Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File:                     kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier:          0mR5+Xs0+s5KcXn4FZPTxgQPIjB//Zh/7WBmgEet2jM=
Subject key identifier:   E7:76:CE:86:48:04:B4:14:05:A5:85:A5:98:60:F2:B2:A9:D0:6C:AB
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer:       /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial:       0194BBCE66288609DB701EA5DCA55206900D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number:          0AF6
Signing time:             Fri 31 Jan 2025 10:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:53 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:53 +0000
Files and hashes:         1: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: YeR+NyM7BSiYO57Kqfd/c/z2/W5ZtDuLGooZTm/nMNw=)
                          2: qZc8LbpaDAe8YC_wNESeZVdptts.roa (hash: rHoCkpXeQIISTyOKdyHTZYhLfz5LjhLjx8VWRXWEabQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:66:28:86:09:db:70:1e:a5:dc:a5:52:06:90:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
        Validity
            Not Before: Jan 31 10:00:53 2025 GMT
            Not After : Feb  1 10:00:53 2025 GMT
        Subject: CN=e776ce864804b41405a585a59860f2b2a9d06cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3c:74:6b:f3:7b:e8:57:8c:1e:47:03:8f:99:
                    f6:77:b1:d7:a4:a6:e8:f8:91:71:e7:3b:8b:31:91:
                    9d:76:52:54:d0:41:49:93:8e:cf:08:06:a5:e8:85:
                    80:c2:17:dc:48:e6:1a:b1:58:2c:f3:96:b8:77:ff:
                    db:c0:c6:d0:5c:d0:93:84:2c:65:98:89:85:88:72:
                    00:d0:a0:e9:6a:aa:4b:6d:b8:12:99:27:a9:48:19:
                    6d:69:dc:ec:73:45:cb:66:a0:13:80:9d:3e:78:2b:
                    ab:3b:97:ed:9a:47:36:aa:94:40:af:be:8e:d3:15:
                    23:58:c1:7f:f9:8f:3c:c4:a5:df:5c:d4:26:80:b2:
                    dc:76:bd:ba:ca:d1:31:8d:18:34:38:75:49:b4:8f:
                    9c:05:9d:d4:87:e3:d8:19:dd:df:2b:c4:8a:26:2e:
                    b6:ae:4f:c6:ba:09:37:6f:4d:77:bb:66:12:88:aa:
                    0e:2d:81:91:69:db:75:da:76:d1:32:83:5f:c6:c9:
                    d2:a3:f6:38:8c:3d:16:9f:b2:e1:6a:fe:a4:5b:7e:
                    ea:b0:b4:5f:93:35:22:3f:ee:2b:6b:34:be:43:c3:
                    6c:96:50:c9:b2:f1:21:d4:8a:1a:00:e9:68:55:88:
                    10:27:a4:85:a6:65:91:1d:32:83:f8:0a:d4:2b:2c:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:76:CE:86:48:04:B4:14:05:A5:85:A5:98:60:F2:B2:A9:D0:6C:AB
            X509v3 Authority Key Identifier:
                keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:41:0e:66:51:19:5d:2c:31:34:f3:75:4d:64:77:79:07:38:
         a0:2a:7f:63:91:1a:34:0e:e3:b6:3c:6f:dd:2d:69:be:7b:14:
         5f:47:c0:ee:dd:5b:5d:3f:c3:52:19:87:f1:58:e1:34:65:92:
         22:b8:08:29:99:a2:57:1d:ab:59:83:20:a0:15:2e:18:1f:dd:
         3e:99:30:ad:82:a7:57:02:b0:4f:e6:b8:5d:49:5c:66:70:11:
         ea:e4:a8:5c:ae:08:19:96:ee:81:55:c5:66:1a:a8:f2:b5:51:
         c9:5b:09:60:63:a9:b2:ca:41:ba:e0:15:dc:cd:7b:70:4d:a4:
         e4:83:f5:b8:a2:89:4d:4f:6f:fa:69:4c:b2:f4:c8:19:95:06:
         57:44:e9:ba:5b:e7:88:b1:f1:58:c5:90:23:06:c0:be:5b:8b:
         b8:5f:b2:86:e9:06:ea:19:24:67:0b:b5:aa:53:cd:59:55:bc:
         d8:7c:93:15:99:cd:a1:ab:bb:12:ad:f3:f3:29:91:08:3a:35:
         d3:bc:7f:09:e3:cb:04:f1:79:7a:04:86:28:5b:af:9c:31:6b:
         5b:3d:55:f0:63:5b:c1:f5:20:cd:f4:38:88:7a:6a:c9:54:8d:
         36:5a:73:fa:5a:91:fc:54:ad:72:a6:70:25:9a:fe:8e:3f:12:
         1a:84:8d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:11 2025 by rpki-client