Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
File:                     5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft (raw, json)
Hash identifier:          ObuT95Wk1FqYKVTNSYsQ/6L4ozYb0znFQsA29q5MCoo=
Subject key identifier:   25:EB:3D:50:C3:19:2D:F6:66:CB:D8:34:9C:57:65:83:94:04:FB:04
Authority key identifier: E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
Certificate issuer:       /CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Certificate serial:       0194BD854CA38BDCD66E1E6CE83E891081DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 18:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:17 +0000
Files and hashes:         1: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl (hash: tL8g+qDfZLBJoq8SSR1BtHpd0RVW2u8xTMzSXkTD2Ao=)
                          2: N5B5WcceOX8-5008CdVB5Z2Yf_U.roa (hash: N6x2VI2LM0pBE2WvbvROlXs2jZlgeDuNmVuOamFJP3o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:4c:a3:8b:dc:d6:6e:1e:6c:e8:3e:89:10:81:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
        Validity
            Not Before: Jan 31 18:00:17 2025 GMT
            Not After : Feb  1 18:00:17 2025 GMT
        Subject: CN=25eb3d50c3192df666cbd8349c5765839404fb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:eb:9c:fb:1f:59:28:3c:5e:a3:5c:7b:c7:c5:
                    86:9d:29:27:12:0b:c7:f7:1b:48:35:28:3e:88:1d:
                    5d:5c:b6:de:ef:e9:c1:35:b2:dd:e5:7d:3a:97:14:
                    d6:1c:29:35:bc:73:fa:d8:ba:4f:24:cd:41:4f:61:
                    eb:8d:08:a9:74:1c:70:5b:29:f6:ba:de:a2:6d:f2:
                    e9:5d:5e:b9:f4:90:45:1d:a6:f9:05:78:d7:35:08:
                    f3:08:7a:19:66:f0:92:e4:96:b6:22:73:02:ab:44:
                    a0:8d:c5:69:4b:5f:00:dd:43:85:46:7d:4d:a0:18:
                    a1:b5:a8:a6:eb:f2:f5:aa:7a:cd:7a:4f:68:af:93:
                    72:b1:e1:34:8c:68:99:63:79:36:48:8c:fa:47:71:
                    df:95:16:8e:b5:d1:d7:a0:5d:c9:bb:52:09:84:30:
                    f3:34:32:30:45:20:a0:43:ff:63:94:78:6a:32:e9:
                    17:80:07:68:3f:14:ea:86:f4:29:49:25:ac:89:f3:
                    d9:e3:73:04:81:1c:06:d5:ff:21:1b:f5:2a:9e:e1:
                    5a:52:dd:81:e1:e0:6b:9d:f7:3f:a2:d7:70:d3:45:
                    f3:fc:85:50:43:0b:5a:c5:86:0a:e3:21:ac:e9:9f:
                    bd:ca:e3:3e:a2:30:5d:10:ba:a8:29:78:5a:37:91:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EB:3D:50:C3:19:2D:F6:66:CB:D8:34:9C:57:65:83:94:04:FB:04
            X509v3 Authority Key Identifier:
                keyid:E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:de:29:fc:59:a5:54:ab:88:b6:6f:c9:ad:e6:cb:b0:f2:9d:
         4c:e6:a9:f8:73:b1:0a:ea:4a:90:0d:9e:81:83:03:30:1c:c9:
         32:6c:8b:6a:51:56:0e:7a:1d:41:fe:24:c5:4f:e1:27:a9:65:
         34:70:94:5a:6a:17:d6:64:82:43:63:71:85:dd:7e:f1:73:a1:
         78:7f:1d:c8:f5:b0:65:45:94:bf:34:87:77:fa:03:dd:58:9f:
         41:19:6c:1e:8e:87:37:2d:f2:a1:4f:3e:e9:fe:38:7b:9e:cf:
         1a:dd:51:73:9d:d3:ba:7c:1f:11:13:eb:95:4a:9c:78:94:bc:
         2b:49:a6:ef:66:19:b3:72:c3:dc:4f:c8:f5:8b:29:b3:dd:5f:
         e5:cb:6c:5b:28:23:89:fa:83:59:2a:bc:c5:aa:b0:5e:f2:06:
         19:93:d5:f3:64:bc:6f:bb:79:63:59:b4:a2:d9:69:1b:90:7d:
         7c:34:ad:b7:35:2d:2e:5d:25:88:20:c0:c8:52:62:f5:e4:57:
         4a:f1:53:b1:4c:4e:26:2f:cd:4c:d2:98:68:2c:4e:4a:16:5c:
         0a:66:e6:57:42:e7:b1:93:8b:49:7b:df:63:41:5e:84:a2:2f:
         de:aa:c2:56:cb:f7:b4:04:93:d5:fb:5a:41:f3:70:3b:9b:97:
         4f:67:a7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:11 2025 by rpki-client