Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File:                     xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier:          p5Hs19R2xFNvSO+FHO5Rn8RDbfllNtAn3fITXC+o18I=
Subject key identifier:   46:15:DC:29:D2:C2:21:64:15:0C:62:EC:C6:4B:35:8D:41:F2:70:BE
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer:       /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial:       0194BCE0ACD31468BC999E96A295ABF7A1E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number:          133F
Signing time:             Fri 31 Jan 2025 15:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:28 +0000
Files and hashes:         1: 0D1cZUMTiqausR0yB4Xw8AGD91Y.roa (hash: P0VFSa5grr5g9c7ABjsVrUERemiG8ev+nwOdbvgc3k0=)
                          2: QPusgTTEf8Wg1WVLNKmPSmYCqFU.roa (hash: 06h/pyTSclOFt6N4vyOy5CCJkDE5PrqzeDGGP4Ri+K0=)
                          3: WjOmLQNoXIGKQgnNRMvsBtSl2rg.roa (hash: wNgkpDpelkaLW9cw3ktDA884g92/B+HsSMkXWMNF8/4=)
                          4: evx28IXwOssrh2ERCzJjqUVnHiA.roa (hash: UTeUnE//0NUZdu2DWXKhAAFi5WcYzx4EajufTh1aEMI=)
                          5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: 2eTNHdntipVeFSMJsCplTLeC+ktelLLszVPfu5bOK4s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:ac:d3:14:68:bc:99:9e:96:a2:95:ab:f7:a1:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
        Validity
            Not Before: Jan 31 15:00:28 2025 GMT
            Not After : Feb  1 15:00:28 2025 GMT
        Subject: CN=4615dc29d2c22164150c62ecc64b358d41f270be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:17:39:55:6b:2b:51:d9:c8:e1:1b:81:c9:
                    a1:27:09:c8:bb:fa:cb:76:81:fe:3d:dc:cf:68:27:
                    cf:9a:d5:f5:52:aa:f2:e8:3c:97:cc:2a:6d:94:be:
                    26:03:03:30:f4:c2:d9:09:66:93:46:4a:56:03:cd:
                    13:7d:95:ff:5d:a9:d0:2d:88:ba:16:cc:89:ae:19:
                    4d:00:5b:94:be:04:9f:d3:39:11:28:9e:ac:95:1d:
                    c1:8e:6e:6a:c2:d3:2b:1b:76:cd:2e:b5:5d:62:24:
                    d7:74:7b:49:9b:b5:c1:7e:27:cb:15:c9:33:9f:21:
                    97:b7:3c:fc:cf:2e:b1:23:25:0e:f7:05:49:43:ff:
                    2d:d6:bf:65:91:0d:e6:fc:83:27:e6:c3:74:8c:36:
                    ea:2e:72:65:9b:91:7a:01:31:b4:e1:a7:90:0e:b5:
                    b5:35:d5:78:20:de:72:7e:da:6e:93:80:57:34:2d:
                    bc:f8:77:e9:a6:17:5f:0b:5a:e8:04:9c:20:1d:fa:
                    72:9f:33:2d:11:c0:85:27:ef:44:3f:fc:dc:fa:74:
                    6b:50:28:e7:bc:da:59:af:82:bf:35:9b:6c:30:9d:
                    e0:6c:71:5c:7d:99:36:42:6d:21:8e:23:8d:81:bd:
                    fd:a1:4d:89:82:95:1e:f3:4d:c0:97:33:6d:77:11:
                    25:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:15:DC:29:D2:C2:21:64:15:0C:62:EC:C6:4B:35:8D:41:F2:70:BE
            X509v3 Authority Key Identifier:
                keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e5:d0:24:79:02:ff:40:68:06:d4:49:46:d4:fa:06:65:71:
         a3:78:9c:c2:7e:f8:f4:9b:a4:20:86:0d:20:11:b3:52:f0:08:
         7e:c1:f8:b8:b7:0d:a6:78:6f:b7:1a:88:8b:30:ac:88:14:0a:
         ce:0f:a3:92:5c:2c:30:41:ed:0e:42:f0:71:5f:7f:ed:b3:17:
         e3:a6:7b:c9:e2:73:dd:f8:aa:23:9a:98:a0:a5:34:e0:d1:b6:
         7c:a2:07:0a:26:84:d7:9e:36:6f:a7:5b:ad:5b:29:a9:28:81:
         26:2b:2c:d0:76:36:49:95:c4:89:33:cd:f2:d6:f3:b4:91:f2:
         b4:fd:a4:04:bc:3e:0c:4e:df:ad:d8:0a:7a:da:07:46:86:fa:
         f1:ee:b1:7e:a4:af:f7:a7:c7:08:54:39:9e:08:48:d6:80:f9:
         52:07:0a:c1:3c:3e:1f:db:21:ae:8d:e8:42:35:e8:86:14:54:
         7e:90:2c:83:32:22:c1:ed:8c:b1:e7:13:ab:82:e1:fb:5e:80:
         79:35:19:e4:6f:44:b0:c5:3e:76:64:c8:25:77:93:c5:9e:89:
         69:ba:ab:57:14:b6:3d:81:55:89:39:2c:90:84:fd:47:21:eb:
         0f:6c:60:aa:4e:72:54:1d:5a:09:bd:f5:78:fb:2a:80:8b:67:
         37:b2:20:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:33 2025 by rpki-client