Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File:                     Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier:          ZaLLBX7oSwpYfV6hwrYxvb1xtWi+0L9hdQY2cAPi9O0=
Subject key identifier:   86:4E:E1:99:1C:F5:55:DA:00:84:B4:EC:08:17:5A:70:69:2D:D2:17
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer:       /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial:       0194BD4E75727EAAB9ECC34A348A5C7BB404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number:          0EE8
Signing time:             Fri 31 Jan 2025 17:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:23 +0000
Files and hashes:         1: 3Lwgv8G7H1M7aUpcEvNgmowlLx4.roa (hash: mpBdcgU7I+uQ5H1oVCfF7A1oXC3Ul6uCrit0pbGiORo=)
                          2: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: l4EmFPUio7oioX33qBjLoCL6UR21bQkmnxgupkjxYtk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:75:72:7e:aa:b9:ec:c3:4a:34:8a:5c:7b:b4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
        Validity
            Not Before: Jan 31 17:00:23 2025 GMT
            Not After : Feb  1 17:00:23 2025 GMT
        Subject: CN=864ee1991cf555da0084b4ec08175a70692dd217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:d4:45:eb:25:40:37:d7:78:ed:7c:44:4f:
                    15:b7:de:08:1c:d5:4d:de:90:db:a0:de:0c:6e:98:
                    23:61:82:36:eb:4c:53:e9:20:46:1e:b7:50:63:2b:
                    bc:98:ac:3f:4f:8d:59:1e:fb:3d:f1:40:aa:a3:ce:
                    40:fe:51:20:be:cc:97:b1:64:e3:1f:de:98:e9:38:
                    57:35:77:0d:91:fa:e4:e0:de:ac:c9:b1:0b:c7:cc:
                    c5:fb:c1:d8:10:82:c7:0f:b8:31:f8:50:51:70:0c:
                    7e:b0:1f:c0:8b:df:06:8f:61:d3:31:f3:2d:4b:fc:
                    f8:e7:2d:30:ba:da:93:bc:ff:48:9e:06:04:85:69:
                    ed:94:6b:c0:13:be:7d:82:7e:4e:75:9e:56:e9:f5:
                    e8:f1:fe:d2:23:53:ed:88:6b:8c:cf:ef:a3:3a:de:
                    ab:38:51:75:78:ff:e5:50:d4:89:80:9f:e1:60:43:
                    d9:71:73:79:d5:33:22:24:90:8d:6c:b4:99:d6:b0:
                    aa:07:2d:f5:63:b6:12:59:19:f4:66:8f:3c:e5:c3:
                    43:8a:84:e6:06:07:08:61:cb:56:7d:c8:c0:5b:8c:
                    9c:f9:f4:a3:b5:90:bb:af:8b:63:02:8b:e5:d8:46:
                    27:27:a8:be:58:33:1e:fd:34:ad:09:2a:b1:63:84:
                    d1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4E:E1:99:1C:F5:55:DA:00:84:B4:EC:08:17:5A:70:69:2D:D2:17
            X509v3 Authority Key Identifier:
                keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d3:2e:16:f8:af:03:20:87:e6:6e:6b:17:07:67:3c:86:15:
         b8:92:9b:36:e0:f0:42:82:1b:01:e2:ad:f3:97:f9:d5:90:27:
         3f:54:49:de:71:08:d2:6b:78:56:fc:d0:93:2b:e1:99:88:94:
         b8:51:5b:f5:06:8c:17:69:a4:2a:eb:bf:22:b1:9e:a2:c4:78:
         d2:d3:6f:24:88:68:b4:b7:62:da:5b:b4:b2:6e:9f:68:99:cc:
         57:d0:55:1c:1d:5c:3c:7f:f3:45:2d:69:51:03:8e:ba:b7:3d:
         73:c8:89:05:09:f6:db:d0:d1:ab:85:c0:52:8f:0c:80:8b:23:
         2a:22:4a:3b:db:ae:42:99:85:e8:13:53:2a:1f:63:18:7e:50:
         d0:6f:82:80:be:e8:ec:a2:63:93:db:35:0c:47:2c:4c:f0:4b:
         b5:d2:9e:be:b7:83:92:ed:03:6a:00:b3:a1:a6:35:94:2a:d5:
         ee:29:6b:b0:3f:49:aa:c3:26:a5:0f:16:ff:05:54:25:88:4e:
         11:87:4d:85:3c:51:80:0e:ac:04:0b:b0:19:68:6f:cd:8e:89:
         b8:fc:3b:40:79:ac:b2:e8:44:94:fe:a0:0b:90:f7:0f:1f:70:
         b4:22:09:a4:1c:69:ad:d1:6a:85:28:14:ae:9e:b6:62:ca:d3:
         a2:0d:1b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:00:50 2025 by rpki-client