Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
File:                     tl47dPyTSwkhk63tfsoB2h7xhq0.mft (raw, json)
Hash identifier:          JlJCUadamiSSlxRYpfqXbe9FXKDA/73W1SHMnQjp4qA=
Subject key identifier:   88:A5:1C:CD:85:DD:6A:8D:C5:C0:F4:47:60:D1:65:6F:6E:D4:6F:C2
Authority key identifier: B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
Certificate issuer:       /CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Certificate serial:       0194BCE0903587D913C9EBCA351C6B8508CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 15:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:21 +0000
Files and hashes:         1: e_jdHZ9UPX8fMzUgAyqh1YUrr0g.roa (hash: z1xUWbdUskV5wcwENPFUis/izRGF4jR036hFKOsflNU=)
                          2: tl47dPyTSwkhk63tfsoB2h7xhq0.crl (hash: ow5yJJf5T1Wh6JVO4ZHnnCpdeOmqYFelKsoVKex4sN0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:90:35:87:d9:13:c9:eb:ca:35:1c:6b:85:08:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b65e3b74fc934b092193aded7eca01da1ef186ad
        Validity
            Not Before: Jan 31 15:00:21 2025 GMT
            Not After : Feb  1 15:00:21 2025 GMT
        Subject: CN=88a51ccd85dd6a8dc5c0f44760d1656f6ed46fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ee:2e:c9:71:53:f1:44:5f:10:4e:e3:3c:72:
                    52:0a:2b:b0:50:3c:55:e2:6a:bd:20:e3:0c:35:5c:
                    f1:b5:96:e3:57:fc:2c:46:82:b7:36:a4:05:77:f7:
                    22:90:d7:58:59:f0:28:20:2c:56:11:31:f6:bc:03:
                    b1:e0:c8:63:3f:79:f4:6f:94:cb:e4:ea:2c:9a:39:
                    d9:0c:c6:bc:f9:b6:6c:52:9f:9f:a5:37:cf:04:59:
                    0c:43:21:c5:37:37:0a:a8:fe:0b:88:1c:11:0c:6a:
                    f3:4c:09:93:22:5f:ef:80:b2:1e:20:f0:1b:80:56:
                    4a:71:f7:b7:81:19:cf:67:8f:d3:7f:6d:8e:ec:60:
                    4e:ee:25:4b:1f:5a:e3:3e:ca:db:90:0b:ba:64:fd:
                    20:e6:72:5c:f6:0f:33:0a:20:d6:ab:4e:6f:09:09:
                    7b:d7:8a:71:d6:a9:16:66:68:d3:fb:9d:70:3b:cf:
                    10:26:84:a1:18:f8:f3:e9:80:ae:94:15:6f:84:a5:
                    18:4b:99:b9:00:9f:63:df:6e:72:9b:27:b7:7f:cf:
                    4f:01:f6:f3:81:04:c0:f6:1b:83:44:e1:17:42:fd:
                    f0:3c:8a:d1:df:3f:18:f4:ae:1d:11:aa:82:76:55:
                    4a:93:ab:6f:62:72:23:e5:7e:b5:ea:98:48:59:12:
                    19:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A5:1C:CD:85:DD:6A:8D:C5:C0:F4:47:60:D1:65:6F:6E:D4:6F:C2
            X509v3 Authority Key Identifier:
                keyid:B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:a2:35:4f:bf:0d:16:3b:da:e3:19:22:58:16:2a:d0:a8:c0:
         ba:bf:6b:e6:6e:66:e3:f4:6a:6b:15:be:e3:49:22:50:27:21:
         8a:3a:8d:22:8f:90:58:0e:1a:48:86:8d:f5:4d:33:bf:fe:b0:
         81:83:93:68:f7:bb:88:d5:be:22:51:44:a8:74:a5:06:53:06:
         4b:84:2d:24:2d:75:3d:a2:32:ab:1b:5e:6e:54:20:ce:ee:69:
         88:16:cf:2c:c3:f5:09:f4:48:b3:5d:01:af:b2:e2:d4:08:a1:
         7f:0f:bf:5d:1a:d0:0d:94:18:da:ac:5f:4b:4f:f2:e7:a9:9a:
         65:a5:ac:39:03:64:61:2f:4d:8f:65:70:c8:b9:e1:5a:17:9a:
         9c:07:0a:6d:39:d6:30:40:ca:42:31:a7:36:a6:c1:70:4c:0e:
         05:8f:46:a9:bc:e3:e1:63:44:d1:9d:d5:2c:f7:68:9c:d4:bb:
         d2:9c:ba:b1:d7:e2:ae:19:cb:d6:8f:53:de:4a:a0:2a:4a:5c:
         f0:80:8c:d8:df:b6:72:e0:09:88:3f:15:da:01:89:d5:53:6a:
         a9:db:a4:25:43:91:cd:a5:b8:47:89:51:a2:f0:e5:1c:f2:28:
         e7:94:d9:70:61:09:27:ae:d6:ad:3f:c4:4b:68:6a:b6:77:41:
         e4:e6:02:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:51 2025 by rpki-client