Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
File:                     0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft (raw, json)
Hash identifier:          RW99O12RVcJpfn4PcfJ7XZAF5a+9SWW96Vt/MFOyAoE=
Subject key identifier:   89:19:2A:50:57:57:2C:98:F3:B3:4D:05:0C:B1:07:48:7A:EC:BD:98
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Certificate issuer:       /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial:       0194BCA9CE89CE33333516961C0DB5CE9FCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
Manifest number:          1130
Signing time:             Fri 31 Jan 2025 14:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:32 +0000
Files and hashes:         1: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl (hash: GyxoeYCRsobj7yfGKZtJNY6WKzWx0+VjJdG9akLOxT0=)
                          2: 68zFv9YtD3NrAFeU4wp9olsTM-s.roa (hash: pnT0iUdcMHrqvl0nnH7oLBNpzo/eCuulVPG8TY9HMQI=)
                          3: P2hEWY-aar-dzWHdyJ4OOTkwmBc.roa (hash: +j7M+pZlJGOmKDr8VwAwOw7PlY+S6nVr/7YwvIROH/8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:ce:89:ce:33:33:35:16:96:1c:0d:b5:ce:9f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
        Validity
            Not Before: Jan 31 14:00:32 2025 GMT
            Not After : Feb  1 14:00:32 2025 GMT
        Subject: CN=89192a5057572c98f3b34d050cb107487aecbd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:22:80:e5:e4:1e:47:67:d4:7b:68:01:9f:
                    4f:81:a3:75:6b:70:6c:1c:73:6a:3d:a4:a7:cc:1b:
                    b6:c2:47:41:16:d2:4b:d5:b3:39:43:fc:91:9d:64:
                    ab:98:df:bd:d8:95:bf:2a:78:ce:e8:0a:4d:a6:1b:
                    60:b7:de:29:aa:0f:53:5d:65:a6:84:47:7a:f9:76:
                    1d:56:f6:f9:58:6c:18:83:0d:a1:3c:9c:64:ae:e0:
                    d6:c6:d2:e4:65:45:5d:33:95:de:fb:cb:8a:67:cd:
                    a9:df:c5:8d:68:98:4b:59:81:4a:c4:a1:98:c0:b7:
                    22:c5:d9:9c:cc:9d:40:7b:d4:2e:88:a1:60:3f:47:
                    b1:78:8f:d7:c1:f2:42:8d:d5:22:bf:60:66:7b:34:
                    f5:d8:ba:be:19:13:2d:24:22:2e:16:a9:4e:ea:6b:
                    ca:d5:83:37:f4:e4:80:72:30:eb:e6:49:4e:f7:a9:
                    93:b3:2f:28:72:de:81:54:0c:4c:5e:0e:ab:cf:c7:
                    f8:6f:08:eb:ac:86:1a:64:f3:9c:ca:2b:54:f5:37:
                    e2:b1:d8:f5:8b:2a:21:87:a6:70:13:fb:51:d6:23:
                    c7:eb:4b:f5:b9:02:aa:55:a7:31:49:22:7f:ac:de:
                    61:ae:7f:1c:06:55:1f:b5:41:e8:9a:dc:00:12:30:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:19:2A:50:57:57:2C:98:F3:B3:4D:05:0C:B1:07:48:7A:EC:BD:98
            X509v3 Authority Key Identifier:
                keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:53:5a:c7:c6:ab:23:75:fa:a2:6c:54:08:b6:81:82:51:5b:
         e0:4c:22:25:f4:cd:f0:61:81:37:a4:67:77:2a:9c:fb:f8:6c:
         42:03:23:71:f5:35:31:b2:5b:8e:d7:bb:c4:19:40:ee:61:ee:
         b8:db:83:54:16:16:18:c0:e1:54:3e:f9:b2:f3:b2:1f:2c:68:
         28:c9:7d:d6:a2:f5:e4:7a:80:12:10:64:7f:0b:23:4d:a8:02:
         52:a8:ca:b1:14:0d:39:60:14:43:5f:88:a4:ff:41:ff:d8:d3:
         ee:66:ee:34:e0:b9:8c:b6:f7:d1:1a:38:dc:95:d3:94:b7:3a:
         c9:e3:9a:c5:49:4e:a7:bb:4f:74:20:70:69:8c:d6:19:74:6f:
         d2:78:78:38:45:89:81:c7:ae:ea:84:3d:da:70:f5:96:ab:23:
         72:6b:5c:09:69:4c:e1:71:3a:d3:7b:c0:4d:79:33:ba:e6:54:
         bc:d1:71:4c:5d:e7:55:78:cc:6f:e5:0f:20:65:80:be:ad:1d:
         33:14:9b:b0:c6:62:ce:26:e2:7a:24:cb:c0:86:7f:75:45:45:
         b5:e8:fc:af:c6:54:5f:a6:c2:dc:67:aa:e7:16:ee:ac:13:cb:
         d4:88:6f:e5:f6:2e:c4:b8:a7:66:a9:be:45:ad:8d:3d:7a:ed:
         70:1b:53:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:42:37 2025 by rpki-client