Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
File:                     7WRpHDGJLMmRrU6alnEUd1nkF6s.mft (raw, json)
Hash identifier:          es5i5ztkn0hovVlLwf7MQQVdaoXrkyq9Ehgog+HsYH0=
Subject key identifier:   41:3C:4E:49:19:2D:84:53:7D:5F:74:42:D4:5F:CA:99:81:97:16:E7
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Certificate issuer:       /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial:       0194BBCE76191C3F9B5519E0148BA6043B9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
Manifest number:          06E9
Signing time:             Fri 31 Jan 2025 10:00:57 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:57 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:57 +0000
Files and hashes:         1: 7WRpHDGJLMmRrU6alnEUd1nkF6s.crl (hash: rpBiWrgToLSeQFWmkMK/Sn97M5a8jzhZ8wdIGlt7REo=)
                          2: Vfaw8xN07VrfwnKtMtQ_CewTKoI.roa (hash: 2wr8T0grb9p6jSoZGL4iOk6puHmWjQj/8ATxJRocBJM=)
                          3: dV2OtRjSyQPY4YCyr9lFdLU27E8.roa (hash: eomTnqbffaVsgF38WkF2EttPiM+DiZupJiWYxVCsPt8=)
                          4: xx8xA0JnzBykNL-Z7GzXL0j5bD0.roa (hash: 476qF8QW7rlffGimT6vIV2UtU8yiqDsBP0tdI7yQI0M=)
                          5: yw6X4fanN8KY91uH96jddlevGXo.roa (hash: kgMdFQOHRL6TCI+SfQlFblY28F8TUhxl1fkSEaUx52Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:76:19:1c:3f:9b:55:19:e0:14:8b:a6:04:3b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
        Validity
            Not Before: Jan 31 10:00:57 2025 GMT
            Not After : Feb  1 10:00:57 2025 GMT
        Subject: CN=413c4e49192d84537d5f7442d45fca99819716e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:a6:a3:92:fb:2f:16:cb:4f:a6:02:04:7e:
                    b0:ba:79:3d:04:2a:99:4a:cc:2f:17:a5:e6:74:3e:
                    ed:ae:95:8d:e0:79:13:a6:01:6b:77:ce:1e:0d:3e:
                    62:06:89:90:a3:b4:d5:2b:56:d8:9b:a8:59:76:39:
                    5f:d5:be:a3:d8:d0:4f:e7:81:95:df:ed:2a:fc:99:
                    6c:72:43:a2:ab:85:dc:a2:de:49:8d:41:2a:2d:1c:
                    c6:3d:3a:1d:74:67:58:92:01:97:1a:e8:66:df:ca:
                    ea:b9:ff:b2:3e:27:6a:e5:4a:8a:b0:9f:1f:e0:56:
                    0e:5a:4f:6c:28:61:6d:19:dc:6b:f6:d5:73:08:04:
                    5a:54:d0:37:86:72:1d:2f:96:20:d7:fd:83:38:f8:
                    b0:3b:6d:5c:5b:d4:89:0c:d7:8b:60:c9:36:ae:e2:
                    7d:dc:1e:51:c5:72:c5:6e:2e:3d:dc:ce:12:56:83:
                    eb:8a:e8:00:4d:f5:f0:17:43:49:82:ad:4d:08:48:
                    76:10:7b:bc:00:fa:c9:db:e9:cd:8e:1b:72:0d:89:
                    b7:9c:5d:0f:33:8f:36:10:37:ce:76:63:44:26:ff:
                    0a:8d:72:e3:a5:c4:46:11:bb:53:84:8f:50:8c:2f:
                    6d:70:5d:28:ae:cd:86:0d:06:d8:80:20:bf:b6:d7:
                    39:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3C:4E:49:19:2D:84:53:7D:5F:74:42:D4:5F:CA:99:81:97:16:E7
            X509v3 Authority Key Identifier:
                keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:84:f9:f3:87:fb:2d:bb:b3:7a:ab:39:25:54:3f:cd:73:92:
         dc:03:75:b9:dd:ed:e5:df:40:7e:44:9c:dc:e7:a8:9c:17:fe:
         48:e4:a9:18:1b:eb:5f:0f:e3:36:8e:fc:04:f2:36:d5:66:40:
         dd:60:c3:7c:e4:e0:1b:11:43:b4:66:81:c6:ad:c9:ae:eb:9b:
         c3:10:56:9b:83:f6:e3:93:b3:86:19:b3:36:75:ad:09:46:38:
         97:d5:47:a2:b9:2b:3a:dd:7f:ea:8b:65:0e:53:94:cf:1f:38:
         9a:15:a0:d4:47:6c:f0:a1:20:dc:a6:76:79:2e:53:36:bf:38:
         ff:bf:09:ae:57:ff:e0:8d:97:7b:20:36:16:e3:c7:40:b3:cc:
         0e:e8:b7:2a:4d:f0:f9:dd:3e:6a:fb:1a:72:52:af:75:90:9c:
         9f:9a:86:ab:bf:c7:ef:e6:ca:0a:99:dc:4c:67:92:72:2a:3c:
         53:a7:65:35:ef:48:b6:5e:c1:06:27:71:69:30:09:c8:ca:35:
         5b:00:c3:98:30:1d:8c:92:a6:8f:a0:88:ad:79:e8:83:8d:cf:
         d7:fd:77:87:f9:55:b0:43:57:ff:a0:32:76:29:16:bf:f4:69:
         79:91:1c:f6:c0:d1:c5:19:39:9e:68:bc:32:39:1a:56:85:fe:
         71:31:54:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:44 2025 by rpki-client