Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
File:                     R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft (raw, json)
Hash identifier:          BWvm60Jr2ZLiFYwDBN6E0X9iofZje9T+S3NsEW9vZtg=
Subject key identifier:   EA:1B:60:23:25:63:92:7B:1C:93:9B:22:8F:EE:89:CE:33:88:85:CC
Authority key identifier: 47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
Certificate issuer:       /CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Certificate serial:       0194BCA9D3826AA17D0668CB35FF2EF86E30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 14:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:33 +0000
Files and hashes:         1: R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl (hash: RBvCLDOYF8QqTEi+pfo+3arcJpIO4+2ijyk+/WjjenQ=)
                          2: UBzZXqpHAZVZ_dUL4TUUD1ewE-4.roa (hash: dU40dyYAxG0jUVXRYy3IsfQ8lbv7vAwEo5+BvKJGXqw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d3:82:6a:a1:7d:06:68:cb:35:ff:2e:f8:6e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
        Validity
            Not Before: Jan 31 14:00:33 2025 GMT
            Not After : Feb  1 14:00:33 2025 GMT
        Subject: CN=ea1b60232563927b1c939b228fee89ce338885cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5e:60:0a:9e:ae:ca:1d:31:45:1c:dc:86:b6:
                    63:bf:34:10:0e:77:34:cd:66:ab:35:f6:0a:bc:48:
                    1b:6f:ec:c6:99:7d:55:94:4d:17:56:62:f2:76:7b:
                    bd:f1:06:5e:76:f2:ce:e9:5f:1d:0a:4b:23:c2:57:
                    e7:ac:0b:30:32:6d:6e:72:96:b7:cf:b3:e1:99:09:
                    c3:c6:20:78:d5:f9:52:bb:a1:42:28:2f:6a:e2:27:
                    e0:48:a4:f1:96:eb:7d:bf:3e:37:c0:36:cd:28:63:
                    d5:31:86:7f:24:66:b0:6f:65:13:ba:76:7f:43:15:
                    b2:c5:c8:5b:cc:ba:9d:41:76:c6:5f:5f:9e:62:a6:
                    ea:5d:38:06:8b:c0:9b:f9:6e:16:25:25:c9:88:29:
                    82:51:de:b0:7d:72:da:2c:73:26:08:5e:25:12:15:
                    00:c7:da:bb:0e:29:d0:6a:79:cf:a7:7a:05:29:c3:
                    71:c7:b6:e0:bd:8b:49:11:91:5b:68:85:95:1b:87:
                    36:5e:c8:f3:8e:2d:5f:30:8d:9a:40:28:a2:0f:62:
                    bd:a3:2d:e1:f0:b3:32:0c:54:1f:cb:d1:62:29:48:
                    00:ae:56:6a:ae:87:c2:91:44:40:7e:7e:f6:66:16:
                    aa:d6:76:7f:de:bd:9c:6f:be:80:29:9d:9c:81:d6:
                    6b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1B:60:23:25:63:92:7B:1C:93:9B:22:8F:EE:89:CE:33:88:85:CC
            X509v3 Authority Key Identifier:
                keyid:47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a1:a8:48:f3:bd:ba:9d:44:4c:de:ae:71:4c:95:32:57:9b:
         72:56:2c:2e:74:bd:8f:3a:03:06:0f:c8:43:ed:64:79:65:28:
         c7:1a:2c:e4:05:39:ce:90:bd:ff:1a:bd:26:ca:7e:56:ed:ad:
         90:9c:39:51:18:bb:b9:02:6d:e3:7c:fe:04:61:0d:99:ba:f3:
         8a:a4:2e:8e:30:34:e4:0c:53:65:63:2e:55:18:fd:bb:be:cb:
         f2:85:5a:44:09:d3:57:f3:6f:f9:32:d7:c0:88:2c:10:16:4f:
         ac:4e:b7:6f:25:76:5f:25:83:58:96:ee:93:8c:e9:5b:5d:03:
         e8:e0:cb:4e:c0:b9:bc:e3:6f:c3:ca:a7:67:13:30:2b:46:da:
         ad:63:5b:2d:e7:28:1d:e3:b1:8b:00:17:45:52:bb:27:23:15:
         dd:c6:ac:9b:08:da:e3:da:37:fa:0c:1c:3a:75:36:c7:04:b2:
         50:a1:9f:cd:de:2b:9c:85:94:64:55:d7:3c:6c:f7:0c:e7:bf:
         25:65:1d:3f:8e:33:bb:db:c6:f0:4f:80:29:5f:6f:aa:02:94:
         17:0a:64:d3:cd:c3:7a:dd:f0:75:df:0e:72:e1:12:f0:9e:7f:
         cd:05:6e:c0:5c:74:c0:b5:3b:58:45:cf:87:60:e2:50:34:e7:
         d0:d7:0c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:02 2025 by rpki-client