Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
File:                     QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json)
Hash identifier:          g5ebIRP0mUloe9We2FxXRKrOXM+rgcE9xYEAwDbkeoY=
Subject key identifier:   F6:E6:E0:5B:82:48:0C:C6:76:52:BF:9C:C4:53:F1:35:B1:2E:36:60
Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
Certificate issuer:       /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Certificate serial:       0194BBCE2418E316C7ADEA985AF91A33F4A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
Manifest number:          137D
Signing time:             Fri 31 Jan 2025 10:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:36 +0000
Files and hashes:         1: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: juFbEKduYnbU9MhP8/aMg3Bo1W3etA6WSw++YkXuApc=)
                          2: fSiDlWwoGniklT0F1na2YoYly6g.roa (hash: jQShuABqrNJ6xVnXKO1phumkAcZdn3LFktiTS8/eFss=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:24:18:e3:16:c7:ad:ea:98:5a:f9:1a:33:f4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
        Validity
            Not Before: Jan 31 10:00:36 2025 GMT
            Not After : Feb  1 10:00:36 2025 GMT
        Subject: CN=f6e6e05b82480cc67652bf9cc453f135b12e3660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:d6:a4:49:6f:a6:04:c6:76:c1:09:29:75:
                    aa:ab:d4:8f:ba:10:10:a0:e2:03:fc:33:cd:c4:b9:
                    5a:b4:8e:91:c9:cf:c8:ee:f8:14:50:5b:ca:ff:d4:
                    47:9d:31:13:3d:fa:27:5d:37:7a:11:53:bd:6e:05:
                    77:7c:ec:92:fc:b0:a4:39:97:49:ea:c5:97:7c:0d:
                    2d:3e:9d:4a:f0:e9:3f:f1:1c:68:a6:ae:b4:69:b8:
                    16:80:dc:27:93:76:c5:3a:a8:50:37:56:b9:95:ba:
                    a8:72:56:f2:1b:0d:40:d2:62:90:0b:65:1a:51:fd:
                    26:b0:45:e2:3b:57:39:0b:6d:1b:36:90:54:38:92:
                    40:c5:0d:f9:92:3e:28:8f:ea:03:40:3a:e3:d1:9d:
                    d6:e0:d4:35:30:5b:da:2c:0c:c7:41:ac:9a:70:11:
                    08:23:42:0d:cc:19:8e:4b:02:7f:09:ec:d4:d5:28:
                    51:56:8b:2b:40:b9:19:91:0a:ab:ad:c7:aa:d4:3b:
                    7d:f2:c2:69:1f:13:93:67:72:20:f5:b9:5c:be:b5:
                    43:78:0d:7b:5a:3d:43:e2:5f:45:05:a3:6e:d5:e0:
                    40:7f:66:c5:e4:75:0c:2e:62:bf:c4:08:6d:ee:22:
                    9b:87:22:75:92:dd:aa:74:84:85:f4:bd:a7:4d:79:
                    dc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E6:E0:5B:82:48:0C:C6:76:52:BF:9C:C4:53:F1:35:B1:2E:36:60
            X509v3 Authority Key Identifier:
                keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:34:d8:77:ef:a1:74:86:73:24:ab:e4:0e:a5:64:7e:f1:e6:
         c1:a8:5a:c9:d9:0b:e6:55:73:1a:8d:02:a0:ef:12:92:14:bd:
         8d:97:22:e0:a0:46:f5:97:50:ed:38:e0:c8:ee:5c:75:cd:42:
         57:f3:51:b0:de:3f:1b:c7:93:64:b4:de:c0:37:dc:27:81:fa:
         f2:b7:ce:29:aa:1f:6b:31:b5:d9:5f:82:8f:ba:26:d1:6c:dc:
         1f:de:75:21:d0:40:96:ea:65:39:91:fa:ea:bb:a2:73:94:34:
         6e:34:fa:5b:3c:e4:83:04:74:b1:bc:02:0f:c8:42:1a:f6:cb:
         b6:ff:40:cc:9d:21:9c:e6:93:2f:d5:4d:ba:48:26:d4:a2:c0:
         4a:4a:95:47:62:57:01:c6:1f:9b:80:46:af:bc:07:e9:8b:64:
         6b:7a:dc:1e:ff:1b:78:d3:dd:de:bc:7b:7c:fe:7f:f5:ef:d3:
         73:23:57:82:4f:10:47:12:2b:ee:3a:6a:d0:20:63:fe:0f:0e:
         13:39:64:1d:85:c8:15:ec:55:ce:bd:17:08:48:0e:93:42:98:
         49:b6:53:17:57:95:bf:10:7a:8a:79:6a:71:ed:f5:b3:28:2e:
         78:c4:92:82:3e:51:09:39:43:ac:d0:42:f5:99:ff:9e:26:5e:
         f2:e4:2d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:54 2025 by rpki-client