Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File:                     5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier:          HqLdf3ebJEQTHl2rVHLkL32oosAwdYLLnragQz1jFjA=
Subject key identifier:   A9:42:0A:76:64:17:45:AF:80:63:BC:7A:14:B4:46:63:FB:0E:BC:DA
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer:       /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial:       0194BD85328A75705C497CCDE6033A1F011C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number:          0EE1
Signing time:             Fri 31 Jan 2025 18:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:10 +0000
Files and hashes:         1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: 7U2rceiq23mGm3Q5mudsiYZNF+mWzRVxchQHUK8aOV0=)
                          2: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (hash: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:32:8a:75:70:5c:49:7c:cd:e6:03:3a:1f:01:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
        Validity
            Not Before: Jan 31 18:00:10 2025 GMT
            Not After : Feb  1 18:00:10 2025 GMT
        Subject: CN=a9420a76641745af8063bc7a14b44663fb0ebcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:75:35:10:1c:f3:16:80:a6:7b:5f:36:15:
                    6d:6f:ba:2c:63:f7:32:69:9b:6c:90:a2:e2:0d:fc:
                    71:7b:bd:c1:8c:ad:df:ea:5e:14:45:e5:10:92:93:
                    c1:d0:9a:54:ea:be:65:ae:b0:4d:d0:ff:39:b2:95:
                    2b:32:87:01:ff:e8:89:b2:38:7e:b1:1c:16:a8:cd:
                    53:e8:57:14:7d:9b:3d:35:d3:d7:ed:e9:d7:7c:67:
                    3f:3d:25:e4:dd:99:7f:92:c2:71:bb:07:d1:d9:e4:
                    94:d2:3b:b3:93:e8:cd:91:35:41:d5:87:08:1d:97:
                    80:21:71:e7:36:0c:be:67:ae:5c:5c:c3:91:38:98:
                    fb:42:ad:05:32:23:1a:94:67:2d:6c:c9:ce:ec:4d:
                    21:18:35:ee:11:6e:81:c2:a8:f5:9b:46:5b:4e:3e:
                    03:1f:cf:2a:0a:8c:00:a2:83:98:14:f0:3e:8d:43:
                    de:1f:1c:b6:33:1a:26:f6:37:85:3e:a6:8f:9c:82:
                    a4:0a:72:2b:96:d4:9e:db:37:05:0f:19:91:cb:94:
                    ca:54:77:48:f9:0f:2c:2e:f8:fc:d3:0b:aa:71:e9:
                    84:0f:68:ca:b0:c9:63:2a:3c:1c:54:98:4f:bd:30:
                    c0:bb:c7:6d:f9:04:db:66:ff:99:e3:80:06:3f:67:
                    9d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:42:0A:76:64:17:45:AF:80:63:BC:7A:14:B4:46:63:FB:0E:BC:DA
            X509v3 Authority Key Identifier:
                keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1a:0a:22:95:89:7e:c1:f9:f1:5a:be:fb:c1:18:4e:34:b7:
         64:70:5e:ed:3d:d4:0f:17:15:83:bd:5b:c4:cd:2a:57:b8:3b:
         01:04:65:d0:cc:ad:91:d4:b1:18:34:cd:8e:70:a3:de:18:9e:
         38:12:7d:e2:14:a0:91:f6:3f:48:1a:34:22:ac:ce:5f:c1:4d:
         62:6c:8b:3a:72:57:27:f8:0e:71:3e:61:89:60:87:62:0a:c0:
         4b:eb:be:28:25:48:2e:9f:9a:eb:72:10:65:e2:c4:be:06:bb:
         54:e5:c6:06:04:1f:63:4a:48:59:dd:bd:ee:1d:92:17:5c:14:
         5b:4e:5f:c7:63:dc:7a:fd:f9:c2:9f:bd:7f:a7:d9:59:3f:21:
         bd:f7:68:f0:0a:a8:34:05:3f:4d:df:3b:da:38:0e:90:e7:43:
         7d:26:ff:85:fc:c0:03:11:cd:0f:b2:ee:41:ea:50:13:17:2f:
         84:c3:9f:3c:a4:34:96:53:43:44:6e:8a:82:3a:74:c1:3c:78:
         1c:5d:40:a8:81:bb:d2:1d:c4:f6:37:1f:66:37:82:5a:ff:77:
         33:5c:74:03:62:af:46:c5:77:bd:7c:99:0b:94:0c:c9:28:c4:
         78:38:d4:58:cf:f4:56:b1:fc:95:63:b4:cd:e3:4c:ba:72:bf:
         d0:31:6d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:54 2025 by rpki-client