Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
File:                     jRvvcwUnquHs-PswhWWdb9_u15c.mft (raw, json)
Hash identifier:          D1Krxpqs4BGllXW4n3H4ORP9jBDnfYaaE51Yyt8LKQM=
Subject key identifier:   B1:3E:BB:D8:54:BF:E5:97:A9:83:21:B2:AD:2C:B1:BC:35:18:0A:E4
Authority key identifier: 8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97
Certificate issuer:       /CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
Certificate serial:       0194BC05292ABB8801F790387E0A9B938E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
Manifest number:          0449
Signing time:             Fri 31 Jan 2025 11:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:42 +0000
Files and hashes:         1: h6RNwx35cY5Ou4EEvMzeH5bf3AY.roa (hash: MWzq5pbXjbxkHMC4iAdZ1JJ8dIigq4BPHOpnjCOlKBw=)
                          2: jRvvcwUnquHs-PswhWWdb9_u15c.crl (hash: jf2n0U1IC0RBfapMd5ABMeUBHYDF12JjdEXfOGNjXf4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:29:2a:bb:88:01:f7:90:38:7e:0a:9b:93:8e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
        Validity
            Not Before: Jan 31 11:00:42 2025 GMT
            Not After : Feb  1 11:00:42 2025 GMT
        Subject: CN=b13ebbd854bfe597a98321b2ad2cb1bc35180ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:38:97:24:bd:69:3b:d6:24:5d:73:24:64:
                    48:49:8b:b7:bf:56:d4:14:3b:18:12:d4:91:64:b5:
                    a1:91:7b:af:2d:24:be:c3:32:a4:6b:94:fb:37:10:
                    1c:ff:82:2a:a6:00:fb:46:c4:bc:bd:d7:f6:8c:0e:
                    8b:07:1e:5c:9b:a3:86:19:a9:5e:46:a8:24:1f:d7:
                    92:20:25:7d:da:55:91:4b:30:40:05:5e:91:dc:f1:
                    08:0a:4b:59:c0:0d:0e:b2:13:a7:a2:2f:3b:c3:79:
                    fc:ce:b4:dc:8b:2b:f2:c7:e7:93:8a:79:83:4b:bc:
                    60:9f:81:bb:50:31:6b:99:f5:71:dd:a6:bf:6b:7e:
                    99:71:02:1e:de:44:dd:c3:69:45:bd:e3:a4:00:ea:
                    84:2b:46:55:bc:56:24:05:5e:a8:7a:e0:a0:60:6e:
                    26:27:9a:20:f1:04:33:27:f3:bc:04:13:e8:d4:62:
                    e1:07:cf:c7:52:cd:57:f8:a0:6f:1d:9c:54:5f:54:
                    36:fd:7d:19:4f:1e:53:23:99:eb:23:a0:f7:19:cd:
                    14:3a:ff:6b:1d:95:c1:ab:e4:db:ab:6b:15:47:7a:
                    6e:ee:a2:84:81:2c:6b:a2:78:10:1f:7d:5d:57:00:
                    87:ca:49:c7:ef:8d:fa:32:92:e4:63:98:cd:7a:f9:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3E:BB:D8:54:BF:E5:97:A9:83:21:B2:AD:2C:B1:BC:35:18:0A:E4
            X509v3 Authority Key Identifier:
                keyid:8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:96:5e:b1:c2:2c:29:60:9c:59:2c:d0:a9:5f:18:3d:e4:1f:
         a3:32:51:a9:94:42:f6:24:e3:f5:53:3b:21:84:5f:a8:3b:69:
         40:30:ef:57:e3:f0:84:08:11:12:42:fc:68:29:1a:d2:8d:72:
         b4:9f:a7:61:55:19:05:2a:35:fe:ce:2f:1d:ac:5e:78:f2:64:
         a0:a9:1d:64:c6:32:da:02:e4:68:be:c6:02:09:90:ea:89:99:
         e0:5e:32:ed:8b:0d:01:89:14:17:9e:65:49:0e:74:29:df:30:
         42:51:00:53:ec:e7:14:45:1a:1f:a1:ab:dc:c7:42:69:97:a4:
         d3:f6:97:97:30:83:79:99:1a:60:40:f5:2d:e2:ed:94:e5:94:
         8a:1d:8d:61:d5:56:7b:df:62:3a:17:b4:35:22:9b:bc:9e:9b:
         7d:f3:cf:5f:b1:3f:a6:43:de:3f:bd:4e:a1:7f:26:e9:5d:e7:
         3d:a5:81:95:9e:a4:5c:ee:02:39:71:df:66:a6:6c:4b:22:0c:
         6a:fa:de:fb:ae:1f:57:b0:d0:a0:bc:46:1a:eb:10:27:14:d7:
         dd:0b:37:fb:e2:22:8d:23:b9:9c:29:a6:21:50:8d:5a:78:b5:
         72:42:8e:4e:1d:04:f7:01:dd:e8:15:40:b1:3c:f4:8e:1b:9a:
         bb:ff:a9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:01 2025 by rpki-client