Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
File:                     tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json)
Hash identifier:          8rUJqSzb2OBX052lqBK3eFuYsVKkZLk8AbKyuShUOZ4=
Subject key identifier:   73:CF:CE:BF:7C:3D:A9:C1:42:C5:EB:85:8C:2C:A5:0B:60:4F:77:04
Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
Certificate issuer:       /CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Certificate serial:       0194BC3C2ACE785C07A1E6A32C3B0A44E10E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 12:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:47 +0000
Files and hashes:         1: iQxCTqJc23IztH0qMtXGhii78xc.roa (hash: b/32KuHdgss/tEEpqliyL9nGxIGy3IsYTip4QREYlPc=)
                          2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: X4wH5lE1pqbiuDEExZUW9YlSLsoFrcXNtAgXmRzoV0I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:2a:ce:78:5c:07:a1:e6:a3:2c:3b:0a:44:e1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa
        Validity
            Not Before: Jan 31 12:00:47 2025 GMT
            Not After : Feb  1 12:00:47 2025 GMT
        Subject: CN=73cfcebf7c3da9c142c5eb858c2ca50b604f7704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:31:f9:83:01:5b:0d:6b:3c:48:da:40:9b:9d:
                    f5:a6:4a:51:0b:a4:92:4d:07:d2:ee:22:91:bd:d1:
                    0e:fb:3a:89:bd:05:38:08:01:26:a6:0c:38:b3:6b:
                    e4:da:0a:6e:00:da:c1:25:9a:18:a9:cc:bc:e6:2b:
                    4b:2f:c5:f6:76:58:fc:dd:ae:55:8f:48:c4:c7:ac:
                    5c:ec:b1:f6:b1:48:42:14:af:26:db:48:5a:10:c7:
                    05:a3:85:55:26:f4:9e:42:04:a7:18:d8:37:78:5a:
                    0f:c9:78:91:4c:b6:e1:87:aa:ce:91:d2:d4:9b:a1:
                    cd:4f:fb:ae:ce:ec:b0:9d:47:f8:fd:45:9d:6f:48:
                    02:1f:56:42:a0:6e:fc:af:07:d5:ba:1d:e3:41:e1:
                    28:ee:f4:d9:17:80:f4:77:53:57:33:04:a9:12:7e:
                    9c:c4:6f:1d:d5:39:e5:c3:4a:57:3b:30:ed:36:7f:
                    5c:48:14:ab:f4:9f:b7:ec:d9:3a:50:52:aa:b8:62:
                    db:14:3f:fd:ae:c1:e5:02:ae:7f:d8:a2:eb:b3:5f:
                    45:4b:59:ef:ec:86:9f:74:54:6b:8d:14:b6:12:b5:
                    e4:ec:8b:78:b9:00:e9:bc:dc:ca:26:a0:12:27:1d:
                    77:ab:42:ca:e8:7b:12:f5:eb:39:14:ae:3f:f3:54:
                    38:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CF:CE:BF:7C:3D:A9:C1:42:C5:EB:85:8C:2C:A5:0B:60:4F:77:04
            X509v3 Authority Key Identifier:
                keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:cf:c1:f6:9d:52:19:75:0b:6d:9b:bf:87:f4:4c:2d:b1:de:
         d6:99:42:86:4b:ea:78:04:0a:81:dd:b8:a1:1d:42:73:0d:7e:
         ac:72:1c:b0:46:8f:ba:b6:96:59:69:5d:eb:9c:01:cb:c8:33:
         fb:4b:31:f9:4e:7b:0d:49:bc:6c:24:5d:bc:36:59:aa:4b:68:
         5a:e8:54:6b:99:9c:67:d9:a3:ec:18:5a:34:19:17:bf:68:de:
         5e:11:34:58:35:7e:77:b5:5a:6f:2e:ab:da:cd:eb:5a:29:44:
         4e:bb:84:33:7f:b5:26:ae:f3:8b:fa:68:3f:ca:61:db:26:9f:
         5a:da:74:13:74:bf:7e:20:73:4e:34:38:d5:07:af:42:4a:9f:
         1b:fa:06:17:45:d4:34:64:8c:52:72:b8:48:d6:23:dd:bd:fc:
         be:ca:36:ce:7f:0f:09:76:84:72:56:68:5c:a3:d9:b5:81:ea:
         9f:ce:72:09:82:89:60:46:f9:e7:28:e5:cf:85:29:97:18:63:
         a3:9e:0d:7f:27:98:5a:6d:69:f1:16:14:8b:1c:0d:f7:8b:45:
         db:db:8e:ef:6b:c6:c9:a7:7a:ac:b4:89:2d:ee:e2:8e:1b:2d:
         e1:96:6c:8d:8a:d1:ac:0c:93:f1:34:1b:8c:db:4c:a8:6f:ab:
         7d:68:da:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:05:08 2025 by rpki-client