Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File:                     FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier:          XpBIkws+Di0xqAn4Cv9vQRuwzj/+COICbsDrud5a3FI=
Subject key identifier:   E1:12:15:D7:81:CD:81:6D:02:19:42:40:A6:F9:71:D4:94:7C:E9:CB
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer:       /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial:       0194BD177A550C1E3F4A8E43CA6CFA1B4CA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 16:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:19 +0000
Files and hashes:         1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: 4t57YJyDixRD7ayZq6qCjY39z3LpwhSbaR9/dBvxZDQ=)
                          2: TSGJBwmUH6zzcSk5BJxtW8RE4eo.roa (hash: GDRdYgmwqR/8cmIcSo9mtVpLWe+BPUg+Ymiy8VwGofg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:7a:55:0c:1e:3f:4a:8e:43:ca:6c:fa:1b:4c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
        Validity
            Not Before: Jan 31 16:00:19 2025 GMT
            Not After : Feb  1 16:00:19 2025 GMT
        Subject: CN=e11215d781cd816d02194240a6f971d4947ce9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cc:36:1a:98:3a:79:8c:f4:da:fa:a9:9e:74:
                    9a:19:5f:d0:a1:c7:88:bc:9d:45:3c:cb:f5:c8:ff:
                    4e:90:2e:68:53:aa:14:06:20:34:e2:57:f9:ed:9f:
                    a1:6d:23:5d:25:74:0b:0e:41:c1:36:1a:72:b9:88:
                    f5:0f:89:ee:34:0b:0c:24:2a:59:0b:29:17:2f:25:
                    56:e3:9b:6d:28:58:b4:9c:e8:16:c6:a3:65:3f:a3:
                    ca:9e:12:de:35:4c:ff:4a:ad:e3:e4:e2:d3:c5:90:
                    3d:bb:28:f9:73:7c:1d:ad:e9:f1:80:d3:24:dd:12:
                    3e:0f:8f:47:09:24:4e:b8:d4:85:7c:14:3b:21:1a:
                    59:89:03:3d:64:40:64:2a:0b:12:18:a7:05:b9:92:
                    79:ff:92:5d:44:0c:61:93:0b:a6:2b:55:77:8f:c8:
                    b0:9f:a7:e2:4e:1e:98:43:6b:b3:74:51:ac:fd:24:
                    5b:9c:70:48:2c:33:e3:8e:c1:7e:12:cd:dc:30:25:
                    c1:25:e2:e5:74:17:c5:25:db:1f:60:cf:f7:a4:82:
                    a1:79:f3:bf:79:c3:88:f4:2f:86:02:ab:e2:f7:22:
                    44:47:47:51:c3:80:86:55:0e:8a:b4:9c:a6:ac:2e:
                    0a:46:7d:ba:78:9f:ec:6f:5d:2e:76:33:49:70:2c:
                    4a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:12:15:D7:81:CD:81:6D:02:19:42:40:A6:F9:71:D4:94:7C:E9:CB
            X509v3 Authority Key Identifier:
                keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:87:fa:1f:2c:7e:f2:7e:21:90:6e:02:49:ce:ed:12:9c:24:
         05:11:1d:b2:db:5a:20:ea:b5:10:df:9b:b7:1a:3f:79:90:78:
         df:65:c9:42:51:07:73:8e:4c:08:60:6c:fc:61:d9:3d:78:9a:
         d2:74:9e:cc:59:9f:15:b4:dd:1a:3c:1a:cd:dc:76:ff:14:de:
         b2:e3:21:23:2c:a5:68:d2:5a:02:4d:c6:44:13:69:31:e2:af:
         49:90:9b:ad:16:87:a9:62:40:b1:d9:4f:e7:e0:50:e5:ab:c0:
         75:3f:37:8f:30:f7:8b:e4:cf:98:22:09:11:d1:8b:94:80:69:
         3d:e4:63:ad:8c:b5:33:63:a0:47:dd:1c:11:62:61:e1:bd:1b:
         b3:84:40:b6:ed:ce:ae:4d:b3:16:e7:97:bb:1d:de:56:af:cd:
         54:27:d9:ea:32:f4:5d:ac:7a:0f:2a:a2:cb:cb:92:c2:9e:07:
         9b:4b:74:08:fb:62:cc:08:f7:40:5f:92:4a:df:c3:3d:73:c7:
         39:c9:c9:4b:ab:79:58:42:bc:e2:22:9b:8f:0f:a3:d4:e2:46:
         47:bd:f2:5a:55:fd:25:34:d9:ee:33:91:c3:0d:64:54:a5:7d:
         37:0f:35:8d:47:6b:ae:07:4a:38:46:2b:98:77:38:6d:76:b5:
         f2:81:b7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:07 2025 by rpki-client