Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File:                     ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier:          zg38urWC5UQIU6rurKex8GtbOy7OhROpee/b4RoGlTQ=
Subject key identifier:   F0:1D:07:C0:17:0C:E2:09:0B:8E:BC:C4:FD:41:76:3C:03:CC:2C:FA
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer:       /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial:       0194BC3C60390726A53B2E28379B1816BCE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 12:01:00 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:00 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:00 +0000
Files and hashes:         1: WLmUyFV8H24Y5kzvnWadWBycLgo.roa (hash: E+HDKH3BqBvsQRxbFmxgjKgFmfAPfEm3M2aQXUVUkSg=)
                          2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: CEQIPD35ZRcrGs0oEavQ7mqTyBP9xuQo3Id80zxgyXc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:60:39:07:26:a5:3b:2e:28:37:9b:18:16:bc:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
        Validity
            Not Before: Jan 31 12:01:00 2025 GMT
            Not After : Feb  1 12:01:00 2025 GMT
        Subject: CN=f01d07c0170ce2090b8ebcc4fd41763c03cc2cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:25:44:f0:9a:03:63:36:a2:aa:4b:4b:a4:
                    5f:a3:8f:25:d1:a0:49:c4:b0:ed:13:ed:64:4d:df:
                    d7:b7:d9:62:17:62:73:87:b7:e8:a8:aa:a6:df:a4:
                    4f:46:52:a2:bd:53:f5:6d:97:8d:ed:a7:64:42:f1:
                    c0:9d:1d:fb:8f:9d:d1:91:cb:41:57:87:68:9d:38:
                    de:5e:05:dc:0a:4f:96:11:b6:ef:c2:29:97:dc:63:
                    e5:3b:36:78:16:20:58:03:ee:34:4b:8c:a9:55:de:
                    b7:ca:cd:47:0d:b0:40:ca:97:ae:5d:b8:3d:46:40:
                    43:c7:59:97:0b:1d:59:b5:b4:9a:2c:3f:8a:d2:85:
                    e8:f6:e0:cc:3b:9c:a9:a8:fc:ec:e4:2e:35:c6:ca:
                    8a:d3:e0:5b:5c:88:28:6a:1f:4f:62:b6:15:08:1f:
                    04:62:6b:8e:ac:27:e4:f8:7d:d3:a5:b4:84:7c:e2:
                    4e:63:d5:9f:28:05:48:56:82:1a:c5:93:d2:98:4f:
                    86:d8:43:c9:2d:64:3f:91:15:2a:5a:95:5a:e6:6e:
                    5a:01:72:b6:a7:54:b5:a1:c3:32:91:d0:09:94:0c:
                    40:eb:23:00:3b:d0:35:af:c8:f6:07:91:f7:ff:9e:
                    b5:ff:04:9f:2e:94:f6:15:49:d0:24:09:9d:57:68:
                    16:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1D:07:C0:17:0C:E2:09:0B:8E:BC:C4:FD:41:76:3C:03:CC:2C:FA
            X509v3 Authority Key Identifier:
                keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4a:f3:d4:dc:82:73:2e:30:ad:8f:63:50:eb:4a:96:03:28:
         12:ed:c7:46:48:4e:d9:2f:0f:b3:5a:10:d3:1c:d8:bd:cd:5a:
         ce:c5:be:e8:5e:52:a2:ff:1f:83:b6:47:55:97:6b:2a:2e:fa:
         64:21:6b:44:d2:44:21:5f:5b:75:f9:1e:c5:13:4d:68:6d:3e:
         1a:5b:05:b3:7e:91:ce:90:db:b4:b7:36:bc:9d:0e:74:71:5b:
         e7:10:a6:cb:61:86:70:f3:16:3d:33:88:a9:f5:5e:6a:4c:e4:
         16:8f:7e:40:ad:06:f8:12:75:dd:1b:8e:ed:86:b9:03:0b:c8:
         4a:d1:ef:46:22:76:73:b5:77:61:dc:fe:5c:fb:3a:76:86:95:
         57:95:1b:29:a4:6b:9d:78:83:7e:72:09:22:e3:db:7a:de:c9:
         ca:9b:40:47:c5:1d:1d:bc:0c:e1:1e:1c:dd:69:ef:78:e1:cc:
         50:e2:b6:69:66:a4:95:4f:4b:bc:5f:45:16:53:3b:b9:8c:d9:
         e0:c2:c9:90:53:f2:6f:ae:e3:a9:28:b4:8a:e7:ab:b0:b2:ae:
         be:9e:67:7b:09:00:86:9b:9c:a6:4f:fc:a0:7c:b9:18:16:8a:
         a7:a0:e4:25:fa:90:cc:0f:c5:a3:87:3e:83:63:29:f1:51:78:
         92:8e:19:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:38:29 2025 by rpki-client