Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File:                     P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier:          D2mPR3PEc7VEgwmyWlPq9tp+LFrXxvUzeZ6GBdLM1ZQ=
Subject key identifier:   37:D4:EC:8F:54:29:B9:05:88:0B:F2:8B:51:39:90:9F:52:54:86:74
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer:       /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial:       0194BBCEF80B1FFC037928A62D19049ACB11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number:          19
Signing time:             Fri 31 Jan 2025 10:01:30 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:30 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:30 +0000
Files and hashes:         1: GU1YI3vRymC8okEmp-zZRparjfs.roa (hash: q/QbAyjmOhWo1JcjW3JwZIKUXCaSn/iJ6pmWpIOWSpI=)
                          2: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: 6I287UDlUgHuKlqFvUxQ8Tjn9IY2fZfPFcivO0VVQD8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:f8:0b:1f:fc:03:79:28:a6:2d:19:04:9a:cb:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
        Validity
            Not Before: Jan 31 10:01:30 2025 GMT
            Not After : Feb  1 10:01:30 2025 GMT
        Subject: CN=37d4ec8f5429b905880bf28b5139909f52548674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b2:73:d2:e0:c9:b6:87:e6:83:94:5d:7e:ae:
                    e6:c4:fa:75:ca:6b:67:14:8a:3e:92:bf:09:c5:d7:
                    ee:5b:d4:8c:ce:35:78:6f:88:a1:b0:03:e1:8b:63:
                    63:79:5f:68:99:9c:0d:43:2c:29:ac:d2:67:38:29:
                    6b:16:17:78:7b:27:73:88:38:f9:83:85:b9:ec:04:
                    7a:2b:43:48:db:f3:2d:09:aa:08:0c:14:a3:3b:c0:
                    d7:64:a6:cd:57:82:d5:ec:75:6c:67:00:13:a9:b4:
                    ca:14:13:82:8d:46:be:7a:75:6e:45:67:c8:ba:3b:
                    47:4c:5d:e6:c4:f3:60:b3:70:ae:a4:35:09:68:0b:
                    c6:77:5e:cb:1c:92:f7:c6:ed:e7:45:01:db:43:9e:
                    4f:04:9b:f5:33:7f:b4:a6:ad:35:1d:d0:cd:f4:b5:
                    e2:4b:3f:12:d2:15:5f:0b:a2:22:ab:e8:5f:df:a6:
                    9d:6a:f8:14:3e:a6:e5:7c:29:02:c5:df:22:d8:09:
                    20:31:51:04:8c:8b:34:1a:24:58:75:5b:80:90:fc:
                    6c:e7:9d:e4:b2:76:56:04:24:4b:a4:2d:ef:ee:d3:
                    33:7a:0c:ff:95:85:69:ab:37:04:62:93:6b:2d:8b:
                    e6:f2:a3:9d:de:66:53:aa:25:70:25:03:e4:02:54:
                    ac:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D4:EC:8F:54:29:B9:05:88:0B:F2:8B:51:39:90:9F:52:54:86:74
            X509v3 Authority Key Identifier:
                keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f4:6d:88:c2:b5:00:eb:87:0d:7e:e2:c2:0f:53:0e:38:83:
         8d:a1:6a:20:9b:15:a2:cf:c0:a9:70:3e:cc:76:ab:55:34:79:
         c9:5f:d8:9c:86:11:d8:9c:e5:54:18:0f:d1:c7:0e:8d:33:ec:
         35:a9:ee:57:e9:a7:e3:0f:40:bd:a4:77:2c:a5:ac:7c:41:9f:
         b0:d8:f7:e8:0e:a7:b0:4c:84:97:30:0c:99:44:06:06:77:a7:
         76:06:06:d7:49:3f:a4:39:4b:9c:0d:a8:9b:4e:49:a3:51:43:
         07:64:b1:ef:55:d2:12:57:c7:10:0e:99:99:19:72:bb:16:fe:
         82:12:9b:b3:76:ca:1d:32:42:2c:04:33:c8:36:98:ce:a3:a2:
         5b:1c:7c:99:1e:30:b3:c8:e8:00:86:8c:2e:3c:81:d7:84:23:
         44:3a:38:7c:74:e6:3a:5c:16:aa:cc:3b:0d:38:9e:9c:d4:b3:
         23:fb:00:48:30:4a:c9:c5:15:03:0f:ce:2c:59:71:cd:48:77:
         6b:bc:28:43:f3:7e:92:db:cd:3a:f9:70:d6:0c:24:8e:b7:25:
         37:79:55:69:b6:b2:70:a0:48:2f:5a:ad:99:c8:c8:b6:d3:11:
         fb:87:1c:c2:b2:a3:6c:87:ab:6f:a0:1d:83:c6:e8:eb:15:06:
         ac:ff:e6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:11 2025 by rpki-client