Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
File:                     p1f4f4bpOyXvTAQzZku-ctqY-_4.mft (raw, json)
Hash identifier:          xguzTCJmH2PQQsVLinVpFpVRoalU45hw1+FKeqvhjgc=
Subject key identifier:   A4:33:A7:5B:1C:95:9C:DC:57:50:7E:2D:2B:41:50:38:F5:29:EF:71
Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE
Certificate issuer:       /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
Certificate serial:       0194BBCDE09E7ABC0942AD71B50833747B49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
Manifest number:          0241
Signing time:             Fri 31 Jan 2025 10:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:19 +0000
Files and hashes:         1: IZ6vDZjMHwfmvRBOdfcy5i9E3QM.roa (hash: uS025afpY/Jz9tEZKMABnGMw3AujzF5/XTw1sc/dgNo=)
                          2: p1f4f4bpOyXvTAQzZku-ctqY-_4.crl (hash: VkfosI6k6BLis2bZ31vPqyWM+q+2fy4wAr7WuugWs1w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:e0:9e:7a:bc:09:42:ad:71:b5:08:33:74:7b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
        Validity
            Not Before: Jan 31 10:00:19 2025 GMT
            Not After : Feb  1 10:00:19 2025 GMT
        Subject: CN=a433a75b1c959cdc57507e2d2b415038f529ef71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:17:fe:58:a4:67:bc:e9:9b:5e:4a:8b:26:
                    7f:7e:af:c1:08:26:46:1a:77:ab:87:96:08:f5:d4:
                    ff:69:57:9c:4c:03:ca:17:04:55:23:5d:aa:dd:8f:
                    fb:58:aa:9c:5e:e5:25:49:3d:01:29:b0:5d:ab:3c:
                    86:a1:c2:b5:aa:09:ee:3f:ec:6b:6b:57:05:8d:64:
                    f8:42:af:40:c0:7e:8e:45:5f:ed:c4:ff:60:33:64:
                    8c:00:85:ff:49:fd:36:14:1d:bc:55:36:94:ce:39:
                    c0:32:4f:13:c3:22:af:a5:f7:9d:55:0b:d9:06:b5:
                    ad:6d:0b:20:64:77:42:45:75:69:91:b3:79:ed:f4:
                    98:91:41:a2:ea:d3:81:a8:3e:f5:94:74:00:4e:aa:
                    ac:1f:e6:65:9f:0f:b6:d0:67:92:80:69:a1:78:1f:
                    15:80:49:14:84:19:ea:31:bf:8d:72:66:df:c1:be:
                    f1:51:91:4c:ab:d6:37:d9:f9:93:23:b7:1e:8e:cd:
                    88:23:7f:38:e2:91:9e:1c:eb:85:b5:8a:b1:c7:c8:
                    7a:d6:7f:13:50:b2:44:4e:18:c8:5d:5e:21:ad:66:
                    cc:74:4c:ca:67:a6:53:5c:01:7d:df:7b:f3:83:99:
                    75:26:c9:80:d8:3d:a6:c0:04:5d:4c:95:f0:8f:21:
                    e3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:33:A7:5B:1C:95:9C:DC:57:50:7E:2D:2B:41:50:38:F5:29:EF:71
            X509v3 Authority Key Identifier:
                keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:7a:9e:f9:aa:4d:07:d5:a4:62:b9:66:82:6e:dd:1c:03:1e:
         37:4b:f5:f1:f7:58:0b:ee:cc:90:86:d4:a3:05:0f:3d:25:a5:
         ea:6b:5b:1d:f1:cb:f7:f4:38:bc:f0:53:6c:1a:bb:70:97:68:
         3c:c1:81:4a:02:7e:5c:bf:ae:76:d3:ec:21:5b:6e:a6:06:87:
         5e:ca:dd:e4:52:0d:4a:a8:f3:6d:71:41:29:4f:5f:f5:23:5c:
         d9:a5:54:6e:7e:bb:58:a5:6a:48:1e:52:bb:22:db:5c:bb:f6:
         97:bc:9d:21:78:76:68:b3:59:de:d8:34:21:3f:b4:c0:e1:eb:
         b9:63:65:58:5d:76:24:02:5f:86:61:59:07:b2:45:84:0e:9e:
         06:fa:35:40:a2:52:13:70:6e:7b:06:54:81:6d:21:e1:3f:40:
         e1:c3:13:e9:a6:f6:a0:6c:c6:fb:4d:f4:f3:5b:39:a1:80:ef:
         2c:71:08:6f:9a:8b:ab:d3:9e:ef:b4:47:38:bb:58:15:62:f7:
         ad:2c:34:09:ea:03:e3:db:2d:44:f2:e0:a9:78:bf:68:dd:84:
         b5:04:f9:51:a9:2d:33:a4:53:b5:56:53:ba:b9:a1:5f:8a:4a:
         85:2f:57:b7:c2:78:17:ba:fb:08:4a:99:2f:b5:dd:5e:3f:94:
         c5:e7:96:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:09 2025 by rpki-client