Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
File:                     mur6lsnVY-ZQulkv-wbizutqCFk.mft (raw, json)
Hash identifier:          TjHpRMvyTRqPC9elVB3n0/2XxLSadSIV/jbCjivb22Q=
Subject key identifier:   ED:55:07:31:1D:B5:76:EA:7D:07:30:27:EE:3E:8B:E3:D5:47:61:37
Authority key identifier: 9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
Certificate issuer:       /CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Certificate serial:       0194BD17DADD6632B0E66BDECFAFCB0C4F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 16:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:44 +0000
Files and hashes:         1: Uwd9Y3NnCMGZmVRE34P-tV7c6CA.roa (hash: 7yboFI0VfCPRE/G2/gMEN7pPuKOLyqEoyViA8/cI6kQ=)
                          2: irj1HjAurNUv-4zFYoq9zYDgdlE.roa (hash: Q709g8riB8kWPE65HcwVtvNF/Lb15QFI8yUUJR0G7Y0=)
                          3: mur6lsnVY-ZQulkv-wbizutqCFk.crl (hash: +8DaS02k3jX3dBJyUhBrq+jLfgY4nXXy00g88ElR8zk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:da:dd:66:32:b0:e6:6b:de:cf:af:cb:0c:4f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
        Validity
            Not Before: Jan 31 16:00:44 2025 GMT
            Not After : Feb  1 16:00:44 2025 GMT
        Subject: CN=ed5507311db576ea7d073027ee3e8be3d5476137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:95:89:ce:38:f0:ff:cf:55:92:3f:44:7a:
                    7b:d1:ba:10:88:6b:72:56:c0:6a:be:62:d5:05:7d:
                    f5:eb:8e:88:55:4b:53:5a:80:5a:a7:9e:4b:89:cd:
                    9a:e8:88:9d:78:e7:7e:81:e3:ce:20:43:d3:47:a7:
                    cd:37:56:88:91:fc:b2:fa:5e:f5:a5:60:28:82:36:
                    b5:47:2b:aa:aa:b0:90:c4:0a:6f:00:77:7e:4a:e1:
                    a0:a8:76:01:47:11:01:4e:8c:3c:c8:55:b6:49:ee:
                    00:52:54:7a:85:1d:2e:ce:7c:12:df:df:13:cb:20:
                    40:8c:c0:84:9b:1e:d0:a1:4f:4b:cf:fb:70:05:97:
                    16:34:df:02:23:7e:b1:56:b0:bb:31:67:2c:86:15:
                    03:d4:39:81:17:cd:db:be:0e:6e:f1:ee:f6:d9:d1:
                    ef:f3:cc:1f:17:f8:3c:f3:c5:c4:e5:e2:ce:0a:15:
                    53:63:c1:22:1f:74:b0:b9:2f:4c:b3:58:a2:62:d5:
                    fc:96:03:12:36:65:fe:f6:2f:cc:d4:2d:f0:ea:2b:
                    d4:38:08:0e:a9:7d:ad:b9:7c:81:bf:fa:41:18:bb:
                    74:1b:30:80:d0:25:51:6e:6d:09:3b:96:69:5c:a7:
                    25:12:a0:a0:7a:02:9d:40:45:34:e4:01:f9:cf:a6:
                    5f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:55:07:31:1D:B5:76:EA:7D:07:30:27:EE:3E:8B:E3:D5:47:61:37
            X509v3 Authority Key Identifier:
                keyid:9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f0:0e:60:26:65:92:e6:3f:b1:be:a8:47:49:de:cb:ba:0e:
         bd:3f:ff:1f:d8:f0:eb:db:4b:51:a0:7a:ef:67:11:4c:29:76:
         e6:ff:e1:b5:07:5e:f1:19:20:01:ba:c0:b4:60:4f:e5:93:f5:
         1b:71:5a:24:c3:d0:2c:fd:a1:57:0a:a1:1d:fe:21:39:79:6e:
         76:43:97:6b:d1:4d:86:21:69:71:da:84:b8:74:44:c3:a3:af:
         12:d0:a8:7e:51:11:a7:91:e9:1f:86:c9:71:04:a8:7d:9a:c5:
         a7:84:b4:9e:fa:62:b5:9f:be:aa:9c:da:1d:8e:8b:cd:24:7e:
         b3:b8:73:1b:1c:73:bd:8b:5d:89:d1:ff:f6:8b:15:f1:5e:19:
         64:71:3e:e4:ca:d9:1e:94:7f:ac:34:d0:37:c5:34:28:00:2b:
         14:b0:04:d3:a3:c4:01:01:ed:3e:2b:42:f6:af:ee:d0:a6:1f:
         a6:98:0d:e6:05:e1:45:2d:8f:4d:cd:a3:81:44:d8:61:06:fe:
         e0:ff:43:3a:ef:a3:e3:02:03:dc:7f:23:56:5f:fb:3a:89:d0:
         dc:ca:cc:ef:2e:27:68:ab:f2:7d:88:70:d8:05:7c:5f:5e:c4:
         c3:b1:d8:fc:83:c1:41:62:c2:22:67:6d:58:a2:1e:0d:22:f2:
         51:66:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:50 2025 by rpki-client