Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
File:                     GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft (raw, json)
Hash identifier:          C63UUHpBv0BmpRaTgs/6WWtIUIxPVScyDqAAJIOIH04=
Subject key identifier:   0B:35:ED:B6:D2:43:E6:BC:F0:78:E3:3E:23:E7:93:A5:9F:C5:C5:B4
Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
Certificate issuer:       /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Certificate serial:       0194BC728325AC07DA27533B702ED7838A8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
Manifest number:          0143
Signing time:             Fri 31 Jan 2025 13:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:08 +0000
Files and hashes:         1: GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl (hash: Bc853e+aXoVmj2ud/yaIm8V3j0fRe2CJPQ/1yYsEbZk=)
                          2: REh2fJFOUQT0aTDY9FX0qElIo2A.roa (hash: v403zz3pfGBhC2EeF1+1/Ixjaub1EklsKy+XOu6apXQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:83:25:ac:07:da:27:53:3b:70:2e:d7:83:8a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
        Validity
            Not Before: Jan 31 13:00:08 2025 GMT
            Not After : Feb  1 13:00:08 2025 GMT
        Subject: CN=0b35edb6d243e6bcf078e33e23e793a59fc5c5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:1c:36:64:81:41:05:6a:ab:0f:76:31:d7:
                    30:12:08:c2:78:a9:e7:a9:e5:5c:c8:1f:bc:c0:29:
                    3b:c7:bc:e2:8e:b0:31:1d:e0:24:4f:33:60:68:5a:
                    6b:a9:17:39:c9:a5:e4:ba:43:fb:8b:66:c6:9e:be:
                    f1:8c:41:d5:5b:8b:10:2c:a2:d5:ad:d0:da:f5:80:
                    0d:5a:7f:c0:d9:cc:35:e8:3f:da:42:77:e8:db:3c:
                    ff:28:f7:ef:36:35:a3:68:30:74:b7:2c:3f:4c:8c:
                    7c:5c:9f:7c:4d:6a:85:70:af:59:20:4f:9a:52:5c:
                    49:99:b3:72:c7:74:20:a0:86:7a:c3:70:3b:40:4d:
                    25:3e:39:4b:25:48:48:aa:cd:48:a9:6b:ec:c2:b7:
                    ee:19:df:d1:76:c5:dc:53:d9:fe:de:82:1f:e8:84:
                    5d:95:ea:d4:ab:db:cc:a7:03:3f:99:1f:08:05:16:
                    d9:75:d5:e5:60:21:fa:3d:2a:88:fc:ee:be:52:d4:
                    03:88:92:f0:ea:3a:52:2e:59:a6:67:6c:ad:15:bf:
                    c9:ad:1b:96:c7:f9:e2:33:90:60:1c:59:fc:f1:55:
                    64:4d:12:56:e9:84:36:17:4f:e7:54:47:e2:f6:0f:
                    57:fb:3a:4c:f0:e5:25:be:22:41:44:8e:9c:71:de:
                    2e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:35:ED:B6:D2:43:E6:BC:F0:78:E3:3E:23:E7:93:A5:9F:C5:C5:B4
            X509v3 Authority Key Identifier:
                keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ea:9e:53:1e:b1:be:96:eb:06:45:7e:64:55:14:b1:a5:44:
         ab:83:67:84:66:6e:0d:36:37:d4:0f:70:c1:f4:0b:99:7f:87:
         f7:9f:24:ca:73:23:1e:ff:3c:50:74:74:65:c0:ae:cd:ee:61:
         6b:42:37:75:b0:74:d1:77:30:f3:7a:b6:85:3f:2e:fd:bc:f9:
         cb:9d:3d:79:cc:9d:cd:32:9f:51:b7:46:b7:28:ad:8d:f3:51:
         19:6b:39:89:fb:95:7b:b6:8e:c0:87:7f:fb:40:da:34:c1:40:
         53:b2:db:aa:76:a8:f0:b3:c3:0e:f4:38:6f:6d:fc:cf:e1:ed:
         1b:55:90:bd:d2:db:65:eb:fa:5f:bc:54:46:67:57:55:60:f0:
         9e:2d:bd:89:a7:47:f9:e6:dd:57:e5:00:24:58:e4:f7:58:0f:
         88:94:3d:3d:13:93:b9:f8:e6:c6:b6:b9:13:20:36:77:0c:af:
         66:d2:51:31:21:48:0e:26:46:47:96:d7:2b:1f:65:da:c4:79:
         14:b3:89:53:33:36:81:23:57:64:f2:1e:c4:8f:aa:b7:00:a2:
         41:c2:24:46:54:7d:60:f8:c9:21:09:2e:50:25:cf:5f:a9:24:
         c5:d1:f4:c9:f8:b6:0c:3c:bc:66:bf:e4:f9:f4:ca:17:6a:27:
         89:ff:57:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:05 2025 by rpki-client