Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File:                     mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier:          1YuTebSmjfvi3Ma0JlL2EdnpVXhjzUYsdrRL7xOVIMk=
Subject key identifier:   C1:C2:2E:A6:FF:D6:C1:12:1C:9F:D0:BD:FE:33:CD:E3:42:4C:85:C5
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer:       /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial:       0194BCE0B935FEDA8151F1DE92DC7E71F8BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number:          0520
Signing time:             Fri 31 Jan 2025 15:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:31 +0000
Files and hashes:         1: 1FpMBsPrVN8R5-0MCBOPZs_nETM.roa (hash: hDCmpGO771VuGbnW0cQSb2PpqZMISzSMoGkCSY1YTbI=)
                          2: Kcgv9sOVMfeIM6OzoP33SFMGwN8.roa (hash: S3NH0gxjEQzow+oOMRPpYJ+ra/nD6iVaPtF9O4RjxtE=)
                          3: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: 8IyH+ZcX+kJgtz6K3e3q/bGreTIpC5FfnIQiCylVfo4=)
                          4: vf32Q6kfy6uh40KLTSnzNtmzx0k.roa (hash: Ley/3BtVdLl6E3EjVJGvS/BsoNktyM0M68db0L74q3Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:b9:35:fe:da:81:51:f1:de:92:dc:7e:71:f8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
        Validity
            Not Before: Jan 31 15:00:31 2025 GMT
            Not After : Feb  1 15:00:31 2025 GMT
        Subject: CN=c1c22ea6ffd6c1121c9fd0bdfe33cde3424c85c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:75:90:2c:95:53:0d:c6:9f:3a:13:8c:ee:fc:
                    75:80:6c:8f:a2:06:7d:a9:e9:b7:dc:08:85:25:d7:
                    4b:21:64:f3:f8:45:d1:4a:5c:a6:01:2c:9b:2a:56:
                    1a:f7:d7:7d:88:96:85:ad:4e:4e:a5:a7:75:34:d6:
                    94:ca:15:10:f7:27:ca:7f:41:39:c8:12:e4:b1:48:
                    c7:fb:94:30:00:ee:2d:8e:82:15:5c:a5:1b:34:7c:
                    1c:8b:a1:93:1c:97:a8:a9:f5:40:47:c6:e5:9f:bc:
                    61:95:e2:72:aa:79:65:4a:71:86:a8:1b:5a:57:a8:
                    88:8d:8b:77:b9:58:85:a1:a7:80:c5:b5:38:6e:40:
                    9a:10:6d:14:e0:15:a4:12:9c:46:2b:b6:53:3a:5b:
                    09:ec:cc:68:67:e3:bf:f5:ac:17:94:e8:00:36:e0:
                    ca:05:3f:6f:fc:a0:80:81:35:98:f2:83:1b:37:84:
                    66:90:40:2b:ba:3c:9f:87:b5:99:dc:a0:be:57:a9:
                    e0:4f:c2:a5:b5:de:5c:90:ea:c0:2e:f5:1f:8c:f5:
                    da:f2:24:c5:45:7f:52:bc:5e:36:62:72:62:84:cc:
                    fb:85:2d:bf:ba:c2:54:74:f8:48:94:0c:b8:48:fa:
                    f1:d9:f5:c2:65:af:73:01:b7:10:f5:bc:35:25:52:
                    45:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C2:2E:A6:FF:D6:C1:12:1C:9F:D0:BD:FE:33:CD:E3:42:4C:85:C5
            X509v3 Authority Key Identifier:
                keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:76:71:3a:40:66:12:d1:b4:00:96:bd:e1:cb:5f:eb:73:46:
         9f:9c:16:f2:6b:5f:bb:c3:a1:5b:21:1d:4b:e5:ee:97:60:ec:
         b9:d3:7d:9f:b9:77:72:6f:fe:f2:f5:9a:8d:dd:9b:4d:94:2e:
         74:88:5e:64:11:b0:ea:55:96:cf:88:a4:f5:4e:69:b2:0c:56:
         0d:26:12:56:36:02:a9:a6:60:07:83:04:97:c6:a2:e7:a7:4d:
         c7:4d:e2:09:aa:ad:01:4f:14:a9:14:42:26:ab:c3:c1:05:72:
         d6:37:26:06:33:bc:8e:b8:67:96:a3:16:57:3e:9b:8b:47:08:
         51:37:02:a8:31:db:3e:ff:80:61:ed:b1:58:ed:bf:0a:b9:a0:
         d1:24:f9:b4:c8:53:9f:0a:8c:ea:a8:99:3f:a8:05:7c:c1:a0:
         d0:8f:c9:3a:9e:0f:f8:56:ea:9c:83:1b:60:07:7d:cb:19:a5:
         72:f9:f8:b3:d7:ae:43:01:d9:44:57:bf:60:6b:b2:47:6e:eb:
         65:ad:b7:2b:83:12:6b:24:27:9a:bd:34:82:a9:61:47:75:09:
         67:49:3a:d2:b8:d4:b9:3a:4c:95:75:6f:ce:6d:70:13:c1:23:
         60:1f:c5:79:2d:4c:16:3c:f6:54:03:d0:88:93:f9:8a:a0:76:
         71:e3:c2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:50 2025 by rpki-client