Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File:                     d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier:          XmSyEJTJfWgUbR43QKgaJ5u7Gvhyha/VTU4tgTbXXG4=
Subject key identifier:   F6:E7:D5:7F:C8:38:A5:B9:C7:BB:4D:14:FF:DD:77:F6:83:55:73:31
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer:       /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial:       0194BCAA3D96FD3B37B45E108A3832B1EF86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 14:01:00 +0000
Manifest this update:     Fri 31 Jan 2025 14:01:00 +0000
Manifest next update:     Sat 01 Feb 2025 14:01:00 +0000
Files and hashes:         1: 1-Q1JJEM-283CkQsyWnWZizkRRH0.roa (hash: pMkrNzbMgj6JidKdCAH0olpZAepxai3+rIJ34FZ4TEQ=)
                          2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: 4rgdy/GpcU1F0IuHkutA5SOEXGZ4UxWHDIKdAkaplgM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:3d:96:fd:3b:37:b4:5e:10:8a:38:32:b1:ef:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
        Validity
            Not Before: Jan 31 14:01:00 2025 GMT
            Not After : Feb  1 14:01:00 2025 GMT
        Subject: CN=f6e7d57fc838a5b9c7bb4d14ffdd77f683557331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:7a:76:c0:ef:f5:d8:7b:fa:9c:26:e1:d0:
                    a6:e1:94:56:9f:16:cd:94:3f:a5:4e:63:d5:7e:0e:
                    3f:5d:db:8f:01:9a:92:10:f7:02:90:bc:37:c7:a8:
                    f8:12:96:7b:5a:1b:b8:46:f1:46:f1:c3:4e:6f:fc:
                    d8:92:dc:a5:5c:71:73:7c:f0:63:93:6c:f7:a8:79:
                    c8:ec:a6:56:09:94:d8:ec:71:b1:05:93:59:a5:f7:
                    4a:12:5e:f0:94:ba:a1:a5:e2:c3:b6:ea:a6:9b:26:
                    f4:4e:57:e8:89:85:75:a6:f2:8d:a3:58:47:df:f3:
                    b5:43:c3:24:85:e9:ab:31:73:54:75:1b:c8:8c:55:
                    24:c7:6a:3d:67:18:56:3a:0b:f7:e3:40:57:7e:d0:
                    db:29:8b:df:1e:e4:c5:8c:42:d9:13:7f:1a:76:cc:
                    0b:68:78:27:10:1e:fa:4e:39:f2:a2:4d:b8:97:e6:
                    85:de:87:40:d9:13:dc:c1:c4:52:12:0c:7e:be:09:
                    44:9d:4a:2d:42:68:b1:86:89:e7:b6:f4:77:7c:86:
                    77:27:d9:a4:9e:07:0a:62:5d:6c:93:2c:f9:4b:46:
                    2e:bf:d3:ed:af:06:91:93:b6:f1:5e:37:10:f5:30:
                    5a:fa:eb:2b:00:2b:c1:7a:c6:29:37:5f:5a:75:76:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E7:D5:7F:C8:38:A5:B9:C7:BB:4D:14:FF:DD:77:F6:83:55:73:31
            X509v3 Authority Key Identifier:
                keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:17:e9:8c:a0:f7:86:18:32:d2:9a:33:dd:07:90:a1:59:6c:
         f6:2c:dd:5f:ec:75:dc:bf:5d:78:e7:6a:71:cb:b8:01:c5:db:
         c4:73:e6:bd:ef:db:f7:7c:2e:69:b0:cd:67:32:27:15:5e:3c:
         ad:79:45:d0:60:53:f6:12:40:2f:ac:f1:6b:cc:9a:ac:f6:78:
         73:5c:27:30:be:f8:84:25:71:6a:66:bc:24:df:bc:1e:dc:8d:
         5e:08:4c:e0:67:08:18:0c:b6:c1:8e:8a:27:4f:28:5a:17:34:
         af:43:0a:45:f6:19:ed:74:8a:24:8a:33:29:cf:84:a7:f1:f2:
         f4:58:6f:ec:5c:a3:6f:6e:ca:5c:f7:96:54:90:5b:d7:5d:28:
         33:ae:83:96:d8:46:9f:55:51:61:db:ed:b3:39:0c:e8:0a:f1:
         b4:2b:a1:46:86:91:1e:ac:5c:4e:19:0a:5b:71:42:8a:9d:bc:
         b6:ff:25:43:75:74:19:72:d0:70:53:94:1c:2e:8e:dc:b7:40:
         94:fd:34:f3:62:41:9a:c9:7a:94:2d:d0:15:50:0e:f4:08:51:
         58:6e:66:09:77:88:25:fd:aa:5d:10:6e:68:f6:66:75:9c:0f:
         ab:5b:5d:37:d1:69:e9:14:17:0d:87:94:c0:b7:58:8a:25:71:
         c5:32:cd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:48 2025 by rpki-client