Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
File:                     ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json)
Hash identifier:          mP2SUGs0frr76G9FrcZx5cOKTABoAuUWwjuGKdgs6Ys=
Subject key identifier:   FC:42:DA:91:90:DA:D9:88:79:42:9E:D4:B1:D5:9B:47:05:0F:90:B9
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Certificate issuer:       /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial:       0194BD4E6E52AAFA3A7F07049B70DFD0ED81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
Manifest number:          0891
Signing time:             Fri 31 Jan 2025 17:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:21 +0000
Files and hashes:         1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: hBg2O8kh1XxTlwH2KdCsg1ukKesAlmsh8rjJOky0Yic=)
                          2: ZO7e_PGmOJbyLefyo1_z7BwudxU.roa (hash: qgGJbkNlWC+c5Pqt1/eJ7xg6x83bvhdBUelMm/vCnYI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:6e:52:aa:fa:3a:7f:07:04:9b:70:df:d0:ed:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
        Validity
            Not Before: Jan 31 17:00:21 2025 GMT
            Not After : Feb  1 17:00:21 2025 GMT
        Subject: CN=fc42da9190dad98879429ed4b1d59b47050f90b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:32:24:c7:90:56:d7:30:ad:f2:d3:f8:ef:d4:
                    54:e5:16:89:e0:81:5d:29:09:a0:cc:f1:ff:d8:1c:
                    bf:41:25:22:51:1b:4b:e1:99:86:bc:b0:0a:45:45:
                    66:8d:71:89:80:c3:39:80:3d:d8:c6:4f:de:e5:f2:
                    8d:1e:f2:fd:f5:b0:47:60:c7:48:d0:7d:aa:a9:65:
                    4d:66:e6:37:b8:4d:8e:05:1b:d3:f8:bb:ff:61:1d:
                    2d:4e:30:17:68:62:d4:b4:b1:63:77:16:4e:37:e5:
                    c2:8b:91:99:1c:4a:b3:76:9f:05:2c:02:bd:1c:00:
                    1b:a9:4f:71:76:46:1b:c8:87:e3:a6:46:74:6e:79:
                    f6:38:48:4f:4c:75:cd:80:bf:c6:d3:92:fc:36:cf:
                    05:7c:ac:2a:4a:97:0c:80:6d:52:3a:93:a8:44:23:
                    5f:1b:45:c9:17:a5:7c:2b:60:59:ef:30:cb:75:97:
                    c4:19:d4:d9:87:dc:f9:7f:d9:dc:17:86:65:51:fb:
                    e0:07:f1:3f:74:1c:10:5d:ef:80:79:02:a5:a8:d3:
                    25:6f:a9:97:6f:27:57:aa:ce:d7:40:a4:c5:87:dd:
                    a7:cb:66:d0:4f:7a:57:a1:62:fc:75:fa:d4:89:87:
                    ac:8b:29:13:7c:bf:28:40:3b:26:67:bf:e1:ed:15:
                    5f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:42:DA:91:90:DA:D9:88:79:42:9E:D4:B1:D5:9B:47:05:0F:90:B9
            X509v3 Authority Key Identifier:
                keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:68:d2:af:57:22:13:5f:ae:4a:90:06:cf:83:c3:17:76:3a:
         15:25:06:2b:ab:fa:18:6b:33:26:64:1e:fa:32:cc:9b:3c:ef:
         51:1b:97:45:13:72:e1:30:b8:34:e0:1d:37:bf:69:d5:16:5d:
         dc:75:da:24:ce:e4:46:d4:e3:82:5a:ac:6d:3f:0f:00:b0:4b:
         1e:b8:c9:42:e6:78:4e:af:91:81:3c:db:3f:0e:b9:19:d1:d4:
         8e:bb:4c:c7:50:ee:e6:7e:a1:2f:22:85:1b:70:b4:86:ca:6e:
         d8:88:6e:37:ef:19:f5:3e:4e:12:bc:43:a4:a7:42:59:96:65:
         50:7b:94:d1:fe:a9:d3:4c:c5:34:4a:e7:7c:82:52:12:53:30:
         5d:bd:8f:df:3d:8e:a5:15:14:fb:2d:c9:65:5e:9a:f2:71:64:
         98:d7:10:61:84:c2:ab:bd:4f:e6:2a:77:a9:a1:86:2a:1a:88:
         94:c5:6b:2d:74:d8:56:08:d1:94:17:b2:a1:f8:5f:cf:9c:44:
         bf:ae:a6:99:2f:36:74:9f:0f:cd:14:f2:5a:44:fc:62:ae:62:
         0a:1f:5c:79:c1:d4:53:b3:ca:5b:a4:88:6b:c3:bd:27:72:5e:
         f0:7e:9e:b9:4e:03:27:3d:f4:bc:ae:66:50:85:42:fd:d1:f9:
         ec:3c:f2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:58:33 2025 by rpki-client