Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
File:                     beqfD_dpbglzZ0Zd40tOvQG11yo.mft (raw, json)
Hash identifier:          4MZgE+aMnFwiq9ymvQ9y2CTO9ulMCH4aXQou8bQ5Ldc=
Subject key identifier:   5A:D9:36:83:25:61:0C:0B:0A:E6:60:27:F7:3F:77:04:79:B2:72:34
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Certificate issuer:       /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial:       0194BBCEF973199194D803A83ACB22608668
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 10:01:31 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:31 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:31 +0000
Files and hashes:         1: TPTipmCf9BsOGFcyPoYhIPJPS2A.roa (hash: aQYPaPwtQe3/gUYOUMBsHdSV7yzKJ4eszHX6ZM/z8PM=)
                          2: beqfD_dpbglzZ0Zd40tOvQG11yo.crl (hash: lXwUnh3wb+W0coRubR0OcDY4iKELcSS3QvKRFkAyTOI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:f9:73:19:91:94:d8:03:a8:3a:cb:22:60:86:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
        Validity
            Not Before: Jan 31 10:01:31 2025 GMT
            Not After : Feb  1 10:01:31 2025 GMT
        Subject: CN=5ad9368325610c0b0ae66027f73f770479b27234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:d9:65:8c:9c:32:5a:68:11:d8:46:34:f2:
                    45:81:57:8f:86:d0:fd:92:fe:80:14:9b:f8:9c:65:
                    6a:18:c9:cf:75:9f:55:aa:5d:49:1a:4f:60:61:6e:
                    51:36:d3:52:ba:b1:d1:cf:7e:8e:c8:64:aa:e6:a7:
                    da:9a:91:84:d4:f4:92:e3:fe:88:0a:57:3c:5f:69:
                    3a:7d:f9:5c:1c:4e:90:25:6a:57:8e:ac:05:ce:2a:
                    cf:b3:bd:f1:67:33:9e:04:c8:e3:62:48:57:48:6c:
                    e0:d1:3f:e0:de:9f:70:54:0a:89:6c:17:ad:23:78:
                    bb:b2:53:ef:44:22:24:56:ec:6a:47:09:c9:82:18:
                    29:dd:8f:d0:ee:28:ab:6a:58:78:a4:81:25:c1:34:
                    ea:b2:12:0e:1e:ef:06:18:57:7f:a9:dd:d0:79:02:
                    ba:c9:b5:4a:52:40:2e:44:90:3f:85:62:9b:a7:95:
                    77:c3:9c:fc:5b:54:5a:52:fe:23:f6:eb:aa:28:d9:
                    b9:20:08:b5:b8:6a:3c:be:d0:9a:00:d4:da:58:23:
                    00:60:82:c0:a3:df:98:47:50:72:ea:2a:1c:1c:95:
                    f1:29:da:68:a5:66:ba:c4:77:75:42:ec:60:f2:66:
                    f6:cc:d0:73:57:c4:49:d0:13:9b:3e:e6:cf:c2:59:
                    dc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D9:36:83:25:61:0C:0B:0A:E6:60:27:F7:3F:77:04:79:B2:72:34
            X509v3 Authority Key Identifier:
                keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:22:d1:2d:12:3e:15:7a:3c:4e:77:b6:cf:e6:0e:37:9b:53:
         d5:46:82:51:f8:53:d1:b5:a3:74:b8:3b:f3:9b:5b:09:b7:13:
         fd:97:94:5d:39:10:2d:30:d2:15:ee:0f:ff:d2:11:fe:fd:c5:
         f9:91:9a:07:e5:ca:94:c9:4b:15:47:49:6f:35:62:f0:b7:1f:
         eb:4f:25:4d:4f:60:63:85:80:fa:e3:e3:79:35:fe:fc:a1:7d:
         63:cd:80:20:54:fd:4c:e4:76:28:64:89:79:5d:c4:dd:0e:1a:
         50:f6:ba:cc:a0:5c:62:e5:b8:91:4a:6c:d9:b8:61:be:cc:ae:
         5f:14:13:74:58:66:8e:8c:01:ef:02:2e:c3:b0:1c:fe:ff:d3:
         4f:e5:fc:eb:dd:3a:2d:2b:af:7b:72:2c:60:30:cf:d6:d0:84:
         e5:0b:dc:a4:ec:79:74:cf:3a:dc:7c:b5:a5:91:ae:ed:ec:82:
         0c:e3:cf:31:f6:39:2c:25:54:34:b3:fc:34:96:b9:24:13:d5:
         fa:7b:17:c6:c6:9e:9a:20:61:15:2f:b7:7d:2c:62:34:07:26:
         a4:19:2d:67:da:9d:d6:70:b8:7f:28:5e:3a:1d:d0:08:9d:c8:
         5e:9e:e9:40:09:d9:b9:e4:a0:e6:a8:cf:fa:54:b5:63:06:d3:
         7c:de:54:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:27 2025 by rpki-client