Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File:                     PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier:          MOrvyofVm8nu0FlRekA2l/SoQfB/oTDnjqEEuKSpH3M=
Subject key identifier:   BE:AE:C4:9F:9B:56:6E:D5:01:70:13:49:24:EF:EF:B1:3E:A2:9B:8B
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer:       /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial:       0194BC051F69ABA0A756755AEFAC177287C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number:          1314
Signing time:             Fri 31 Jan 2025 11:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:39 +0000
Files and hashes:         1: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: H3D84J/tDuOBf29fXW+c/qzs6DPt+oyMmkbvwzLLwaI=)
                          2: qGeya0gXk3lefb1rAtWCYxucLVU.roa (hash: ZiFD9y1WchAi6R0j+XTv/ZogMIEXrTeY8kphQnBKVUA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:1f:69:ab:a0:a7:56:75:5a:ef:ac:17:72:87:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
        Validity
            Not Before: Jan 31 11:00:39 2025 GMT
            Not After : Feb  1 11:00:39 2025 GMT
        Subject: CN=beaec49f9b566ed50170134924efefb13ea29b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:d0:ea:1a:11:63:b1:4c:26:0d:b2:74:c3:
                    c5:3e:a0:72:a4:15:92:0e:14:25:cd:b8:4e:b4:b4:
                    c8:ad:a0:06:52:78:3f:94:73:7e:63:23:8b:e0:7e:
                    72:3e:f8:7b:80:c1:f4:c5:e6:cf:18:0f:48:00:bd:
                    41:ff:9b:20:9c:4e:76:15:d1:25:d3:35:03:3f:f4:
                    bf:f2:89:ad:f5:4e:db:3b:a5:10:97:a3:8f:18:47:
                    50:2a:7a:8f:5b:70:d9:21:b2:4d:3a:82:1e:1b:85:
                    6e:92:19:30:e5:6d:d9:ca:81:11:cd:54:12:36:98:
                    42:8c:07:ab:2c:04:ca:11:44:dd:35:1d:d4:89:09:
                    ef:53:2f:79:32:e2:ab:1d:95:08:5c:b6:9d:02:86:
                    d0:83:8b:0a:f7:bf:0b:60:07:8a:6e:d1:d9:a5:5c:
                    dd:e8:88:40:60:41:e0:c8:46:49:54:4e:0c:c1:98:
                    3c:37:7a:20:82:93:95:02:03:da:c7:5b:63:0c:e3:
                    be:35:ae:61:c5:7f:02:16:04:f2:ee:ec:04:0d:e0:
                    5d:56:a6:cd:56:3c:41:7c:07:8e:87:9b:fd:52:56:
                    98:88:ba:34:fa:a5:15:bb:a1:e5:02:09:64:e5:33:
                    84:35:ed:06:78:2a:76:d8:b8:e7:24:9f:eb:90:16:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AE:C4:9F:9B:56:6E:D5:01:70:13:49:24:EF:EF:B1:3E:A2:9B:8B
            X509v3 Authority Key Identifier:
                keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:62:fd:b5:22:3d:5f:a4:3a:f2:c0:28:6b:a9:bb:c4:71:b2:
         e8:9e:47:66:74:96:51:dc:35:40:5b:74:3e:67:ae:3e:e3:da:
         9e:1a:f3:6f:fd:ff:e3:99:8d:e0:8b:ed:59:b1:df:66:cc:5b:
         b5:5d:6e:33:e9:b4:c2:c8:29:ea:3d:b6:ee:93:2a:39:58:0a:
         6f:55:0b:a0:27:b4:22:2b:57:9a:f1:34:2c:b7:dc:5a:f9:21:
         cd:87:e4:c9:9a:a2:ac:e1:7a:54:6a:24:66:25:30:97:88:2b:
         81:00:b2:28:02:59:d9:ac:3c:c7:2e:ed:52:d1:81:04:c7:3b:
         fb:69:79:4c:09:a1:ed:2a:72:75:be:5c:da:c0:3f:31:41:46:
         df:f6:0e:66:c2:fe:a7:28:03:db:ef:67:91:57:4e:01:c5:bf:
         ce:31:02:97:3d:66:d7:8d:92:e2:73:d4:4b:20:5d:dd:8c:16:
         7b:6b:6a:ff:d0:14:e2:39:f0:ba:31:4d:57:d0:05:2e:76:60:
         28:22:43:bf:79:7a:11:d3:b9:ca:d3:9d:83:45:cc:ac:11:ac:
         81:69:5a:e6:6c:f7:ff:7b:fa:e0:a0:dd:cd:b7:35:7b:71:4e:
         59:7e:cc:21:e2:de:46:77:98:c0:23:00:28:54:bf:81:f1:18:
         ea:72:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:30 2025 by rpki-client