Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File:                     mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier:          gUg1jpa70QrC5GmZvezLkKpx6G7u3YZl/8qHVrxCSrw=
Subject key identifier:   E0:16:A5:03:7B:90:5E:D8:2B:A7:70:29:8E:E4:50:82:EF:73:9C:92
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer:       /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial:       0194BC3C04D1EDB76A61589B6D23D362C7B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 12:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:37 +0000
Files and hashes:         1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
                          2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
                          3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
                          4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
                          5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
                          6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
                          7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
                          8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: UcsyVyh1I6f65Yjrz13WuTj/Jxo199ZcMOS6eQqVcbo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:04:d1:ed:b7:6a:61:58:9b:6d:23:d3:62:c7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
        Validity
            Not Before: Jan 31 12:00:37 2025 GMT
            Not After : Feb  1 12:00:37 2025 GMT
        Subject: CN=e016a5037b905ed82ba770298ee45082ef739c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:39:e3:17:61:7e:bf:1a:22:3a:4b:95:95:47:
                    c8:9d:68:07:f2:5f:f9:4b:64:15:c7:26:b8:2e:ab:
                    69:ab:a7:a2:95:ec:76:fc:95:92:b5:f8:75:8f:a8:
                    6e:3e:03:4d:73:e0:86:26:9c:2e:a9:0b:ea:9f:af:
                    2c:5c:00:cc:a2:1a:7c:27:c1:f5:d8:4c:fe:b6:84:
                    e1:19:42:e9:a6:11:d6:cd:ca:8b:50:00:4f:35:55:
                    bd:36:1c:2f:6e:3c:07:f9:a8:66:91:33:05:ca:cb:
                    c4:60:22:f0:ac:f3:24:3f:2c:4d:8a:a3:76:7b:bd:
                    5a:3f:ef:4f:5d:45:64:3d:8c:2a:23:29:50:8c:8e:
                    80:87:23:15:22:f4:8e:5d:5f:91:c7:44:99:24:ee:
                    6d:6d:4b:28:97:db:84:c5:9e:bb:77:c5:10:72:5e:
                    88:47:e3:a8:cb:ac:88:0a:6f:1e:07:ac:9c:84:3f:
                    60:35:f2:52:b3:44:55:a0:c5:39:e2:63:e0:b7:fc:
                    f0:b5:1b:af:db:18:59:05:90:d8:ef:93:0b:c5:c0:
                    2f:42:f7:cc:ee:16:94:c2:fd:8b:eb:10:a2:14:f1:
                    1f:7a:3e:ef:a0:8a:bb:c9:3a:16:91:13:ab:65:b8:
                    25:4e:d3:0c:ca:96:1a:5c:61:30:9d:06:28:96:b7:
                    14:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:16:A5:03:7B:90:5E:D8:2B:A7:70:29:8E:E4:50:82:EF:73:9C:92
            X509v3 Authority Key Identifier:
                keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c7:62:24:ce:d4:07:35:c0:5e:4d:66:e1:33:fb:14:a5:06:
         06:d5:7a:10:6f:2f:ba:bc:9a:51:bf:09:dd:53:4f:bb:4c:d4:
         3f:be:43:87:98:72:d0:5c:61:8a:fc:df:8c:83:4a:33:a1:af:
         02:bd:f5:9f:f7:e2:17:f8:5b:0c:f1:c0:35:71:c7:7d:e8:f9:
         23:94:83:d9:04:2a:eb:34:10:1d:b6:af:3b:46:dd:77:42:31:
         54:e1:39:3e:49:14:1c:26:3f:5b:c1:c7:b6:29:92:ef:91:54:
         12:8a:2e:97:38:1e:cc:c7:1e:d9:4e:38:23:98:19:84:cc:f5:
         08:33:00:f4:0d:73:90:1a:99:45:cc:60:1e:ae:3c:1b:e0:4d:
         83:db:03:8c:a9:ad:aa:30:c8:bb:6b:70:60:54:fc:c3:5e:99:
         7b:46:24:c2:34:06:66:e9:b9:14:cf:37:25:e0:c1:6a:17:cb:
         da:2a:3f:f4:c8:3e:42:81:2c:e4:5d:51:56:7f:44:7c:1d:1a:
         17:69:cc:e8:fc:47:75:03:b3:2e:b5:cb:96:05:cf:c9:6a:38:
         1d:ee:03:9b:8d:09:f4:2d:51:b2:4d:6a:b3:24:69:5c:55:fd:
         51:5c:e9:90:5a:6a:c3:3c:85:f9:65:02:de:4e:17:b4:c1:b9:
         71:8d:2a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:05 2025 by rpki-client