Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
File:                     OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft (raw, json)
Hash identifier:          ZqSS7jlGm0aeBf/9x7+RsX+9GDIJIJ3/R8MzCpBTCm8=
Subject key identifier:   81:CA:40:2F:74:81:9E:1D:01:3B:4D:B9:0B:E5:8B:91:83:8D:43:35
Authority key identifier: 38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75
Certificate issuer:       /CN=381203337b0cd06fcfc045588f097cbc24153a75
Certificate serial:       0194BC04DF0E28BA5A25D1035473B4010293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
Manifest number:          012A
Signing time:             Fri 31 Jan 2025 11:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:23 +0000
Files and hashes:         1: OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl (hash: sAKy+nV69XlXC2ouNCkEH/cywrQA/5xVC4j2kWc1wGQ=)
                          2: e6qgc4D0LObiBDkG-JYeFJ0X1R8.roa (hash: HGLblEw2HtaEUIxL5jALfeyy40mvJ9+sofWltk0ijmU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:df:0e:28:ba:5a:25:d1:03:54:73:b4:01:02:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381203337b0cd06fcfc045588f097cbc24153a75
        Validity
            Not Before: Jan 31 11:00:23 2025 GMT
            Not After : Feb  1 11:00:23 2025 GMT
        Subject: CN=81ca402f74819e1d013b4db90be58b91838d4335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:01:8d:c5:19:cb:fb:d1:93:ed:0c:40:f7:61:
                    f4:0f:e9:26:1c:50:de:51:64:32:49:f3:6e:7f:30:
                    c3:4a:ab:ce:d3:27:7a:59:67:9f:89:69:3d:d0:c9:
                    f7:cc:7c:f9:ce:31:e6:87:a9:56:93:26:5e:a5:16:
                    e5:21:4a:cc:be:6f:13:28:da:aa:8f:18:15:f7:4f:
                    0b:d5:39:51:e1:4e:e1:e8:cb:96:d3:07:85:3f:44:
                    b5:fb:96:25:b7:e7:16:4d:d1:c0:23:44:21:81:df:
                    ab:18:90:ab:f0:15:e1:05:be:9d:48:ab:74:14:17:
                    c5:da:55:8f:4f:9f:2c:5e:9e:06:0c:dc:3d:00:c1:
                    ac:f5:42:6f:e9:17:e2:2f:4c:40:36:4a:87:50:b6:
                    27:d6:f3:77:d3:27:f1:5a:6b:01:e9:41:95:6e:8c:
                    59:6d:17:cd:3a:d8:b1:39:15:14:59:02:ec:67:30:
                    10:33:61:2f:cb:27:63:f9:fd:15:f5:47:c7:10:e4:
                    18:9c:6d:07:fe:9b:18:05:4d:fa:8e:fd:95:15:1f:
                    52:65:76:95:36:1f:ca:04:48:f5:81:2c:1d:b4:d0:
                    90:8e:ee:a5:46:b7:52:d1:da:93:aa:e0:2f:93:fe:
                    51:5e:92:8d:de:0b:27:97:42:b8:32:56:36:51:97:
                    e7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CA:40:2F:74:81:9E:1D:01:3B:4D:B9:0B:E5:8B:91:83:8D:43:35
            X509v3 Authority Key Identifier:
                keyid:38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:51:b6:ce:6b:bf:aa:df:b0:c7:e0:7e:23:20:97:57:b5:b5:
         2b:d4:d5:2e:52:ac:4d:66:cc:ba:64:89:d0:d3:60:83:9d:bb:
         a5:c7:31:3c:57:71:35:ee:89:db:21:d1:98:31:33:ba:5a:cc:
         16:f2:df:41:a4:63:52:14:d0:f0:7d:e5:f0:07:de:2c:f1:84:
         01:43:ac:90:68:98:e8:b0:2b:e9:b2:67:67:9e:4c:e5:00:71:
         d6:ed:c7:29:df:62:f1:0b:5d:8e:42:3b:ea:a8:50:e6:63:50:
         63:ce:7e:60:ea:49:fb:28:76:6b:59:f9:95:92:2a:c4:0b:d5:
         af:c3:84:72:14:76:29:6e:86:c5:99:17:7c:63:cc:db:59:53:
         d5:a3:79:a5:2b:44:1f:18:69:d5:3b:44:37:1d:4e:cd:f3:33:
         4a:da:09:4c:32:ea:84:a0:31:3d:77:9d:7a:e5:8e:94:e9:3a:
         b9:e3:2e:cf:9c:d8:3e:e2:86:ef:f2:b5:ba:19:07:89:5a:8b:
         65:d7:59:4e:0e:2b:0b:1c:47:0d:d7:8d:68:76:fa:a7:cc:ac:
         85:0c:e5:91:5c:66:62:43:b9:25:dd:b0:2d:c9:1c:61:82:5b:
         66:22:77:80:30:1b:a7:84:87:74:73:59:ce:1b:20:39:dc:4f:
         5e:d6:d1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:41:10 2025 by rpki-client