Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
File:                     eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft (raw, json)
Hash identifier:          Y1xVklhMZU4AmK40XDh8EojeeN/aCElWD9pk59WvmWA=
Subject key identifier:   F5:F7:47:B5:35:53:95:12:ED:EE:8C:85:58:1A:46:29:2D:64:0D:63
Authority key identifier: 78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
Certificate issuer:       /CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Certificate serial:       0194BC04C1FD83773C5013E0D871E58A4C71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 11:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:15 +0000
Files and hashes:         1: NcVmbBEUQZYA1mNrc4VF2mAiUSk.roa (hash: jeQ6CR9o4kjg+lITTYhPycLMezjSSuHW+WQ2edSSAyQ=)
                          2: eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl (hash: P8chgDaCAa57P5TQK5tEoO4YWdqNNYe1f9zTvkxIN38=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:c1:fd:83:77:3c:50:13:e0:d8:71:e5:8a:4c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
        Validity
            Not Before: Jan 31 11:00:15 2025 GMT
            Not After : Feb  1 11:00:15 2025 GMT
        Subject: CN=f5f747b535539512edee8c85581a46292d640d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:c3:cb:bf:cb:d8:88:fc:f6:4b:32:a6:12:
                    99:c4:3b:e1:32:03:a2:f7:e4:fc:1c:c9:22:58:1f:
                    08:f1:02:97:72:1c:48:09:df:eb:be:c8:4d:e9:f7:
                    3f:59:ad:44:08:27:71:99:ca:eb:42:2c:e0:5f:ff:
                    5c:20:48:03:61:10:92:a3:6d:67:f0:77:b3:20:c4:
                    73:d7:99:7d:d3:4c:6f:bc:22:0e:2b:9c:49:1d:af:
                    f4:5c:9e:97:4b:ad:5b:4e:60:f1:66:69:be:60:89:
                    ed:da:c8:69:7d:c8:40:0f:45:49:5c:ac:f2:cd:59:
                    1a:f4:d8:1e:58:43:b8:2f:85:e5:92:74:94:5f:b6:
                    2e:ce:21:bc:7b:b3:d6:ec:a9:ee:2f:18:fc:b1:25:
                    c1:f9:02:ed:4c:df:be:77:16:20:77:69:e5:86:94:
                    4c:7e:17:dd:41:c5:65:fd:ee:16:6d:b9:04:d1:21:
                    5b:3a:d8:26:f9:98:8d:09:0c:e4:06:b3:a4:fb:1f:
                    c7:52:41:f0:75:d2:89:e5:a0:25:5f:41:a1:81:f4:
                    ab:67:5e:e8:16:7b:8c:1f:a3:02:d0:00:68:00:d5:
                    4a:67:97:43:d1:39:6b:cc:98:a4:19:4c:c4:61:7e:
                    db:83:fe:a1:e8:53:8b:70:57:57:de:44:b2:72:1f:
                    a1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F7:47:B5:35:53:95:12:ED:EE:8C:85:58:1A:46:29:2D:64:0D:63
            X509v3 Authority Key Identifier:
                keyid:78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:17:48:07:a9:ed:b8:99:14:f3:a8:bf:15:89:ae:c8:40:15:
         f5:0c:57:d3:ae:29:7f:f9:d1:73:a4:f9:84:3a:d0:a5:75:0f:
         6d:a3:e0:e4:31:ee:10:5a:e1:18:0d:b8:d9:16:37:cc:b8:ad:
         24:03:9a:8f:0d:92:e7:5c:53:74:a5:b6:e1:b0:31:19:2a:d0:
         bc:65:22:cc:67:29:dc:98:e8:48:5d:b7:7a:ec:90:93:b7:31:
         92:27:58:81:5b:50:e0:b1:4f:52:c2:ba:36:73:f4:4d:d1:b7:
         19:bd:8e:3b:6f:ca:62:9a:94:fd:54:bd:fb:fb:50:3b:7f:58:
         9a:e5:21:06:66:ac:f8:fa:6a:be:30:68:1f:e8:c4:f0:b9:71:
         40:97:1f:21:bb:45:99:c8:9d:8e:5a:2e:64:33:4d:ba:c9:8d:
         d6:a9:08:51:f0:e9:8c:29:3f:a7:6c:df:fe:e6:1a:c3:a0:1f:
         40:30:1b:82:80:b9:36:10:82:c8:38:74:31:80:34:c4:e0:8a:
         c2:78:2c:60:af:18:94:08:01:9d:59:b5:f6:5e:a3:da:8f:1d:
         45:30:83:86:39:8d:b5:d8:9f:ad:3a:e5:3d:98:ca:1f:24:38:
         32:92:03:d3:8c:86:96:d6:df:a5:a7:6a:8a:e6:61:09:89:e0:
         e5:ae:0c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:42 2025 by rpki-client