Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38803f-6947-4c9d-8ce1-03283d49adcf/1/N_jM8Mgt4ETo4uPCsSwIDVJMbxU.mft
File:                     N_jM8Mgt4ETo4uPCsSwIDVJMbxU.mft (raw, json)
Hash identifier:          GmuwZLsJM/9wTqtqzjKFzMIJUfRwaf3FW5+yvO9zW5Q=
Subject key identifier:   80:CA:8C:87:A4:F5:CE:65:06:B1:11:3E:71:F6:95:9E:A5:85:16:11
Authority key identifier: 37:F8:CC:F0:C8:2D:E0:44:E8:E2:E3:C2:B1:2C:08:0D:52:4C:6F:15
Certificate issuer:       /CN=37f8ccf0c82de044e8e2e3c2b12c080d524c6f15
Certificate serial:       0194BC3C9AB4AA2949A4AA19D6099754FC2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_jM8Mgt4ETo4uPCsSwIDVJMbxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/38803f-6947-4c9d-8ce1-03283d49adcf/1/N_jM8Mgt4ETo4uPCsSwIDVJMbxU.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 12:01:15 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:15 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:15 +0000
Files and hashes:         1: 1-Typ11RU8QWD79VPEDt9r35XWcU.roa (hash: hBF72mojE7/AKsdoRvMMcPw7rhC5BjKZ+RYdvTVZtkI=)
                          2: N_jM8Mgt4ETo4uPCsSwIDVJMbxU.crl (hash: To+c/13UJTfrAF3nZM7gZTfUBdpr09nofmw+84f8x8A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:9a:b4:aa:29:49:a4:aa:19:d6:09:97:54:fc:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37f8ccf0c82de044e8e2e3c2b12c080d524c6f15
        Validity
            Not Before: Jan 31 12:01:15 2025 GMT
            Not After : Feb  1 12:01:15 2025 GMT
        Subject: CN=80ca8c87a4f5ce6506b1113e71f6959ea5851611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:60:a8:7e:0a:07:ef:22:50:3d:2c:41:6d:f3:
                    f6:a6:39:56:d2:79:8a:b1:be:04:f4:22:94:54:b3:
                    c0:37:eb:99:7d:17:47:a5:11:a5:1b:02:36:80:90:
                    fc:af:67:37:d8:2c:24:81:b7:1d:c8:b3:fe:31:67:
                    31:d4:03:1a:7d:c2:24:2d:36:c2:79:48:90:39:6a:
                    4a:ca:cb:17:a1:24:9c:94:e5:94:66:e4:da:00:b1:
                    a3:1b:3b:e0:46:58:80:1a:32:cd:0d:27:1d:1e:70:
                    6c:39:9a:07:0a:27:b4:07:b3:c8:7c:bc:a8:3b:66:
                    6a:3e:b0:22:df:e9:ca:15:47:02:5a:b5:29:2e:03:
                    cc:ff:e3:29:c9:b6:14:a5:ac:b8:4c:79:64:92:83:
                    c6:12:61:54:2a:01:4b:43:66:0a:d6:cd:12:93:49:
                    a6:fd:ba:4f:aa:fb:0b:8e:2b:e8:92:be:51:bb:82:
                    30:e9:30:0f:63:c3:80:0a:e4:95:a1:12:cd:f6:b8:
                    92:44:7e:f0:3c:2f:84:b1:26:f2:12:99:68:bc:67:
                    71:f1:3c:41:45:9f:aa:f3:1b:eb:4e:d9:c1:90:78:
                    82:a7:59:d1:15:8e:d0:e6:e0:52:ae:6f:8e:ce:8d:
                    8c:4c:45:76:90:98:a6:70:53:d2:42:ff:2e:69:3d:
                    08:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CA:8C:87:A4:F5:CE:65:06:B1:11:3E:71:F6:95:9E:A5:85:16:11
            X509v3 Authority Key Identifier:
                keyid:37:F8:CC:F0:C8:2D:E0:44:E8:E2:E3:C2:B1:2C:08:0D:52:4C:6F:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_jM8Mgt4ETo4uPCsSwIDVJMbxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38803f-6947-4c9d-8ce1-03283d49adcf/1/N_jM8Mgt4ETo4uPCsSwIDVJMbxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38803f-6947-4c9d-8ce1-03283d49adcf/1/N_jM8Mgt4ETo4uPCsSwIDVJMbxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:80:5c:f0:f9:f7:2b:87:97:30:e5:24:d9:1a:27:5c:a9:88:
         5d:9c:da:aa:d7:87:cd:46:81:4f:e6:a8:bf:2e:7b:4e:49:fc:
         b4:61:d6:68:8f:81:44:e0:ed:d4:50:91:5e:b8:21:dd:0e:9f:
         48:de:98:a9:56:c2:f2:d7:0d:1e:25:05:ed:82:24:61:c4:c8:
         cc:05:78:5c:e3:47:da:e3:0d:c8:7e:01:77:85:16:ce:c4:0a:
         b9:59:dc:f2:97:6e:ff:73:b9:22:ef:3d:ff:6f:82:6f:11:be:
         59:6b:9e:cf:e9:b0:12:05:4c:d0:72:f5:02:d9:fe:29:35:4d:
         c8:a4:83:05:b1:5a:6d:c4:24:2a:86:78:e3:3c:06:32:d9:31:
         c3:82:13:aa:f1:24:bd:b3:a9:e3:3d:56:40:98:5d:12:81:b3:
         83:73:57:4c:94:49:b8:e7:94:4d:8f:08:e4:96:c1:35:88:da:
         c5:ba:50:8b:92:8e:01:2a:02:35:96:11:3e:61:8c:2c:c1:ff:
         cd:04:63:11:eb:01:80:17:8d:f0:f8:7b:20:50:5b:bf:16:c6:
         37:38:74:b7:58:af:91:ac:67:b4:e0:e3:25:13:9f:a2:81:1f:
         f3:d3:b7:5a:87:03:51:ff:71:46:36:f0:a9:88:b7:02:4c:d7:
         83:17:29:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:38 2025 by rpki-client