Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File:                     14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier:          ctmyRAlYKujEfhx7B0hrhjFhEtiGqXesB+9yDUZjgW8=
Subject key identifier:   B5:FD:C3:8A:E6:FF:A5:16:27:25:97:DE:31:75:C5:B2:9C:07:A0:A3
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer:       /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial:       0194BC051FE31BE634C3C55522E8DD3A8AAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 11:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:39 +0000
Files and hashes:         1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: J0KU/yRKo27g8e0rqhuvThGKO+TbRWyb6zMm73nvnmo=)
                          2: G2qBYse5oGAPa5xfzo8tHGuDcqo.roa (hash: mPibjHFH8adYSb6G95eGzgbjvN5yGYvqGie41fvkWHY=)
                          3: YI8wZlD-HEfeT6xqGwFmZ1QdD6k.roa (hash: w7eB/hHlmGKQgAjYLk+eJl1NQTaGD79bb/QVrN64Cf4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:1f:e3:1b:e6:34:c3:c5:55:22:e8:dd:3a:8a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
        Validity
            Not Before: Jan 31 11:00:39 2025 GMT
            Not After : Feb  1 11:00:39 2025 GMT
        Subject: CN=b5fdc38ae6ffa516272597de3175c5b29c07a0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:33:30:fd:27:e4:f7:e8:54:a0:4e:e2:eb:30:
                    52:51:8f:e2:44:0b:02:4d:0e:9a:d8:ea:0d:26:b3:
                    3b:87:5a:86:d5:33:a5:f2:27:ea:e0:36:0e:b1:1d:
                    9d:4a:84:1c:bd:1c:9b:f4:e1:a3:7f:65:19:30:8a:
                    f7:7e:fb:64:84:e7:ec:4b:55:c1:08:b5:e5:79:09:
                    76:34:91:0b:61:c0:58:89:d4:a3:8f:4b:7f:b9:79:
                    8d:b7:58:8c:b7:a6:49:c5:ea:d3:50:9d:be:c0:38:
                    07:1a:6e:9c:51:4f:b7:fd:b8:75:90:bf:bc:2c:e9:
                    c2:15:00:9e:25:24:69:e4:42:b3:d7:ab:3a:1a:ff:
                    6e:88:21:a0:ca:d7:04:f8:d9:bc:37:d3:9d:67:51:
                    f9:60:85:87:46:8b:d0:b2:13:d9:64:1e:45:15:96:
                    35:0f:08:ed:4d:fa:9c:cd:29:7d:e7:74:e3:28:1e:
                    99:03:06:20:5f:cc:93:ac:87:dc:da:10:2e:09:d1:
                    8e:35:a6:bb:09:f2:c3:36:74:0c:be:6e:eb:ec:91:
                    18:24:a9:ac:87:56:72:55:1b:af:3e:88:b7:97:90:
                    b2:66:39:1b:74:2a:85:bd:e3:79:6f:e7:39:22:6a:
                    13:a5:5e:05:5f:fc:c5:37:2e:5a:ab:59:eb:40:ac:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FD:C3:8A:E6:FF:A5:16:27:25:97:DE:31:75:C5:B2:9C:07:A0:A3
            X509v3 Authority Key Identifier:
                keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:16:8f:69:da:79:42:f8:ee:bb:2f:65:29:b3:66:d3:d3:22:
         27:47:c9:b4:0d:9b:96:01:a5:0e:ad:8d:d3:c9:1d:13:a4:10:
         65:92:6c:25:05:05:35:35:78:85:12:a8:8b:16:c4:38:72:48:
         fc:88:c5:19:f8:92:96:78:12:05:22:2c:a7:35:5a:43:07:98:
         ad:b8:7d:8d:31:4b:71:e1:44:08:04:ed:38:05:5f:c3:b7:90:
         99:96:37:31:01:87:cf:01:a7:2a:cd:e5:5f:60:d5:0c:2f:70:
         e5:95:e9:01:f6:07:a6:89:ac:bc:fb:3a:42:83:8b:1b:b7:b5:
         f8:78:55:94:44:65:c7:b6:5a:dd:06:c4:93:c6:5f:16:2c:ca:
         7f:0f:64:d4:7a:aa:7a:24:77:17:f0:04:3e:da:46:6c:a0:96:
         7a:a4:27:df:70:a6:32:4a:5b:b2:b5:5f:01:e9:c0:45:a0:27:
         5e:57:d6:f3:6c:b4:b9:95:1a:b3:7d:4f:03:7c:68:d4:8d:67:
         a9:ce:3c:0c:31:12:9e:c0:d2:2a:6a:1f:75:85:92:87:48:08:
         f5:75:68:61:8b:54:32:c6:20:d2:25:fc:e8:16:c4:ae:de:1f:
         69:1c:18:25:07:7a:a8:34:ea:0a:35:3e:38:b4:c8:2a:01:02:
         af:ac:88:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:54 2025 by rpki-client