Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File:                     inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier:          f+/KF+K/Sv7vvHB0Qm/Aa7+TuRRYY12NPHSbPSaKoNI=
Subject key identifier:   97:A8:4C:3A:DD:CF:ED:7B:EC:2F:25:0F:45:30:30:3E:25:90:32:9E
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer:       /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial:       0194BCE08DFA4007479BDDEF12953BDB9560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 15:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:20 +0000
Files and hashes:         1: TTn8sD8XVXKDyT7akuDl-7NaiVA.roa (hash: G+wfHyyl2e/lbOKV3OV3aaADlcnryO/8kE2PLZtYozg=)
                          2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: 3yskXH2Jht2HKvaPslEuGqP7L1wrlGFIGM2Rn9Ry7mc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:8d:fa:40:07:47:9b:dd:ef:12:95:3b:db:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
        Validity
            Not Before: Jan 31 15:00:20 2025 GMT
            Not After : Feb  1 15:00:20 2025 GMT
        Subject: CN=97a84c3addcfed7bec2f250f4530303e2590329e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:a6:80:94:3a:01:c1:65:c5:35:bc:2c:0e:
                    8c:ef:2d:96:c3:49:01:9e:c0:3f:67:4f:5b:d6:58:
                    d9:ba:67:0c:3a:09:29:21:df:98:a4:e5:18:95:17:
                    28:b4:d0:08:3a:59:74:e8:8a:59:d2:5e:a3:c5:b5:
                    68:c4:95:5c:56:a7:1b:a5:7f:ac:01:c8:72:a2:ca:
                    ae:b1:94:4a:e1:e8:39:bb:04:f2:21:a4:e2:16:28:
                    4d:17:07:5a:87:16:83:a7:83:a5:60:50:77:ee:69:
                    fa:3f:29:cc:a2:d8:49:9f:50:e0:d2:54:a5:ed:0e:
                    cc:1e:a0:f7:83:24:33:99:a3:34:97:08:0f:74:27:
                    49:87:ef:13:79:67:58:a5:cd:34:c9:86:97:04:c2:
                    d5:9d:d9:e3:f2:15:b2:3a:5d:7a:01:ba:59:16:96:
                    71:6b:04:e3:8f:e3:c0:15:3a:1f:0b:3d:d3:08:a2:
                    09:51:27:ef:e6:0a:49:d1:99:b5:07:c0:6f:71:65:
                    a4:39:c6:df:0a:ff:ca:e0:2e:4b:0a:eb:17:8e:ac:
                    e3:ac:de:07:81:e8:1e:69:f0:65:1f:76:a6:4c:6e:
                    60:f3:43:74:1f:e8:1f:21:c8:1a:5f:89:c4:74:48:
                    ae:3e:8b:b2:4b:fd:70:4a:c6:e2:3c:66:af:7e:b8:
                    a7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A8:4C:3A:DD:CF:ED:7B:EC:2F:25:0F:45:30:30:3E:25:90:32:9E
            X509v3 Authority Key Identifier:
                keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9a:59:2f:64:a8:ad:f6:2b:0a:e5:bb:20:b8:1d:7f:c2:13:
         df:7e:2b:27:f0:cd:36:6c:bc:eb:5a:7b:66:e0:c5:ee:f7:24:
         5d:18:85:ee:14:8c:d5:c2:2b:f5:c0:ee:f8:cd:52:8b:1a:1b:
         bf:ea:cc:cd:a2:13:ce:1a:10:4c:cf:27:f5:0e:34:55:37:98:
         46:6c:fc:ad:3d:27:e3:58:7c:15:87:54:f5:7f:f4:6b:4c:a1:
         ea:18:8a:51:59:3b:d3:80:1a:1c:42:26:c0:77:6b:02:12:3d:
         1b:37:7f:b7:4d:b6:54:2f:65:cb:61:6e:9d:71:62:0d:32:94:
         d0:90:40:d0:2c:fe:11:41:08:3b:40:50:6d:85:64:9d:f3:d9:
         ba:9c:74:d8:25:30:0c:6b:85:4a:58:7f:d0:44:2a:68:18:22:
         e8:8f:a9:43:19:c3:c6:09:1d:7f:83:03:3e:2f:7f:ee:e3:fa:
         28:06:bd:33:a8:95:87:3b:ca:0b:97:c2:96:32:d0:1f:55:32:
         a5:d9:d9:44:b3:21:66:23:28:17:5e:94:2d:f3:62:a2:24:65:
         5a:0d:b3:a5:ca:5f:a1:38:83:0e:f2:8f:5e:fa:db:cc:30:b8:
         fc:20:6e:a9:a0:34:c7:ef:e9:44:51:64:ba:46:dd:74:dc:29:
         50:27:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:14:10 2025 by rpki-client