Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          hMp8n+OpHcqJog0BiVsXxrK8XzmETNI475tutYsDnnI=
Subject key identifier:   03:78:2E:7D:F2:01:8F:D3:37:AC:37:AD:BE:E4:EB:34:33:2F:03:13
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       0194BC3BC973C3CD5E111F5059A7F458B646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          036B
Signing time:             Fri 31 Jan 2025 12:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:22 +0000
Files and hashes:         1: CSMxyrSjmrdMU8ZRHaAAe_RGymg.roa (hash: MEIeYefWKt26Dy0ikG8FUGPlcnRTGCkKEF7RZOcgkt8=)
                          2: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: WlVNQKxUkDCiBipWG5PooS4G2fPPE1DceZ1p2N2kA14=)
                          3: HRwZymnXLOUIoxoUINYn4to6JUk.roa (hash: pQiZ5yxU+9mvgspIHMzwMKG+1Uq0GJpzfxG88McUc/c=)
                          4: JMmi074Nmj1iEEtTCLq2v_2j7D8.roa (hash: ItorHeYJk34BIM9/5mzkRj4Xd9RbsBvnx52fQ+bR3js=)
                          5: KZgShytB2Dg6qgF16xBAvAwz96A.roa (hash: q4wJLWishIa1PGKUkxxT9s0b4UEcNNHxlEthcKoGKVE=)
                          6: Njz6tF05e2JuE_pdVlzt9icM_i0.roa (hash: nLxr25oD4ktf4kRizFewbb9TO/Wnl/IT0Qm+FXkeMF0=)
                          7: OXV0-TxR9fTn7R31A0-Uw0G4ujo.roa (hash: 3WsJ+LJL05UI01VNuUtaF+j1jHQBCRtShSGIP5WWMP8=)
                          8: hvyCjD-sr1w6tm5UxwSderd8UxE.roa (hash: yEejB8VN7eRKYdvOBcuTAVJxtwqqoPVaxdtPUz/eqYQ=)
                          9: jnYTysXrOb_StYu-PzKs4M4hD2Q.roa (hash: J4kuRDOOkIbQT59LbGJVlXERckVcWQAPxH2vewJm0Sc=)
                          10: kbkI8RvDiJrnetmhHz9BM_Gcqno.roa (hash: s+VqflDnmS4+SWzJ0QNoYmW81XAxeB0gcPfY97iEf4w=)
                          11: pMg8y3R3swp51slWGASXjIFzms0.roa (hash: dk07PbVoKSmAeSfinIgp5Exthi5851mH944uPe7PtDw=)
                          12: uUxZil2b159003xfkfWtUQreHkQ.roa (hash: J/52Jbvu/goI1MIOwJZWmsnYU2my4DOGAr8T0IS/l48=)
                          13: utgq4gGSbao0aUlJcAs8Ut4yhiE.roa (hash: pZ6cJ9gVutX6j8wpquk4JbNCYkJpoFl1XkVXYBQRU/w=)
                          14: vgsTODUN4DNu4XsvZWX7_dDziEU.roa (hash: OpvsJv1O2mE0888WpNjBckKl+Q9vODkDoyJf989gi1w=)
                          15: w3q1wrUy3n2NgVQVYrYOx0D0Low.roa (hash: +dMHTvR4ZE8N0MS6osIM+G5u4qHC04WNVeq5GmLIS2A=)
                          16: xzuQISkcD-LDwaStk5Po8cHtiJw.roa (hash: MTlh23S7S0fGqADN5d5jEOMtMCQeo6fF2QEVS5QqY6A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:c9:73:c3:cd:5e:11:1f:50:59:a7:f4:58:b6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Jan 31 12:00:22 2025 GMT
            Not After : Feb  1 12:00:22 2025 GMT
        Subject: CN=03782e7df2018fd337ac37adbee4eb34332f0313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a7:85:00:51:61:c7:59:34:cf:bb:b6:ab:52:
                    24:83:48:93:3b:48:34:83:f5:db:df:5e:72:2c:06:
                    52:30:d0:f6:0d:14:d3:25:3a:c3:fb:3b:53:4a:f0:
                    4e:e3:04:b7:c8:ee:59:bc:3c:5d:84:65:4d:0e:bd:
                    85:a6:d4:31:a7:0a:f0:25:fb:33:90:5a:26:6f:b9:
                    b9:69:93:2f:75:f1:99:d6:2e:51:ab:42:ba:33:9e:
                    02:ba:86:5a:91:eb:f3:43:9f:26:bc:73:67:ad:d5:
                    52:51:90:3e:fb:3b:31:73:c0:8a:c4:a3:b6:78:57:
                    9e:f0:75:42:05:7a:52:d3:09:85:f1:02:18:62:02:
                    f6:11:c9:8b:41:ce:e5:60:66:89:09:8b:a5:83:06:
                    65:d3:21:23:1c:03:5f:db:84:b8:d3:19:c1:77:62:
                    59:f4:27:ce:3d:1b:f6:a5:57:ae:55:c7:b7:a2:54:
                    2e:9f:53:cb:92:6c:a1:11:8c:f5:38:6a:29:1d:1a:
                    8a:85:ff:1c:7a:91:37:a9:03:d8:e5:9b:eb:76:d3:
                    c0:32:52:33:f7:5c:12:ad:c3:69:64:cb:bf:22:1b:
                    a7:fe:c7:4b:4e:5b:78:84:17:71:8d:14:fd:ed:52:
                    ca:66:a0:16:97:86:2f:43:20:35:e2:ce:04:09:e3:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:78:2E:7D:F2:01:8F:D3:37:AC:37:AD:BE:E4:EB:34:33:2F:03:13
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:99:d7:65:cc:d3:ff:1b:cd:40:3f:c4:b7:c4:aa:41:7e:c0:
         3f:b0:bb:d8:d3:a4:92:3d:b4:04:07:3e:31:d7:80:51:24:cf:
         0c:87:41:2b:83:bc:11:53:69:e5:eb:14:74:ac:85:1d:50:c6:
         6b:bf:7e:7c:d8:ed:cb:72:69:90:24:e4:b7:f7:6c:02:4d:b6:
         8d:44:11:c4:70:d1:77:c8:e3:b0:71:c9:c9:d0:a8:91:91:ba:
         3e:33:6e:8d:9c:ef:36:35:9b:b6:d4:89:44:c1:6d:05:11:95:
         2b:c7:a5:ff:3c:d4:41:18:6c:29:d4:06:73:73:83:fe:9a:6c:
         9d:b0:ef:43:4b:6a:c5:fe:aa:68:99:e7:c0:65:55:14:e2:eb:
         15:a6:45:83:97:9c:f2:65:c2:cd:7c:36:5c:6f:2e:cc:72:9d:
         97:3d:a3:6e:e5:11:e5:b2:ef:2d:4c:ce:c1:8f:3a:3e:32:4e:
         76:71:57:7e:fc:f7:a0:3c:c6:af:71:9e:c4:8b:46:75:ba:b7:
         8c:f4:4c:5f:00:ff:4e:a8:a1:58:b8:2a:29:d5:08:ee:d5:ff:
         0f:c3:a5:fb:e0:11:33:07:3b:3f:56:9c:19:54:e1:6a:ad:0d:
         68:a4:f5:af:ff:66:48:74:b4:8e:68:1b:c7:73:35:31:5e:a2:
         84:63:91:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:40 2025 by rpki-client