9ynWt17G8_w.roa (hash: YgXfLEGrSNrmrEYZ3szZ1Igl/AFRNg2kWhzJFGOgm+o=)
                          10: fQyJO_vQCzMCuane2mjx8wERyOE.roa (hash: DuhZxdHXSgqMA9Obqb4l5NM1Yvjmzxlhb+LLMyEn/Nw=)
                          11: jJWPnWtQI2qxAFUlmSDot_Sr3xc.roa (hash: Hq39yrXmy8b0lsDQyAYT28+gS7TtgalhpIpM7LtzlYo=)
                          12: s57NJPMhmI3rfBncoFKk48SbYOo.crl (hash: HiwTLfkbFOnYBWFzt6M8htD/uoDiErXtDWREKQ13F8Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:32:de:de:13:d1:69:bd:55:ab:dd:2b:7f:68:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea
        Validity
            Not Before: Jan 31 18:00:10 2025 GMT
            Not After : Feb  1 18:00:10 2025 GMT
        Subject: CN=9cd7568bd2338fb8345074996cae8ed3300c95db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:07:e1:ad:c4:5f:d0:dc:f7:b2:06:9c:55:15:
                    7e:35:c5:98:83:9c:85:55:06:ae:b8:00:c8:c2:bc:
                    10:6b:8f:52:f1:fd:61:33:85:9f:f7:99:04:e0:c8:
                    60:f8:8f:bf:fe:74:08:84:15:81:b8:3b:32:35:89:
                    21:6a:e0:20:29:37:1b:44:2f:83:4c:29:1e:0a:b2:
                    a9:32:3c:4b:1d:33:19:5d:fb:76:f7:71:8a:e8:12:
                    5d:44:f7:ff:ad:59:94:52:ba:50:b0:44:9d:86:aa:
                    47:e4:62:9b:02:2e:6a:c0:9c:ed:07:de:01:55:04:
                    7c:e3:1c:fc:e5:86:9a:87:00:01:53:44:06:52:9b:
                    38:4c:33:99:38:a4:df:a8:13:74:73:72:22:1e:65:
                    b0:3f:68:d5:93:47:64:c6:b5:fe:83:58:47:87:e2:
                    fa:43:b5:a9:1c:7f:92:d8:32:d7:9b:a6:0d:16:51:
                    d6:16:2b:d0:2a:f3:29:60:a0:a6:f5:12:70:db:4d:
                    db:3b:72:f7:16:d1:28:e7:df:76:f5:b3:38:17:49:
                    80:8e:9a:9f:81:4d:49:d5:b6:b8:4d:3b:23:ed:ec:
                    25:90:c2:00:20:d9:b2:1b:ef:37:e4:ea:57:b6:f0:
                    54:37:a4:a7:c2:5c:cb:b1:b5:b4:98:93:22:1f:29:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D7:56:8B:D2:33:8F:B8:34:50:74:99:6C:AE:8E:D3:30:0C:95:DB
            X509v3 Authority Key Identifier:
                keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ac:8b:38:7b:0c:e9:0c:8a:aa:a0:45:5f:28:b6:ce:41:a1:
         6a:37:45:b9:ec:82:89:c8:a1:bc:08:76:07:c2:37:a2:fe:b3:
         7d:4a:87:92:b4:c9:da:48:80:8f:0d:85:a6:30:af:38:85:40:
         4e:a1:8f:b8:e2:e9:cd:6d:72:fd:c1:29:14:2f:e7:cc:f1:da:
         9e:e0:74:f8:c3:a3:37:ca:3d:19:ba:92:da:f4:ec:a0:d5:c0:
         be:58:a4:8a:e0:59:98:90:35:19:a5:c3:71:ea:3e:7c:d0:08:
         9f:78:32:99:0b:8c:81:7c:2f:7f:32:53:cb:0a:14:62:6a:08:
         1d:2c:d7:20:9e:0b:c8:7c:59:dc:db:0d:42:ba:45:d0:62:f1:
         b4:2b:75:7a:ef:9c:1f:04:c7:72:fd:4e:de:b1:1c:5b:b7:de:
         63:4b:12:8a:a6:11:cb:9d:d0:a0:26:82:46:3b:20:44:43:96:
         fc:35:f8:d8:0d:c8:26:e6:12:d5:eb:72:e3:22:ce:91:e8:29:
         7f:8b:97:46:2a:17:a8:5f:23:59:82:49:5c:01:68:3c:c6:af:
         17:3d:04:43:52:c4:85:52:e7:9b:15:3a:bf:1d:f8:78:ff:2b:
         b1:a7:19:11:49:02:aa:ff:09:cd:f4:42:cb:ff:86:55:f1:a3:
         bc:52:67:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:13 2025 by rpki-client