Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File:                     AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier:          i59aqSGW6mETSdTX+S7a7qN6G8eTYorhEXvvOjbBDbY=
Subject key identifier:   55:C7:6B:A3:61:2A:94:03:FB:14:FC:8E:08:52:13:56:E5:7C:A4:53
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer:       /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial:       0194BD17F249AFC4C43937487CBEC1AAE7D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number:          01A6
Signing time:             Fri 31 Jan 2025 16:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:50 +0000
Files and hashes:         1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: BMWgfTivl2f7B3SIJ4QWoQMqvSq9yVLNVMZwjF4sRXg=)
                          2: GakqseBs9N17ifC6fb7xtN9jmGk.roa (hash: JKMq9liNBrNVPApT7HHCvfwbA7KUxUp/4G8fH+nrAPo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:f2:49:af:c4:c4:39:37:48:7c:be:c1:aa:e7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
        Validity
            Not Before: Jan 31 16:00:50 2025 GMT
            Not After : Feb  1 16:00:50 2025 GMT
        Subject: CN=55c76ba3612a9403fb14fc8e08521356e57ca453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:1f:fd:a8:39:4d:d0:f7:44:85:57:80:82:
                    06:e3:46:cb:79:1d:1a:83:bc:ee:5f:a2:3c:c6:60:
                    f5:87:1a:34:e3:21:1c:4a:b0:a8:7c:cb:de:1f:48:
                    f5:db:1f:c7:3e:a2:80:f0:01:06:6e:34:ca:ca:bc:
                    5c:89:f8:e2:0d:55:07:0c:51:57:90:c4:98:03:6d:
                    1c:47:41:17:85:94:2e:8a:43:ac:5b:57:16:b1:c3:
                    23:c8:a1:df:d9:ea:53:f4:d8:66:fb:ed:49:a1:41:
                    a1:7e:bd:4c:06:7b:9d:ff:0d:a8:40:5f:08:b4:a9:
                    ae:aa:ea:90:b1:7b:fa:a9:b5:15:d1:c3:6a:d8:67:
                    47:fc:c2:9a:7e:47:9c:7c:08:67:e2:f8:5c:74:b4:
                    66:da:26:f7:ff:02:2c:d4:1a:f6:e7:be:26:cd:5b:
                    df:24:2a:e6:da:f1:78:a1:05:c1:d7:53:c0:3c:08:
                    d5:39:d1:8d:df:cd:36:2c:0d:7c:ba:00:5f:74:ed:
                    7c:c9:1d:62:ef:c2:c5:0c:4b:63:67:9c:e6:dc:45:
                    0c:e3:b7:4c:ca:14:b2:d0:97:58:9e:e9:76:fc:58:
                    73:fc:93:29:ae:f6:01:cf:49:03:47:28:f3:8e:1d:
                    fa:67:bd:6e:f3:c6:2c:b0:6f:f5:ab:7c:b5:2a:b5:
                    2f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C7:6B:A3:61:2A:94:03:FB:14:FC:8E:08:52:13:56:E5:7C:A4:53
            X509v3 Authority Key Identifier:
                keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6a:1a:9c:d0:c8:58:76:0b:83:4a:25:e9:80:7f:45:8a:42:
         59:44:eb:46:1a:1a:61:e6:65:7d:7f:6b:8a:1f:53:df:a9:5a:
         db:9a:03:73:3b:f7:a1:b3:32:2c:03:9a:4c:53:90:d3:7b:41:
         2c:a5:24:0a:42:75:74:7f:11:4b:18:7c:8f:4d:b0:5e:ff:85:
         54:d8:47:5d:9f:3f:7a:da:42:9f:53:a7:cf:ec:15:1f:d0:d1:
         6c:ca:03:36:83:8f:71:c4:72:4e:6c:26:59:f0:34:23:12:76:
         14:48:db:1c:00:17:55:e2:63:c8:83:b7:42:20:76:88:85:7e:
         1c:26:93:70:d3:56:f6:bd:af:62:1d:fc:fb:b4:94:17:d5:01:
         4c:a4:77:cd:eb:84:bd:c1:42:91:fb:3a:a7:c0:b8:72:23:e1:
         b3:b3:73:39:8b:95:f3:f6:d2:41:21:f4:cd:b4:6b:f3:38:1a:
         70:3b:de:cb:9c:8e:68:84:9d:b0:b3:3c:f9:9f:23:1c:ae:bc:
         55:c1:99:59:66:e5:03:68:b0:81:31:4c:a7:e2:03:b6:1c:30:
         09:7f:5f:32:b6:80:f9:15:bb:37:51:0d:81:d9:cd:ca:a0:e9:
         49:72:3a:30:c0:16:cf:ca:ff:2e:2e:c7:c8:7f:2f:c3:e8:4f:
         4a:26:38:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:36:57 2025 by rpki-client