Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
File:                     i9rBinrVAbp-oTVnkJ8X5PcydBM.mft (raw, json)
Hash identifier:          i9QplOwiyMkBQcPULk3c88DqPpm8zeJqG2ndQtTKHbE=
Subject key identifier:   34:6D:DC:24:10:A0:73:FD:2B:FC:EA:79:43:C8:E5:29:EF:A2:21:32
Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
Certificate issuer:       /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Certificate serial:       0194BD4E5BDFE4893E32154F27B7F474D285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
Manifest number:          139A
Signing time:             Fri 31 Jan 2025 17:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:16 +0000
Files and hashes:         1: 32R6bWlY_kT-IdzSOS6jUQoRg-4.roa (hash: xWfBJ4oVxeGqTJ5vFTiwfbecb58t1uRd3p+DZin3epw=)
                          2: HP_SsTP0iECRo2qQTfpc4ow4BYk.roa (hash: bGvpmINQH9SYwwDIsLytTIqIgfQUsNxOvfIPBHdX/N4=)
                          3: Q_hIcWDqn-PPQ56DLKDjeCBoXsw.roa (hash: MwFedjwgPwjvhrH7DUyYSiNCIyagEddbNZKwfOKaBy4=)
                          4: UbRiiNRPdI8MdUZD3H45dXG9KbE.roa (hash: ++edDwYhafn/DmjVTYR5FglX/ixBfBBX5Ov1+q3i1ek=)
                          5: _tBUXGLFeeKTNMit4od0RNATZXo.roa (hash: athIqN712Nn9ZvwJAZkQ9ogvGwW83fg7Abmm94I+u1U=)
                          6: hEJxhg9SzRAq0K6L58EjzXPZnDg.roa (hash: ccaUWhka+1gikh07jNowzbblvhiIUCKQLkaV3vwDt2Q=)
                          7: i9rBinrVAbp-oTVnkJ8X5PcydBM.crl (hash: Q5pM2/+2b1fh9LFVzOLhbUDJKE/vU3OtES25d39d5y4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:5b:df:e4:89:3e:32:15:4f:27:b7:f4:74:d2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
        Validity
            Not Before: Jan 31 17:00:16 2025 GMT
            Not After : Feb  1 17:00:16 2025 GMT
        Subject: CN=346ddc2410a073fd2bfcea7943c8e529efa22132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c1:48:22:ee:ec:a0:35:7b:72:95:28:ee:07:
                    25:83:ef:f4:eb:c0:75:13:e5:88:82:94:76:48:b8:
                    52:71:20:47:45:f4:96:e9:a3:56:84:20:68:5a:b6:
                    74:6b:13:6a:8f:eb:b5:fb:9b:f4:ae:62:2b:27:fb:
                    ef:4c:21:0d:b5:25:d6:fe:37:f7:ef:09:fc:91:c0:
                    64:a6:67:fd:83:1b:36:7b:e6:53:da:06:62:04:6d:
                    8e:05:83:17:af:8c:a8:89:d9:00:12:97:e0:ab:a5:
                    f8:f7:eb:3b:bb:c7:1e:90:18:8e:f1:7e:3f:79:79:
                    ca:ee:09:4e:2b:54:84:69:e0:35:54:47:e3:c6:ae:
                    ea:f2:44:dd:92:03:c4:b8:c0:3f:4c:7d:8d:2a:1a:
                    67:7f:23:7c:3c:85:87:ca:cf:d4:83:06:44:31:02:
                    f0:0b:6d:a1:78:f7:e1:56:bc:02:b8:08:90:3f:22:
                    b3:a9:6b:64:70:d5:ab:29:85:71:6e:df:ce:8e:71:
                    25:aa:f7:1b:bc:6f:c1:af:d7:0a:13:66:37:26:bc:
                    ed:0a:6d:9b:5e:f5:fe:12:42:b9:40:4c:33:39:bb:
                    e3:19:b7:36:24:3f:13:b8:23:b1:cd:a7:b4:16:7a:
                    65:4c:33:59:86:9c:48:21:e9:b4:9b:d7:46:2c:68:
                    5b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6D:DC:24:10:A0:73:FD:2B:FC:EA:79:43:C8:E5:29:EF:A2:21:32
            X509v3 Authority Key Identifier:
                keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:b0:af:fe:16:86:0b:ef:50:a1:1e:d2:ff:a1:94:da:b3:d0:
         a4:4a:8b:bb:71:b4:8a:1d:b3:26:f3:bd:8e:c8:8e:87:57:50:
         9f:70:bb:01:98:7b:ef:0f:65:e3:69:cd:4b:cd:76:b0:08:6c:
         5b:3f:6b:e0:60:83:50:5e:10:75:ab:3b:56:1e:02:7f:5b:de:
         f8:75:a7:a4:6b:42:8b:b3:b2:c5:89:9c:d2:40:2f:4c:2a:e1:
         08:0e:73:67:01:27:1f:a3:27:fc:22:94:15:ae:72:8a:ff:f6:
         e1:ed:63:80:bc:1a:93:02:9b:e1:c5:93:cf:cb:63:9e:ff:d3:
         e8:10:bf:71:9e:4b:81:1f:8d:d6:c9:99:d3:06:18:bb:40:1f:
         9e:fe:3a:4d:cb:11:8a:66:59:bb:e8:f1:4d:d3:f4:27:79:f1:
         c0:72:a4:2e:de:66:ee:79:2f:43:6c:99:0c:40:45:64:bc:09:
         68:88:6c:5e:91:da:43:3e:e6:f9:02:43:7e:a9:e7:a7:50:45:
         04:0b:d9:c0:11:3e:c3:31:11:a4:b5:95:dc:62:41:c9:86:0b:
         8a:77:32:aa:a3:53:a5:88:cf:37:7e:47:ad:28:a5:4a:11:49:
         b0:f2:9a:45:4d:fd:6f:c4:de:f2:84:f8:bc:f3:a1:3b:31:58:
         54:cf:6e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:26 2025 by rpki-client