Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File:                     DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier:          i7LX/4Ws6ep8ZD82ezJhxSgBa4xfRWoivnv+Jdnv2YA=
Subject key identifier:   87:84:7D:79:1E:6D:C2:B7:23:33:31:B2:88:12:78:80:8E:A1:CD:BC
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer:       /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial:       0194BBCED63E330936818E1D3AA3FE1D668F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 10:01:22 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:22 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:22 +0000
Files and hashes:         1: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: 6bGERhqcGTubDum7PmfGimH/naXwbPRnH+7ki+CqnGI=)
                          2: Kw07JxAM6PIjr2ZZEDMn7JfYALU.roa (hash: 7yLwIb1VffX9y/T7PbcK03UjKmQOn5ktXM/NbKeEUqc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:d6:3e:33:09:36:81:8e:1d:3a:a3:fe:1d:66:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
        Validity
            Not Before: Jan 31 10:01:22 2025 GMT
            Not After : Feb  1 10:01:22 2025 GMT
        Subject: CN=87847d791e6dc2b7233331b2881278808ea1cdbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:37:fc:47:0d:2c:08:32:75:b6:99:bf:10:58:
                    8e:22:fd:4d:6e:b4:33:cc:15:74:b2:d2:6b:cc:d4:
                    e3:bf:48:29:c4:65:10:aa:3f:12:52:96:b0:21:6f:
                    ab:02:f2:84:43:09:5f:19:ed:f4:fd:57:f6:bf:ee:
                    20:95:f8:43:b4:c1:29:d1:17:3f:6a:54:67:38:5b:
                    0f:39:7f:38:8e:23:8f:ef:15:0d:68:cb:60:a9:9a:
                    e5:b0:1d:78:bf:d4:24:38:63:57:c1:56:d1:59:55:
                    85:8d:84:a3:e5:b6:67:20:94:5e:10:86:00:28:a9:
                    3a:51:3b:e9:2a:33:c5:1c:f2:3f:b7:29:e8:c1:d5:
                    7c:fb:02:78:32:5f:f6:3f:3c:ad:c1:30:40:5f:e7:
                    76:2a:f0:c0:0a:5f:02:2a:94:4e:1a:38:87:39:a2:
                    8b:4d:99:2e:80:32:6d:eb:72:e4:69:63:a9:b8:f3:
                    bc:a8:8c:b4:ea:bd:af:5c:a7:bb:d7:c2:75:28:70:
                    6a:a8:6d:dd:ec:81:a1:54:1c:fc:fe:93:bc:bf:9a:
                    41:25:05:d7:81:4e:f9:8c:58:cf:15:00:17:cc:60:
                    49:8d:03:fd:7a:5b:64:e4:57:d6:79:76:54:7b:c2:
                    38:13:a5:61:6a:5a:a1:06:93:dc:dc:2c:65:2a:85:
                    60:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:84:7D:79:1E:6D:C2:B7:23:33:31:B2:88:12:78:80:8E:A1:CD:BC
            X509v3 Authority Key Identifier:
                keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:6d:80:92:2a:6c:9c:5f:1e:2e:17:02:8d:23:b2:32:1a:c1:
         c5:26:d9:5c:9d:bf:37:da:a0:f1:7d:11:a4:76:6d:f6:0f:3a:
         61:72:19:87:fe:07:0b:b6:f1:fd:2f:a6:84:ac:2d:16:54:46:
         21:a7:c0:51:54:4a:3d:5a:f3:85:e1:34:19:61:d6:37:ad:99:
         2c:78:07:5a:85:a5:8f:c5:7b:9c:d7:16:14:74:c3:5a:ae:e6:
         11:e0:38:47:f5:25:03:40:b3:57:02:4b:da:a4:92:81:dd:0c:
         5a:c1:9f:13:10:28:5b:05:97:b5:1c:d9:a2:5a:d4:cf:45:1e:
         fb:5a:1a:4f:08:9d:84:25:9b:51:06:0c:58:ec:57:1b:60:73:
         8a:dc:29:18:8a:3f:b1:ee:4d:46:4c:cc:6e:c3:f8:35:9a:e3:
         f0:fa:27:c1:ed:18:c9:5b:fd:bc:ea:77:ca:f6:de:6a:34:66:
         ab:af:17:2a:4a:05:3d:b6:e0:f5:72:00:eb:60:6f:cf:14:9c:
         5e:d9:30:8b:03:3a:3a:73:e8:b7:c8:33:dc:25:5c:33:f4:19:
         f6:2d:9f:d5:3e:59:3c:eb:0e:d5:4b:39:11:bd:56:37:5d:be:
         8b:58:88:40:0a:a2:70:42:a9:88:a5:df:a2:17:bd:ba:94:a4:
         ea:d1:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:26 2025 by rpki-client