Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File:                     IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier:          9/SpzLL0yoEUJ6i1rgHL6/I/qAPIX3XscWwjP6fTgWg=
Subject key identifier:   46:3A:48:EF:46:F9:BC:CE:18:A1:7B:15:C5:29:3E:AE:9B:91:BD:69
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer:       /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial:       0194BD4EA45FC9D4185C4E6F522AFA4855D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 17:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:35 +0000
Files and hashes:         1: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: u6t5jDsZBHeEeYz3n9OYa7X306znago1wMQyPdbO/JI=)
                          2: IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa (hash: nrrSBtVL1+LxQy+ccPed0KobnXytQAq3RiSJBLbBVIg=)
                          3: NfNd6pjqYOF2P-1csZDDcYiiQ28.roa (hash: iQWQfc6lD74rDEabgsCAVeBcixywrixRVP1KpMFN48o=)
                          4: PJBAejzPvEvF3ZoupzGWVEj1Og0.roa (hash: BFJtqcfNldj6Jrfn0Y0+mOBk6xT0n483gTjn5ogYiu8=)
                          5: dSYYIsgqOPsPCWRb8n6bjaKooRw.roa (hash: Pvqr/OOkaqypvOSknbbOn2J0oHNnn5WhmVz2GaH3aXU=)
                          6: quZyu716dxS9mdBeGNCJZ1sGIZM.roa (hash: MPvLxa0c+riXjzyelLJV18hBBvFNCarL2WtEM/bk6Os=)
                          7: sx8Ag2ZkbPORNb5IpKGaIu2_Dqo.roa (hash: ZFFpoBJ2SvC/bg4XtAEwmcSclBY/i+xRWcdnLVCOAss=)
                          8: wUsJ3Y8bKRlwOlXMA6Qttd1Brps.roa (hash: zuU1UQuoYfDo2IQVUCO8dMMln85NIWVqpAhKwg/ayj8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:a4:5f:c9:d4:18:5c:4e:6f:52:2a:fa:48:55:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
        Validity
            Not Before: Jan 31 17:00:35 2025 GMT
            Not After : Feb  1 17:00:35 2025 GMT
        Subject: CN=463a48ef46f9bcce18a17b15c5293eae9b91bd69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:1f:9c:4c:d9:d7:cd:69:b9:5c:85:03:c0:
                    8e:16:06:df:0e:36:5b:4d:8c:75:1c:26:23:e0:a3:
                    5f:a4:cf:b2:e7:61:1c:be:58:5b:2c:fe:13:0c:a7:
                    84:8e:d3:cb:f7:0c:c0:72:d2:3e:c1:18:5e:fe:86:
                    08:4d:de:da:12:ca:eb:c8:3d:87:9b:5b:b1:2f:59:
                    45:6e:77:54:1a:36:98:54:51:f9:ac:90:68:f8:ac:
                    4b:00:08:89:ac:67:f1:b5:56:a2:5f:ce:c7:eb:a4:
                    fe:ca:e2:83:92:a5:ac:be:8d:10:5f:16:ff:27:3c:
                    2c:0e:da:7d:cf:be:da:7f:6a:c0:d8:03:6b:98:15:
                    c2:42:8e:f8:da:5c:34:a9:dd:48:93:03:8b:14:b7:
                    a1:50:21:0b:3e:c4:f8:a4:ce:04:ec:d9:eb:57:98:
                    f0:3c:36:27:46:dd:79:49:d9:2b:1a:22:f8:26:0c:
                    0c:91:40:00:8a:cb:da:70:ff:dd:ab:fe:e7:09:39:
                    6f:ce:02:98:c2:7b:05:36:5e:1c:fd:2d:ee:5c:31:
                    2b:c2:9e:89:85:13:8c:21:49:cd:8d:35:a7:6e:41:
                    1d:88:93:fd:f8:11:e5:15:52:da:72:5e:bd:56:5b:
                    25:1f:4b:c0:1a:e7:10:5a:16:cf:62:e5:b7:83:a3:
                    d7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3A:48:EF:46:F9:BC:CE:18:A1:7B:15:C5:29:3E:AE:9B:91:BD:69
            X509v3 Authority Key Identifier:
                keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b8:27:ab:bd:98:ad:ee:0a:b2:a6:65:d7:14:fc:95:a4:95:
         5d:e7:eb:15:1c:b6:13:45:de:65:17:81:0b:7c:54:53:8f:c8:
         0c:50:82:37:95:ac:1b:a5:d3:81:71:e4:78:91:93:85:f4:76:
         cf:e5:c5:6c:ed:81:47:ed:60:6e:3c:ea:07:55:10:36:00:46:
         a4:55:b1:37:bf:39:3c:99:f5:a1:57:b4:33:59:74:86:cc:93:
         27:0c:3b:06:e1:d4:e0:2e:f4:ba:6f:51:67:28:c2:2a:41:09:
         e7:5e:e7:37:32:73:af:95:c0:fa:b2:36:da:f1:bf:27:6b:96:
         d0:1e:46:5c:ea:9e:c0:16:47:67:ee:40:51:56:fd:49:6e:ed:
         c9:51:93:1a:61:5e:ba:e4:39:6e:c1:89:ee:70:e8:76:28:29:
         62:eb:66:cb:33:db:df:4d:59:e7:e5:f1:cf:36:6f:b5:71:a2:
         c8:97:6b:16:af:06:dd:63:54:3e:ff:77:c4:d7:0f:10:a3:b8:
         da:d3:c7:a2:40:05:a0:97:61:51:56:19:f0:8f:cd:23:1e:9a:
         02:79:77:c7:d7:5a:a8:46:88:e7:76:18:5a:3d:86:04:8c:ff:
         8f:37:d2:a7:4b:0e:e8:94:ab:33:78:b4:75:9d:18:64:71:06:
         46:49:36:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:35:08 2025 by rpki-client