Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.mft
File:                     e4JUJT3AIT_linr_S4JGPkeXgGM.mft (raw, json)
Hash identifier:          G6ngT/gOguafBUX+cBNX9panPc5+SbfAt7hHtE6PQAs=
Subject key identifier:   DE:40:09:D8:8C:2E:88:1F:EB:4A:EB:37:49:A4:D3:B6:9E:4D:78:35
Authority key identifier: 7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63
Certificate issuer:       /CN=7b8254253dc0213fe58a7aff4b82463e47978063
Certificate serial:       0194BD4E91739782153DBBC4A819746C26C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.mft
Manifest number:          0C87
Signing time:             Fri 31 Jan 2025 17:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:30 +0000
Files and hashes:         1: Yevy_ooRP6NHdtCkrwzMQkfX7aU.roa (hash: UDehP61ywA8/zalfx9piOeTRhGVK5Ml8htL47E3t35g=)
                          2: e4JUJT3AIT_linr_S4JGPkeXgGM.crl (hash: gWuULvnpBi+S/DNtnHs35VpCc0kfwk4TSZtR689qwB4=)
                          3: q-appz8dO4jq67fgxKuZXxmG-yk.roa (hash: 8Ki2HB4a+kdfNpTOR3yuBj286ApIBQr/QxGJoJ7slFE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:91:73:97:82:15:3d:bb:c4:a8:19:74:6c:26:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b8254253dc0213fe58a7aff4b82463e47978063
        Validity
            Not Before: Jan 31 17:00:30 2025 GMT
            Not After : Feb  1 17:00:30 2025 GMT
        Subject: CN=de4009d88c2e881feb4aeb3749a4d3b69e4d7835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ff:e0:19:f6:8f:00:e9:26:ff:4b:2e:a3:a8:
                    9c:38:7d:98:b4:db:f6:7e:4b:f2:5d:80:a6:d7:9e:
                    46:4e:76:f5:8a:65:d6:63:37:4a:6a:d8:1e:dd:d7:
                    4c:e2:87:56:84:55:27:bd:7d:da:ff:b1:fd:e3:fe:
                    21:ed:29:6d:3f:4f:0a:a5:1f:1a:c6:fe:3f:02:0e:
                    ae:f7:f3:7d:7a:18:22:ea:f1:40:bf:bf:32:ef:a7:
                    a0:04:6d:51:af:4f:14:8b:54:9e:2b:c7:e1:67:d3:
                    71:b2:a4:c5:b9:7a:4b:61:90:42:44:0b:10:07:68:
                    c9:e1:a3:32:ab:10:ec:d9:55:1a:06:e1:16:81:1c:
                    84:41:f1:34:3d:4a:6a:07:b3:97:5a:84:ed:7d:6f:
                    5b:dd:d7:51:50:c0:59:14:b8:96:80:1e:66:98:0d:
                    7a:b4:35:57:2c:b7:25:97:58:ad:d6:1a:61:86:c0:
                    56:81:08:a0:4e:27:81:35:97:69:de:a1:02:52:4c:
                    45:62:73:60:c4:c4:09:ba:fe:ee:fe:fa:db:a4:ed:
                    6d:fe:9f:78:0d:1e:c5:15:48:6b:8d:65:82:0b:5b:
                    e4:01:96:b2:b6:cf:1f:a2:8d:37:0e:e8:16:83:13:
                    8b:ef:8e:e9:1d:a3:42:50:09:cf:03:42:90:fc:2c:
                    a3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:40:09:D8:8C:2E:88:1F:EB:4A:EB:37:49:A4:D3:B6:9E:4D:78:35
            X509v3 Authority Key Identifier:
                keyid:7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:58:81:68:56:56:b9:43:8b:df:2b:81:ed:ad:ab:1d:24:89:
         4d:dd:96:33:63:3e:a8:65:de:0b:40:14:af:28:40:2d:bd:67:
         c5:ed:9c:ed:94:b0:21:dc:f8:75:ee:00:6b:99:ca:da:c1:11:
         17:ae:b8:39:19:89:c4:67:2e:ae:0f:c4:de:6e:d4:4a:61:19:
         b3:f4:e0:c9:19:c4:69:8a:ca:74:4f:93:b7:a7:5d:39:a2:49:
         a6:6c:9d:68:3d:f8:17:67:da:d4:78:fb:55:3c:81:b1:88:a1:
         af:b1:18:6a:92:47:e7:ff:e1:fb:90:98:72:5d:e4:32:82:3d:
         4c:57:3a:15:65:8d:94:6b:29:7a:cf:22:e8:c2:ce:e7:b5:fe:
         76:39:90:d1:b1:49:65:fc:d0:05:f5:c7:e9:6c:91:c8:fc:78:
         41:48:05:62:9c:3d:93:53:89:c6:1b:4b:77:16:44:b7:b3:b8:
         9e:73:aa:63:2e:0f:b1:6d:e6:ed:d2:0f:13:d3:96:ce:43:42:
         64:38:38:bd:47:ca:20:71:7b:52:4a:2c:c5:64:df:b1:b3:cd:
         e1:27:54:47:fd:94:ce:24:e7:97:0d:0d:c8:85:3c:79:65:63:
         49:34:b7:9e:27:bc:66:4f:3c:26:10:95:b6:3e:8c:00:39:b4:
         5a:3f:c0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:25 2025 by rpki-client