Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
File:                     Sn94dtTFVUt3Klfn8cTO03-14Z4.mft (raw, json)
Hash identifier:          WoRUJ3HvEtGGOfoQIBxWDTY9L1czG4KBrXrPIrvQGg0=
Subject key identifier:   59:C0:F5:71:3B:D0:48:0A:A3:38:94:03:00:62:94:3B:FD:7E:4C:39
Authority key identifier: 4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E
Certificate issuer:       /CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
Certificate serial:       0194BD853FAD87C9B9880789D412AA9749EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
Manifest number:          06A6
Signing time:             Fri 31 Jan 2025 18:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:13 +0000
Files and hashes:         1: 8dRpFL3Tx6_eHYDV0GF9jVjNRKU.roa (hash: CYL1YeCCG8xFxfjQulVKl6xa2WJtFP2ORTHbcUggMA4=)
                          2: Sn94dtTFVUt3Klfn8cTO03-14Z4.crl (hash: hqSMMrzwZvHjNjOFEMhSN5RNP8FhP/D0uRnQnwa2JhE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:3f:ad:87:c9:b9:88:07:89:d4:12:aa:97:49:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
        Validity
            Not Before: Jan 31 18:00:13 2025 GMT
            Not After : Feb  1 18:00:13 2025 GMT
        Subject: CN=59c0f5713bd0480aa33894030062943bfd7e4c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d7:46:2b:82:fe:83:57:d7:2b:ba:c9:06:b7:
                    07:d2:36:b9:5b:c5:77:05:37:ee:e4:92:1b:89:52:
                    12:da:fd:63:d7:86:05:db:75:f7:4b:88:e8:f7:23:
                    6b:98:06:d1:36:85:18:34:0f:59:11:b8:e8:fd:d1:
                    6f:47:89:68:b0:97:db:c3:84:05:01:94:7e:f2:0c:
                    c2:c7:29:19:e8:96:16:12:64:64:8f:d1:4f:a4:7a:
                    c0:af:1b:f4:fe:c1:77:db:ad:00:21:69:45:c9:40:
                    bc:3c:d5:b6:a0:d8:33:7d:83:ca:91:40:54:94:b9:
                    a7:b3:30:2f:1d:50:8a:30:a5:a9:76:f2:52:0d:b7:
                    c9:30:30:e7:93:0c:4a:c7:53:31:c0:95:4c:f6:16:
                    ec:b9:1f:72:5e:94:40:f0:90:aa:35:83:dc:ba:35:
                    4a:8f:12:7a:3b:95:a3:94:e8:9e:4a:03:f9:12:37:
                    70:a9:58:69:26:64:16:35:a0:37:4e:44:74:62:03:
                    ac:a4:a1:d1:af:0b:ec:24:5e:cd:a6:31:53:24:d0:
                    a0:33:81:34:86:fd:74:5d:6f:73:5a:25:e3:23:61:
                    26:13:ae:14:8d:08:68:d9:39:28:65:56:8b:d3:d5:
                    70:42:18:0a:1b:21:7f:98:19:82:c3:43:e5:90:e7:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C0:F5:71:3B:D0:48:0A:A3:38:94:03:00:62:94:3B:FD:7E:4C:39
            X509v3 Authority Key Identifier:
                keyid:4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ef:c8:40:ad:b8:01:f1:33:c2:66:42:cf:c3:ab:e5:d7:62:
         66:ed:d4:e0:aa:39:79:b8:d3:64:ce:e8:a5:7b:e7:88:2d:32:
         19:a3:16:ee:2a:92:cc:a4:b7:63:59:a0:11:08:35:5d:79:d9:
         eb:cc:34:d8:9e:84:68:fb:b2:dd:09:5a:4c:e5:bd:2b:a8:e4:
         de:f7:ba:d1:8c:0c:dd:95:48:e6:b5:26:f2:2f:54:2b:70:4c:
         33:4d:3b:40:27:59:bf:a3:a9:5e:ec:33:38:b1:7d:24:50:16:
         ef:03:0b:b5:81:47:c4:c1:cf:4a:18:93:18:a4:8a:aa:01:35:
         6d:74:00:04:b9:f6:54:57:73:fc:7c:1e:b6:54:08:db:27:60:
         6c:1d:da:c7:ce:28:e1:23:74:ae:2b:a4:b6:1a:f8:90:c9:4c:
         6f:a8:98:66:2a:8c:15:9b:34:d2:ed:ec:64:8b:b0:eb:93:d6:
         3e:78:22:f8:5e:3d:34:98:fe:07:42:20:6b:ac:aa:a3:7d:2f:
         cd:5c:4b:76:45:b5:db:6d:0c:1f:97:88:ed:b6:41:8c:1a:72:
         bb:9d:9e:c0:25:d0:18:08:f5:44:47:55:76:1c:a8:0a:01:8f:
         a6:e1:e6:7d:d7:19:df:04:e8:70:dd:a0:3d:31:17:22:72:07:
         7b:1b:a2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:39 2025 by rpki-client