Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
File:                     6k4ChliRLmlpfBhVO5Up89HOQF0.mft (raw, json)
Hash identifier:          SPzbXOevyOabfUAM54zZ6y3fv4HQB3D1jMgGqxA2R1g=
Subject key identifier:   1D:FA:7B:2B:57:98:E0:5C:C0:8F:15:BD:46:7F:8C:94:C3:5A:B6:79
Authority key identifier: EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D
Certificate issuer:       /CN=ea4e028658912e69697c18553b9529f3d1ce405d
Certificate serial:       0194BD4E925BADCC38A032680B8C5C913A34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
Manifest number:          0D74
Signing time:             Fri 31 Jan 2025 17:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:30 +0000
Files and hashes:         1: 6k4ChliRLmlpfBhVO5Up89HOQF0.crl (hash: kPlCn7oVVvhFstr1WEvzCjajkvlSnqfXG1/URB+sOYE=)
                          2: hKHrJZfyvpiqMzNaxqWMsCAzd7U.roa (hash: KpUX9BCj308/B4B0VQzL1CJw7WHe+Vbo6CVwUR3M9gA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:92:5b:ad:cc:38:a0:32:68:0b:8c:5c:91:3a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea4e028658912e69697c18553b9529f3d1ce405d
        Validity
            Not Before: Jan 31 17:00:30 2025 GMT
            Not After : Feb  1 17:00:30 2025 GMT
        Subject: CN=1dfa7b2b5798e05cc08f15bd467f8c94c35ab679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c2:78:59:81:96:2b:c5:c2:66:09:47:94:fd:
                    0d:7d:46:d3:56:a6:c3:5d:6d:f3:b3:e7:6f:cd:2f:
                    e6:ed:3c:45:f0:4b:e2:cd:1f:d0:35:da:21:3e:2b:
                    fd:4b:83:30:51:3b:ee:67:ed:90:73:26:b4:42:9f:
                    f1:3f:4d:e7:15:ad:d6:57:99:68:0a:eb:44:91:ae:
                    c1:0f:9e:d9:d4:96:fa:c0:84:98:fc:8d:aa:ee:62:
                    e0:92:ba:91:dd:bf:f4:b1:0a:91:e1:57:05:3b:13:
                    39:85:3f:91:18:d0:aa:8b:99:28:73:55:e6:db:18:
                    91:ff:5b:ff:13:9d:bf:51:84:9b:7e:4e:60:82:a0:
                    79:95:24:b7:7e:c9:b3:3f:37:3e:73:bc:dd:a3:6a:
                    ae:5b:0c:3e:99:c8:f6:ea:49:e4:b4:b4:60:75:c1:
                    82:9f:fe:12:7b:60:77:f1:c7:92:a2:b5:3d:37:df:
                    c9:b0:c8:df:12:3f:16:e0:df:94:9d:81:58:f5:5f:
                    45:5e:ed:8f:35:a3:b1:43:9c:f6:3a:71:1f:cb:80:
                    33:82:b7:1f:60:03:60:bd:42:f8:52:4b:7d:ca:a1:
                    31:dd:18:d1:4a:52:2e:1e:7b:8d:ca:3b:f8:f0:c8:
                    d6:1a:e6:4a:93:55:b6:01:40:88:33:6b:08:5f:22:
                    70:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FA:7B:2B:57:98:E0:5C:C0:8F:15:BD:46:7F:8C:94:C3:5A:B6:79
            X509v3 Authority Key Identifier:
                keyid:EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e6:b3:b7:9a:8f:7a:d3:de:39:0f:d8:bf:eb:98:e9:72:6b:
         99:98:3a:0a:5c:65:92:3a:37:50:36:b2:88:b5:1f:c4:63:39:
         8e:1a:57:2e:34:33:f3:2a:10:03:c0:08:28:67:30:b9:a7:be:
         7c:de:a8:da:ca:52:06:96:c4:9e:ed:3f:1f:db:71:d5:04:d4:
         bc:bc:06:f2:05:0b:9c:38:68:2d:0a:af:14:b9:e9:ef:27:40:
         56:9e:6d:0f:94:3b:75:f9:3b:78:96:3b:9b:09:1a:7b:d3:a8:
         fb:50:a3:ac:46:b0:51:b7:16:cb:8f:60:af:a0:5d:4b:2a:42:
         f3:cf:8a:14:86:e7:7d:b9:46:d9:37:08:aa:06:54:dd:47:b5:
         5a:b3:48:43:24:77:b1:18:ca:42:15:ef:43:b5:d5:38:74:de:
         43:6f:51:eb:49:e8:9c:93:1f:fa:ae:41:5e:9e:76:32:06:bc:
         c8:8a:9c:3a:50:12:6d:cf:7f:f0:d8:3a:70:95:98:8b:e6:a0:
         5d:5b:23:a1:a2:3a:53:98:f1:fe:c3:41:4f:9e:41:aa:22:6f:
         ea:c7:82:46:41:fe:ac:5b:9b:7f:94:44:f8:76:96:04:4d:be:
         f6:a4:34:15:9f:ad:d4:89:b4:77:be:6e:f1:b7:95:58:2c:ba:
         84:34:28:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:52:09 2025 by rpki-client