Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          QzRuZw0kfUjYgQlsz3ecK7llBghZyUjNK9p5qs2o7f0=
Subject key identifier:   DA:76:8A:B1:7D:F8:D9:11:7C:07:EC:2B:35:52:5D:DA:60:55:C8:DC
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       0194BC728E545FEDA8E493D392D8737B6AF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          0970
Signing time:             Fri 31 Jan 2025 13:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:11 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: jTx0jEJAnCstyRGI5HdVA3bqeJjBknqi982079glsKo=)
                          2: mhdzxHyga_rpAnhJvnJWGrarNFw.roa (hash: l1WjIafW1o8IpUq72+h/DmsurJ/Xd4bFO/qecSh/CbU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:8e:54:5f:ed:a8:e4:93:d3:92:d8:73:7b:6a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: Jan 31 13:00:11 2025 GMT
            Not After : Feb  1 13:00:11 2025 GMT
        Subject: CN=da768ab17df8d9117c07ec2b35525dda6055c8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:9b:78:47:48:79:c5:d0:dd:d7:ba:66:54:
                    6b:f9:87:38:78:61:26:52:d4:86:78:9e:ce:d1:2e:
                    78:16:d3:33:e1:ee:bd:ac:fa:1c:24:00:93:50:6f:
                    46:da:8f:91:57:7d:b0:6c:3c:cd:ea:1f:54:a8:94:
                    d7:71:51:63:64:57:3d:72:ed:11:1c:be:29:f3:99:
                    3a:ad:e2:5a:51:d8:94:03:d1:b4:9f:85:8f:b2:3d:
                    5a:ee:ef:58:87:ca:75:4b:a6:74:ab:a5:c6:75:5e:
                    a9:3c:bf:1f:ba:de:1e:67:8a:6e:81:7b:69:ae:3b:
                    3e:6e:0c:3b:cc:03:7d:b9:1c:f9:ac:be:77:15:40:
                    5d:cc:a9:cf:6f:8f:14:f6:7c:e5:10:a0:51:49:d4:
                    7e:7c:6f:51:80:89:24:91:7f:46:9c:eb:a8:73:3a:
                    b6:4c:8c:e8:ce:5d:f5:2d:a9:93:0c:72:9d:4b:1b:
                    2b:1f:b9:6c:25:42:f9:1a:51:8f:a2:46:cf:bd:7e:
                    60:32:96:cb:d5:10:71:1e:92:e4:64:ce:d9:ef:0a:
                    b7:6d:f0:d2:6d:b3:96:d9:ce:1e:db:cd:a1:47:32:
                    e6:84:26:d7:98:5d:20:ea:10:be:e6:1e:90:e2:de:
                    29:9d:52:7d:fe:60:75:aa:16:39:36:2d:f0:70:50:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:76:8A:B1:7D:F8:D9:11:7C:07:EC:2B:35:52:5D:DA:60:55:C8:DC
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b8:9c:6b:eb:88:a2:96:da:da:cd:f2:4e:31:65:ef:5a:87:
         c9:18:3d:0c:c8:fd:0f:65:2f:51:e6:a6:71:54:b3:1b:a9:a7:
         59:2a:93:a2:df:80:24:17:01:bc:ec:ff:33:17:8f:4f:fe:4b:
         96:17:db:7d:04:63:4f:64:78:63:fb:a6:f0:f8:d2:64:fc:17:
         94:b1:cc:a5:c0:c8:e5:62:89:14:05:eb:73:8b:c2:30:83:9a:
         7e:04:f0:8c:08:b1:ea:9c:8d:b2:10:19:51:33:3b:1e:b5:1d:
         b7:25:6c:ab:df:88:76:33:9d:36:4c:7b:77:46:fc:81:ba:ab:
         b0:8c:63:47:cb:11:22:cf:83:97:d0:1c:63:77:63:96:7c:7e:
         6b:0a:ae:ab:30:04:32:66:fa:c9:75:2a:c8:c3:b1:e7:c9:6c:
         40:fc:b9:98:30:2d:17:00:fe:46:c9:d8:30:dc:a9:b7:e6:74:
         13:4b:c7:67:7a:5b:f6:d7:9e:b5:e1:bb:f5:24:81:be:86:ed:
         38:73:0e:51:cf:1a:45:14:a4:7b:d8:48:be:3f:d4:04:b1:d3:
         36:71:53:21:e8:46:45:d2:dc:dc:82:0e:83:4e:46:7d:9d:ad:
         83:ee:77:1b:56:10:d0:69:05:a4:e1:53:f9:e0:16:ff:b0:91:
         a7:56:d3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:09 2025 by rpki-client