Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft
File:                     pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft (raw, json)
Hash identifier:          JBDygJqtIGNv42vdXWZWk3f8H40LjLDniTf9RInHVBc=
Subject key identifier:   D2:5F:4E:0C:30:F0:FF:C9:90:1C:D2:E8:10:E8:76:D8:42:C2:02:CD
Authority key identifier: A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD
Certificate issuer:       /CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd
Certificate serial:       0194BC3C70C3308C361C4474B0959AE69403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft
Manifest number:          046B
Signing time:             Fri 31 Jan 2025 12:01:05 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:05 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:05 +0000
Files and hashes:         1: hnNizGmD5_kLKz6dLya2VuA4UIw.roa (hash: jIIE53bnDtwqS2dFWJrfKRkElyY5vTQ/kFSnuPVB9e8=)
                          2: pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl (hash: UbNtvD6+IbGNH8Nevc+uG5O9wWugtELrMibTJiK2tlY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:70:c3:30:8c:36:1c:44:74:b0:95:9a:e6:94:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a88b0887c32de5966f81ff915d6b5ff31532dd
        Validity
            Not Before: Jan 31 12:01:05 2025 GMT
            Not After : Feb  1 12:01:05 2025 GMT
        Subject: CN=d25f4e0c30f0ffc9901cd2e810e876d842c202cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:3d:e2:5e:00:04:40:3f:f3:95:76:c4:53:
                    90:d5:2f:b9:50:37:30:ae:5d:6d:3d:7d:73:60:0b:
                    a8:f3:15:03:d4:72:ff:11:23:d9:92:f0:0b:da:08:
                    3a:79:7c:2f:70:81:e5:5b:b9:92:0a:13:ed:5e:36:
                    9d:55:ba:3e:ef:5a:03:65:0b:f2:6f:d5:9c:27:04:
                    30:35:7e:69:e5:b5:14:1e:9f:71:da:28:6e:b4:7d:
                    84:4a:c8:90:c0:80:a0:72:21:c5:02:35:20:15:5a:
                    01:15:4c:72:65:d1:b6:44:45:d7:db:39:8d:59:ff:
                    d3:a2:03:a4:2e:b2:25:48:80:d3:bd:1a:45:5d:5d:
                    de:fc:71:16:9a:a8:3d:a0:c2:77:7c:71:7f:7d:17:
                    38:5b:f4:f0:9e:51:6e:a3:16:af:bc:11:b0:4b:b8:
                    bf:fc:10:65:2c:04:42:02:f7:c1:3e:aa:c1:79:29:
                    e8:f5:37:c4:2e:42:43:d9:c6:a8:83:e1:c9:0c:4f:
                    19:f3:1e:62:a3:d0:77:1a:d4:36:57:fe:ba:5f:12:
                    fd:98:05:79:b0:35:dc:82:af:49:2d:b2:7b:0c:68:
                    26:c4:34:16:73:15:3c:44:5b:92:b9:bd:7c:b5:2f:
                    dd:62:04:0f:34:90:aa:a5:42:fe:ae:41:1d:f9:9e:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5F:4E:0C:30:F0:FF:C9:90:1C:D2:E8:10:E8:76:D8:42:C2:02:CD
            X509v3 Authority Key Identifier:
                keyid:A6:A8:8B:08:87:C3:2D:E5:96:6F:81:FF:91:5D:6B:5F:F3:15:32:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqiLCIfDLeWWb4H_kV1rX_MVMt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/98c609-07fa-4e2b-b476-6a29bc9f8a78/1/pqiLCIfDLeWWb4H_kV1rX_MVMt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c4:fc:6e:13:24:95:73:49:04:a0:7d:29:ec:9e:94:f4:04:
         61:80:39:76:b4:f3:00:85:13:3e:19:1c:34:52:f0:c4:dd:c5:
         57:e6:c0:b3:01:34:a6:75:6a:26:6e:ef:4e:66:f6:f7:29:bb:
         ea:7a:bd:98:0c:2b:04:2d:0f:03:66:47:4e:7a:91:14:74:51:
         ca:ff:5a:0b:f1:f8:13:31:69:c0:91:c1:c5:fc:bc:6e:ab:01:
         b2:08:06:75:db:27:d1:c2:f0:31:bf:b2:70:b7:1f:bc:03:d5:
         cd:ec:6d:ba:50:66:4a:b5:2f:61:00:0a:a1:59:bc:93:cd:a5:
         b4:bf:29:c0:8d:ad:9e:97:af:fb:59:ca:c6:b9:05:1f:8e:56:
         d4:93:86:cc:0f:b1:ce:5b:00:e1:01:87:8b:c6:d4:32:0f:07:
         72:0d:4f:b2:d0:e0:9d:0d:5a:e2:1a:15:d3:98:a1:0a:f0:bc:
         cd:8e:0f:d5:61:3c:e5:43:8a:61:1d:e3:53:d4:3e:58:c5:87:
         c8:ce:e9:d9:ea:6a:82:b0:e2:11:c2:25:a2:80:f1:de:f3:75:
         23:a2:ba:b6:39:1d:ce:5a:0d:41:19:5b:b1:c6:a8:78:14:eb:
         14:59:d6:cc:30:77:e0:fc:ad:91:fb:cf:b0:37:6c:8b:91:33:
         bd:2b:05:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:01 2025 by rpki-client