Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
File:                     cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json)
Hash identifier:          LC+/rEmcsLdj2YJhITSmNfLNKSUkD2sGI+sDHpg8yyM=
Subject key identifier:   A6:C9:09:85:CC:85:D9:92:CD:27:B7:83:15:5F:26:7D:16:35:2E:5D
Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D
Certificate issuer:       /CN=7135e3894634482b08317775c79657e9b8312d4d
Certificate serial:       0194BD4EA05016A22FD2505FE4F479DEC99A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft
Manifest number:          0E61
Signing time:             Fri 31 Jan 2025 17:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:34 +0000
Files and hashes:         1: 3vMVhDVuSakGpKEegLzmX9CZn_0.roa (hash: 0WA7LBg+VlA+MYR6g5nbmdux2cCvdzgMgFAqrxmL/5k=)
                          2: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: cIViZBzi2G36vKqUrcS/pJAydQHy5zgHBqyw9tTmMpo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:a0:50:16:a2:2f:d2:50:5f:e4:f4:79:de:c9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d
        Validity
            Not Before: Jan 31 17:00:34 2025 GMT
            Not After : Feb  1 17:00:34 2025 GMT
        Subject: CN=a6c90985cc85d992cd27b783155f267d16352e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:a8:e1:8a:69:69:a2:fd:9a:dc:1b:cc:9d:
                    2a:d0:3f:c8:48:e7:2b:f4:16:c0:2d:e0:9d:99:ba:
                    b1:58:be:fc:4b:1f:7d:71:11:9e:d3:25:03:7b:a3:
                    e1:85:63:47:b3:de:85:b1:6c:81:c7:5e:67:76:fa:
                    ec:5d:a7:8b:a6:73:7c:0c:75:b4:65:4e:61:ff:22:
                    32:fb:d4:9f:32:1e:35:79:17:a6:9e:74:d0:50:43:
                    a7:fe:7e:16:4d:40:14:4b:66:ca:9f:d7:0c:22:d4:
                    2f:ff:e7:76:b9:d8:cd:d2:bd:cb:02:30:b2:fa:01:
                    64:b1:c7:c7:d4:2e:8b:44:1a:d8:21:0b:99:bb:7d:
                    ca:eb:76:8b:11:2f:73:5a:e4:c9:fc:32:c5:de:e2:
                    ab:3d:b0:d2:6d:90:9d:9f:98:d5:3e:66:31:8d:3a:
                    ee:39:6f:93:ed:2b:1f:16:6d:c6:d3:e3:26:87:c9:
                    c9:3c:aa:c8:bb:f5:a1:9e:2e:16:eb:eb:d3:4d:06:
                    65:41:27:19:0f:ce:16:fe:7c:72:ee:16:b0:d0:22:
                    d6:17:56:4c:a5:6d:f4:33:08:46:47:f2:2f:ce:48:
                    7c:61:8e:64:5a:bd:22:e2:b8:31:cd:28:89:20:cd:
                    3d:83:da:16:fa:08:cc:9c:69:d6:ea:2f:4d:e7:af:
                    ef:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C9:09:85:CC:85:D9:92:CD:27:B7:83:15:5F:26:7D:16:35:2E:5D
            X509v3 Authority Key Identifier:
                keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:38:d7:45:b3:7d:17:83:f7:5d:89:6d:52:5e:e6:02:21:95:
         91:fa:e7:e8:68:f8:63:b9:80:2c:ff:40:35:d8:13:35:29:6c:
         a1:f9:1d:d8:ee:26:62:3e:4f:18:c2:96:74:be:fd:86:3a:96:
         64:61:cf:13:be:4d:c1:02:b6:10:63:d7:e1:b0:3f:50:0d:d1:
         16:15:58:2c:a4:49:8e:3a:68:3a:de:1e:dc:89:2b:9a:44:56:
         bb:4f:19:96:8f:dc:61:40:d3:57:b7:82:18:23:c9:2d:82:99:
         46:cd:49:b5:c3:0f:11:70:42:46:2e:bc:2e:35:62:2d:1e:ec:
         1c:bd:ce:d7:3c:43:e2:46:a4:4c:22:d6:aa:ab:33:e3:56:98:
         bd:1c:82:57:59:2a:90:34:93:86:ff:f4:8f:d1:4c:37:50:4c:
         29:22:1d:eb:4c:54:2d:cf:60:5d:4c:a9:59:27:21:cf:f3:ec:
         02:34:29:87:82:dc:dd:c7:41:59:a3:5b:8d:04:64:4c:f2:dd:
         6a:e6:28:36:5c:d3:f8:81:14:ce:c4:d7:63:47:ef:81:4b:e4:
         81:dc:d3:f0:1b:1b:1d:82:52:96:2e:93:e0:6f:95:1b:95:f5:
         fe:e2:8c:07:7e:9f:d7:69:64:ec:0e:24:83:23:99:43:00:73:
         fc:92:a0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:15 2025 by rpki-client