Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File:                     4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier:          LCmBNBcp55AdFw5sJEc+GeY0UuoUF4WPszv4sMGSyg8=
Subject key identifier:   AD:33:45:A4:C6:A8:27:65:5D:FE:17:38:72:E4:3E:AD:B5:DA:07:B7
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer:       /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial:       0194BD178CCD4948FD2CC245D6DB16519037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number:          147C
Signing time:             Fri 31 Jan 2025 16:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:24 +0000
Files and hashes:         1: 1NGP8rXR0mfnuE7dfNb4TUuHkAk.roa (hash: 66zx28PIKWlkpSPQyY+DS/6PGlsHxl/OggeUNvkRDac=)
                          2: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: QZS42THzoSGlscoaUSY0H4Zv5FDfluyla3JEJPwAIys=)
                          3: OrmnaIv7Ykw3uSFBs-BQky_7bs4.roa (hash: vkDAHcA+JuGp7WyKg9OyBQapexmqkZf8f/9s6IqTZIM=)
                          4: bLr6r57MqGHm8nK9w2IYUZH55ic.roa (hash: jUNvR24icg+/HoCVfLpAKbv7/xE1cDm9e9GWJS4plns=)
                          5: mslAiLHq2RhVoMBrlDZ7StvNRw0.roa (hash: 9NtVz0Q/+ObnJjRSZZ6ysBHLYm1GnmXiKVFqUmldHlw=)
                          6: s_WZrtHOlNd7wkkUhFGq2ejwDiQ.roa (hash: lRuZA83oB7sCJB/yZFB/ga5/o6PvU/KmR8+cgqPbV88=)
                          7: xxqAQj5ApVpCjQK_UbA4qZzprNM.roa (hash: kbcAcd5UMZoHVsf0Y1OkYvbV4qpft1douUqZabuqL8g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:8c:cd:49:48:fd:2c:c2:45:d6:db:16:51:90:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
        Validity
            Not Before: Jan 31 16:00:24 2025 GMT
            Not After : Feb  1 16:00:24 2025 GMT
        Subject: CN=ad3345a4c6a827655dfe173872e43eadb5da07b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:c1:b8:4b:9a:fc:ba:dc:65:61:4c:18:e4:
                    8c:e0:f2:e0:02:41:79:40:3d:82:48:f3:bc:5b:a8:
                    e2:1d:02:ab:89:6e:5f:e3:ce:c2:b1:22:db:83:14:
                    ad:fd:02:43:0b:52:d4:5d:aa:b7:09:b8:c4:f7:2f:
                    34:3b:fa:a6:fd:89:79:4c:4d:28:f0:4f:78:fa:51:
                    c4:31:d7:2e:09:64:00:5b:6b:1c:7e:83:34:ef:53:
                    6d:a3:f6:c2:00:03:20:75:be:2b:ec:e1:c8:ff:4e:
                    ae:51:43:00:93:59:2f:e0:76:3b:11:9d:24:46:62:
                    f7:92:95:1b:d1:b7:91:36:4c:12:31:03:dc:dd:8e:
                    81:67:b0:42:d0:3f:fc:b2:cf:b5:1d:1f:6c:69:1d:
                    9f:e0:8f:b5:56:df:46:d3:38:b2:56:41:23:cb:12:
                    9e:f2:c3:de:72:bb:57:ac:4a:0e:92:34:29:c3:13:
                    0c:0b:bc:70:5e:90:79:b1:db:d5:ea:f0:9e:5e:b0:
                    c3:30:5f:3a:de:3b:62:23:3e:ae:9c:2a:04:1a:f5:
                    8a:9d:5f:d6:ad:c3:dc:6a:2b:99:88:db:93:55:40:
                    8c:bc:05:05:bf:d7:9a:78:d2:3c:df:e9:4c:64:78:
                    53:69:9e:dd:d1:ed:ec:50:05:eb:4f:6b:f9:2c:43:
                    6d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:33:45:A4:C6:A8:27:65:5D:FE:17:38:72:E4:3E:AD:B5:DA:07:B7
            X509v3 Authority Key Identifier:
                keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:02:12:d0:be:20:ff:54:31:be:e4:31:07:66:de:c1:26:e8:
         43:95:40:9f:dc:31:fc:28:5c:9f:73:ba:41:72:35:3b:bf:a0:
         07:39:f0:07:2c:75:29:93:56:d9:01:1b:86:cb:11:95:9c:40:
         14:b6:7f:a1:40:d6:f3:da:11:5c:4a:7b:9e:77:20:8b:bc:2e:
         9c:33:bd:cd:d9:f1:f4:63:e5:46:e5:15:b7:96:3b:3f:0e:10:
         45:f6:da:af:06:75:41:c6:09:1f:4d:8a:a0:47:ae:07:d2:35:
         4a:a5:a0:f5:b9:e5:1d:a3:20:24:12:83:9b:e8:e6:e7:a5:a3:
         24:21:4b:ac:62:b1:88:ad:4d:d3:56:52:d7:83:46:e9:6d:26:
         c5:78:d4:36:b3:e0:8a:aa:3f:ff:54:a2:93:fe:77:63:53:58:
         3b:31:f6:95:86:53:d5:da:2c:57:bc:36:2b:c2:31:64:77:98:
         f2:9a:f7:bf:d5:a0:4a:bb:0e:54:f9:54:0a:d6:03:0e:99:81:
         49:37:4d:23:e0:9f:93:8f:a6:1c:2d:4b:a1:50:b9:6a:1e:66:
         b3:d3:cb:29:af:b1:23:2d:5f:d2:ba:4b:2b:ad:35:cf:cc:13:
         71:6e:12:99:0a:92:57:01:1f:20:8d:4a:86:13:0b:8e:6c:67:
         31:02:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:18 2025 by rpki-client