Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
File:                     A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json)
Hash identifier:          K3jjUo1m13ZM/gPyQiQWOlaLcl4HE55RFS4VP8mSi0M=
Subject key identifier:   C3:AB:99:B4:C3:91:1D:41:4E:E1:1D:63:39:C0:92:2A:E4:E6:7B:96
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Certificate issuer:       /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial:       0194BBCE1E37066C276322800D0F3135A814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 10:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:34 +0000
Files and hashes:         1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: U7g+UL2uz0ufMxG1H+DSM5Q6ZY2C1HjkfMyL39qHQpY=)
                          2: SM900vRB7gei6pS6Q178I2UX-lU.roa (hash: EDUY4+JtCT9uXEY3z6PPpKcKtOUgL6hoTy+pDX+nuro=)
                          3: rE12S5_UCVz_qE96OpsYCotvRdo.roa (hash: HmY8gAlqRzAv6/rOzxQZtJmfpwofsJXd2sCI5/LnmTQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:1e:37:06:6c:27:63:22:80:0d:0f:31:35:a8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
        Validity
            Not Before: Jan 31 10:00:34 2025 GMT
            Not After : Feb  1 10:00:34 2025 GMT
        Subject: CN=c3ab99b4c3911d414ee11d6339c0922ae4e67b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4c:e5:4d:f9:60:1b:fe:d6:09:3f:33:80:99:
                    bf:eb:1a:87:db:36:37:d8:a2:1b:fa:df:fa:53:30:
                    9e:80:ce:19:9e:8a:73:74:35:84:26:6e:e8:0b:b4:
                    dd:ab:7a:d6:bd:9a:e4:5f:aa:d5:e3:59:7c:ff:85:
                    3d:94:04:8d:05:13:1f:ca:2b:a3:a0:bc:fb:f7:b8:
                    a5:00:c1:b0:df:84:80:d4:50:27:76:23:b3:70:ed:
                    4a:f0:47:cd:bb:fc:0e:41:cd:fa:53:b8:92:54:dd:
                    e2:ed:6c:8e:5e:5e:03:fd:c4:4f:12:53:f4:25:6e:
                    b0:b0:b5:28:0c:a6:3d:67:c6:ba:f3:9b:6d:38:3a:
                    9d:31:fa:71:f6:83:ad:d5:5b:65:33:18:64:c5:ba:
                    3d:91:74:54:b8:f1:c4:83:0c:84:42:6f:13:73:12:
                    aa:0e:ab:07:db:f3:96:95:b4:77:17:af:92:91:2f:
                    69:8b:ce:75:79:fa:b3:95:d1:80:09:75:e5:80:45:
                    c3:c5:c1:e3:db:8d:b6:e9:56:0f:7d:a1:3d:2f:43:
                    c6:96:2a:10:a2:57:51:c9:54:71:65:d6:6c:06:1a:
                    ca:f6:d8:b1:92:45:93:a6:d4:a4:ff:e1:41:a1:4a:
                    3b:9d:1d:a1:ba:11:da:28:cb:9a:e7:fb:83:ce:51:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AB:99:B4:C3:91:1D:41:4E:E1:1D:63:39:C0:92:2A:E4:E6:7B:96
            X509v3 Authority Key Identifier:
                keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:54:bd:ac:59:89:a6:74:8f:f8:80:9e:32:38:07:8f:b6:27:
         8c:e4:ba:2f:e9:23:c3:ba:37:de:ee:2b:82:1a:5c:01:b2:94:
         48:9f:4b:0b:47:33:10:97:7b:4c:d5:9f:3e:86:4d:2b:2b:da:
         70:c5:02:cc:17:c1:29:80:c5:4c:88:87:c9:99:98:1e:f6:d1:
         bb:48:0f:92:e2:d1:d3:33:80:f1:e7:cf:9b:ef:c5:ac:c9:4d:
         04:c9:aa:6b:52:b9:95:f8:ca:e3:e3:4b:a2:a3:ce:00:55:03:
         3d:a7:59:fb:24:ec:c1:1c:ad:7b:77:c9:38:97:5f:af:db:02:
         06:d6:d0:60:9b:51:c5:ec:3a:dd:69:cd:4e:a1:9b:87:ef:e6:
         a3:ad:e0:aa:0c:f0:0c:ea:4b:40:e6:a2:d4:18:5b:55:04:5a:
         48:f5:d7:89:98:e7:f0:2c:11:b1:77:9e:6d:ec:7d:e9:1d:15:
         ae:15:26:17:77:d2:07:c3:e6:a5:93:68:4e:91:db:87:4a:8e:
         2d:40:80:0a:ce:ff:43:dc:45:68:e2:a5:ef:4b:a9:31:fc:90:
         ab:eb:d0:12:22:1c:81:80:e6:0c:03:3a:d8:b3:42:4e:6b:f2:
         09:33:76:45:a1:e0:2c:66:f5:c5:4a:6e:e7:41:0a:9c:b9:8b:
         98:7c:74:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:30:50 2025 by rpki-client