Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
File:                     cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft (raw, json)
Hash identifier:          u2rYCgalGdXu1T59ebQfC7WWZnxBRLuy2j1brUag7mo=
Subject key identifier:   2E:E8:FC:D3:78:E6:43:63:FC:7F:F5:E8:E1:05:2F:C4:DD:AE:31:42
Authority key identifier: 71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
Certificate issuer:       /CN=713af8b790ac0923b24307ee008f261d10d9560b
Certificate serial:       0194BC72FC89995E36DBBFF531CE93518D9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
Manifest number:          0B26
Signing time:             Fri 31 Jan 2025 13:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:39 +0000
Files and hashes:         1: _VNZcr3EYGlXqjzpoEk_KD5xeQo.roa (hash: q7OjuouQNM7VgrvgHXW4IBw772Y+anjbTLeMEEPFDVg=)
                          2: cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl (hash: EASzT+6ZzxEQgccC+zHHA/4zwkkwV7QgAEavgTrQFo8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:fc:89:99:5e:36:db:bf:f5:31:ce:93:51:8d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713af8b790ac0923b24307ee008f261d10d9560b
        Validity
            Not Before: Jan 31 13:00:39 2025 GMT
            Not After : Feb  1 13:00:39 2025 GMT
        Subject: CN=2ee8fcd378e64363fc7ff5e8e1052fc4ddae3142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:69:e2:97:46:0e:e2:c1:8c:0a:d5:f3:32:82:
                    2b:a7:31:ab:d7:28:1c:8d:e7:91:6d:7e:1a:98:55:
                    68:50:ad:75:9e:d0:1a:5b:7c:92:44:06:a4:f9:71:
                    48:01:6a:57:cf:7b:eb:44:a8:05:66:de:85:e6:f2:
                    f5:f7:01:9a:23:69:3c:f0:bd:f9:9c:85:cc:08:53:
                    4b:61:c7:10:48:dd:d8:d2:86:61:f7:a2:69:3a:5f:
                    c3:68:a5:16:ef:d5:db:63:0a:75:fb:e1:7d:30:e7:
                    d8:6f:4c:7c:2e:ec:ba:e6:92:55:19:25:bd:3f:73:
                    24:59:ed:03:2f:42:10:a9:10:f1:c3:21:a8:36:32:
                    11:6b:56:fe:47:90:b3:1d:31:e5:9b:8e:42:1c:2c:
                    2e:a2:bb:8c:bf:7e:e6:4a:bb:ba:12:f2:0c:4e:3f:
                    f3:7b:bd:db:f7:d8:36:c8:be:ca:5c:f8:ce:84:5e:
                    60:4f:7e:15:ea:e7:dc:71:06:98:1d:bc:e9:26:1c:
                    24:d9:2d:69:76:0a:5b:11:e9:8b:c7:ee:17:79:b0:
                    e2:1d:1f:fe:80:06:8a:cf:40:fd:49:47:f1:fe:f5:
                    fe:27:6f:e8:2c:9a:f4:23:73:31:9a:f2:9a:b3:27:
                    6e:f9:ef:26:7c:80:d0:2c:c0:9a:ed:5e:d6:8b:6a:
                    d7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E8:FC:D3:78:E6:43:63:FC:7F:F5:E8:E1:05:2F:C4:DD:AE:31:42
            X509v3 Authority Key Identifier:
                keyid:71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e5:f9:e7:66:4f:fe:de:be:09:db:19:67:99:8a:17:3e:a0:
         16:68:68:79:09:52:5e:b7:87:3b:d6:97:41:e4:f5:21:11:3a:
         7f:22:38:e7:5d:63:de:8d:51:d2:e6:ac:72:a4:36:ca:4a:4b:
         a0:37:6b:7e:eb:ee:ec:de:2c:61:79:a9:48:18:25:73:39:37:
         b5:a2:0a:3f:cc:a0:d8:ba:ee:d4:1c:db:e1:1f:d3:c3:43:36:
         ad:82:ec:83:cb:2f:25:2f:e3:82:e1:81:40:65:2d:26:1f:e4:
         ba:27:29:19:4a:bb:e1:8f:2f:11:36:19:2c:b1:d5:8b:0c:4e:
         90:53:e7:d2:47:fd:68:39:a3:bd:b7:39:26:48:70:c4:f5:b4:
         ca:cc:a4:6f:cf:30:41:ca:3f:62:21:83:6b:57:40:f8:97:20:
         b5:6f:b8:7d:3d:2b:6f:0b:07:b3:da:27:a7:8d:46:58:d9:ae:
         1c:af:ac:9c:f4:37:79:9c:f9:bd:d8:40:09:68:a4:7c:33:b7:
         88:10:dc:ea:60:ee:c8:20:96:fb:34:6c:c7:75:df:08:68:6b:
         89:2f:05:b9:5a:dc:63:f3:28:f3:45:94:cd:44:35:58:56:5a:
         c3:ed:c5:35:be:da:64:eb:5e:b0:0e:06:95:08:82:87:db:bf:
         41:b6:98:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:17 2025 by rpki-client