Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
File:                     PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json)
Hash identifier:          9+53eHMe65pDqIposxHonJCDR5hECpRXH8Lj1NR8tXQ=
Subject key identifier:   DE:FC:33:40:9F:DD:51:D7:1D:2A:1B:38:F5:80:35:FF:AA:21:56:24
Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
Certificate issuer:       /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Certificate serial:       0194BCA97236D4AD75AAE6705473147596C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 14:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:08 +0000
Files and hashes:         1: 3Gi7K5otbF8YAPl6ViRUI8XiRNU.roa (hash: aFHAU+eeRwSzWLG9T2U4VKkPQW4ZT7Ys728VZHAX80s=)
                          2: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: 6TiC2fcMAXMwqs2HhV36ZKq/khzpEJkF28RFCh89mBo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:72:36:d4:ad:75:aa:e6:70:54:73:14:75:96:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
        Validity
            Not Before: Jan 31 14:00:08 2025 GMT
            Not After : Feb  1 14:00:08 2025 GMT
        Subject: CN=defc33409fdd51d71d2a1b38f58035ffaa215624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:74:16:9c:7f:0c:6d:6e:b7:0a:69:7a:bb:c4:
                    d2:fb:48:12:96:7d:64:ba:cb:55:92:3d:61:4b:85:
                    cd:8e:c5:52:eb:46:f6:5f:be:79:cd:84:d9:82:34:
                    a9:0e:26:31:38:fa:26:78:64:94:68:93:bb:72:25:
                    7c:00:52:3c:1a:c6:9c:53:8a:e0:e6:98:3f:8e:1d:
                    27:75:33:90:8d:e4:fb:3b:9d:95:dd:1d:d2:9a:3d:
                    93:df:a1:1e:8d:35:7b:5e:4f:07:af:4c:ab:59:97:
                    f0:42:7f:0e:40:2b:27:f4:15:3c:d0:40:c6:a6:f2:
                    62:65:c9:5b:c0:fa:c0:5c:17:fc:ac:d9:2b:6c:6f:
                    fe:c3:e7:d9:df:5b:d2:22:ac:e8:fd:3f:9d:d8:1a:
                    7c:af:30:9e:31:1b:0c:b9:49:17:83:3d:7a:56:90:
                    f4:f8:d7:09:78:3a:f2:1b:4d:0e:90:1b:ba:d7:f1:
                    a1:dd:c8:45:1f:89:6a:5c:c2:85:05:ff:9d:7b:09:
                    ae:80:c3:b1:0f:a5:5d:ac:41:df:20:be:0d:f3:9e:
                    a0:41:37:a5:2f:68:40:e1:72:4a:98:17:2d:87:44:
                    48:df:e4:16:30:17:d2:5e:a3:16:a5:c4:05:11:80:
                    9d:60:39:3b:43:fb:b8:05:73:e0:e1:45:84:f8:2a:
                    37:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FC:33:40:9F:DD:51:D7:1D:2A:1B:38:F5:80:35:FF:AA:21:56:24
            X509v3 Authority Key Identifier:
                keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5c:c6:64:72:b4:17:67:4f:e9:f0:f3:69:3c:a2:e0:49:ec:
         6a:39:9b:92:dc:ee:c4:20:40:95:be:10:8d:a3:2f:d3:fb:0d:
         7f:ea:d3:d2:15:7a:8b:61:84:43:08:18:69:b8:ff:83:2d:ba:
         cb:59:aa:c7:5b:57:87:7e:7e:4e:fa:fa:37:05:6c:c4:86:a1:
         41:10:d1:b3:43:f8:69:23:a8:fe:df:19:2d:cd:3d:50:91:0f:
         0d:4d:44:d1:a6:83:4e:fa:75:5d:7b:c7:e4:24:bf:d5:15:6e:
         aa:19:27:14:ad:fe:fe:8f:d1:ec:8c:8f:52:66:a2:ec:49:88:
         46:c4:0c:18:92:db:e6:24:32:97:a9:af:d4:2e:57:a8:70:c4:
         03:01:0e:17:89:64:99:76:2b:e7:0b:9b:0d:1e:95:c4:8e:59:
         5e:1e:2b:d6:60:9d:b4:88:e7:4c:58:e1:ba:0b:b9:3a:eb:bd:
         51:04:f5:1e:75:e9:11:ae:9a:84:8c:29:99:fc:a0:6d:50:90:
         ad:b6:dc:84:da:23:6e:f8:aa:ee:b1:fb:34:6b:37:c7:13:61:
         8f:1a:0e:7c:64:b6:a5:91:c8:16:63:5d:38:9d:75:1f:98:3c:
         19:69:62:c9:f4:57:09:5a:70:4a:0a:20:1a:22:5c:02:f8:82:
         12:9f:2e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:57 2025 by rpki-client