Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
File:                     Ety44UEMjNGOUkV_fhqVgNbaUiY.mft (raw, json)
Hash identifier:          1F4p5MwuP4KVLTXr/VYLP53LMhZGNMnW6h5eFfGCUuA=
Subject key identifier:   49:3F:2D:76:09:47:BE:B0:CE:EA:00:CB:A6:A5:DC:1D:E0:79:9F:D2
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Certificate issuer:       /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial:       0194BCE0D1667725DAFD27A636F322045D90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
Manifest number:          036C
Signing time:             Fri 31 Jan 2025 15:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:37 +0000
Files and hashes:         1: Ety44UEMjNGOUkV_fhqVgNbaUiY.crl (hash: /mVmYTzvJ/99D2ERBicvWVJj5faBq4mp4/0g7sTmsHU=)
                          2: jEDgNY90eysDT0Y1G-THT17h3-Q.roa (hash: RQYyUb9Y/6KY2/ltxA8FrdBGYW0gmfS1ieQyM7fG8UY=)
                          3: xjaKNbUWdjhuGKz557km09J85CQ.roa (hash: 3QMey7VrmUqxE6MUlNjFiwNKaAhFddLFlNFaj03POhg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:d1:66:77:25:da:fd:27:a6:36:f3:22:04:5d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
        Validity
            Not Before: Jan 31 15:00:37 2025 GMT
            Not After : Feb  1 15:00:37 2025 GMT
        Subject: CN=493f2d760947beb0ceea00cba6a5dc1de0799fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:27:02:d5:a6:94:b7:fc:01:e6:09:58:32:8b:
                    80:c9:b9:de:7a:82:b8:ce:cd:22:f3:22:f0:14:7d:
                    92:47:4e:fd:dd:f6:ae:dd:02:ef:0b:32:22:9a:31:
                    b6:6a:c9:49:ac:2c:c5:0d:be:22:e0:43:11:22:74:
                    51:ac:63:cc:9e:d2:7d:78:4b:4f:cd:18:6a:0d:93:
                    3c:aa:52:4b:f3:b5:83:50:9f:ff:e3:7d:e3:4e:70:
                    f6:9e:52:ab:ec:b1:94:6d:5c:d8:f1:c0:ac:96:73:
                    82:17:3c:e8:e0:14:c5:c2:ed:7e:c2:70:54:bc:22:
                    35:4d:db:9a:6f:82:01:2d:19:be:7f:85:6b:f1:f2:
                    a5:97:af:11:93:3a:b1:e4:be:49:db:c0:a1:3f:05:
                    e2:f0:30:ac:81:94:44:e0:1b:c5:8a:89:81:eb:98:
                    2b:d4:c7:31:07:09:62:9e:2f:9b:f7:94:44:fd:db:
                    4e:d2:86:5e:57:d1:b2:de:c0:83:66:20:53:19:9a:
                    a0:1f:e8:94:20:91:91:6a:66:e1:c3:bc:f9:c2:47:
                    7b:33:18:e2:5c:5b:16:3f:be:1d:75:d2:63:f8:d4:
                    88:24:ec:f9:e8:36:45:e6:a9:fa:b6:23:fa:66:71:
                    cf:8c:2c:e6:2d:4b:e9:d1:a2:ae:db:f9:c6:4f:b5:
                    56:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3F:2D:76:09:47:BE:B0:CE:EA:00:CB:A6:A5:DC:1D:E0:79:9F:D2
            X509v3 Authority Key Identifier:
                keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:9b:7f:ad:16:5a:f4:19:11:b6:b5:1a:c4:24:b5:4c:39:2e:
         c8:e7:7e:a6:7c:d8:ad:d1:54:13:94:10:54:b3:3d:bd:e6:14:
         23:e5:b9:9a:30:b8:eb:03:93:ff:14:26:80:ec:05:ed:d8:c8:
         85:d4:3c:91:76:a2:52:8e:99:4b:74:00:c6:e2:fd:d6:dc:52:
         c7:56:98:1f:81:98:2a:d8:96:0c:8c:ab:1a:80:7c:da:27:dc:
         91:e1:25:65:1a:ac:f4:60:38:73:d3:b6:61:24:a3:b7:81:4e:
         d8:c7:a4:c8:92:f4:3f:d3:27:ca:69:da:af:4a:68:c9:f1:cb:
         4e:39:42:b8:b5:0f:0d:82:b7:97:64:ea:30:4c:ee:a5:1c:5c:
         b3:9c:bf:55:9a:c8:bf:e6:d1:68:3f:9e:57:04:41:e6:8c:09:
         f5:3b:b6:23:2b:fe:ef:72:e8:af:27:dd:1d:ed:5f:d9:96:fa:
         32:88:0f:86:e2:b5:2e:8a:76:0f:97:a4:77:a4:cf:52:6e:d2:
         1f:84:97:ad:23:9b:f6:af:97:af:39:9f:e4:7d:86:a8:2f:fa:
         88:e7:04:1d:21:13:53:2a:33:5a:2e:9d:77:28:e4:05:9e:ae:
         9c:d5:df:bc:9e:b9:2d:0c:8c:a2:5f:66:e0:59:c2:54:5a:8c:
         be:d1:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:25 2025 by rpki-client