Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
File:                     tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft (raw, json)
Hash identifier:          Ly/TDvpuNiLRqIwwygNW8cidUflHj6TOsfdsCa1p6SI=
Subject key identifier:   5E:AE:F8:96:65:FD:47:EA:C3:D8:74:F6:A8:D0:8A:C0:02:87:21:9A
Authority key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
Certificate issuer:       /CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Certificate serial:       0194BC72CB87C4719D54404E99F439602F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft
Manifest number:          0D3F
Signing time:             Fri 31 Jan 2025 13:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:27 +0000
Files and hashes:         1: n153dY1GpJ4_UwUqUY3HaTEGP7I.roa (hash: Xk7KXK61rmwLqoIHj+t2jV4riZg2jXu+cWnVquz+ZXA=)
                          2: tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl (hash: fTnfcuX/j2RnclP2yBS4uG3xoARSFdbElVQHTBthaXw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:cb:87:c4:71:9d:54:40:4e:99:f4:39:60:2f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5745bb8ef0088cb519a4095d651719ef51ee354
        Validity
            Not Before: Jan 31 13:00:27 2025 GMT
            Not After : Feb  1 13:00:27 2025 GMT
        Subject: CN=5eaef89665fd47eac3d874f6a8d08ac00287219a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a2:f1:a2:98:21:11:7c:e0:14:cf:1c:eb:a5:
                    2a:df:86:b5:8e:63:4e:92:8c:00:75:6f:0f:e7:7a:
                    43:d2:99:94:44:94:f2:6c:15:fe:b4:70:ab:26:39:
                    48:c8:ae:e8:b1:01:f1:11:e5:97:85:01:96:6c:87:
                    96:29:c6:7e:60:84:2e:89:39:38:3f:ea:64:48:d7:
                    ba:8e:7c:29:86:63:cb:15:43:a2:3f:fb:04:87:a7:
                    82:4c:17:ed:91:32:25:04:21:ba:98:b1:9b:98:e6:
                    69:51:23:14:2e:67:ee:9f:88:99:a4:33:a2:b8:31:
                    1c:8d:3f:15:fc:57:65:f9:a3:ba:3c:da:0b:dc:32:
                    08:8b:39:1c:62:d1:cc:32:22:52:ad:85:3d:1b:44:
                    3c:6c:86:3c:52:98:a1:c6:4b:d3:bd:8f:09:a6:73:
                    3a:b0:91:0c:62:8f:2f:74:b1:dd:0f:44:6e:8b:0d:
                    60:81:68:f2:ab:75:b6:a0:d0:92:ff:c4:a6:0d:e2:
                    2f:ea:8a:da:b1:f9:f5:b8:8c:32:15:7b:24:8e:38:
                    6b:2a:a2:b4:64:c3:c3:0c:88:9c:f6:bb:35:29:8a:
                    3a:d5:90:a9:cd:e8:64:8d:6e:21:ba:8c:ef:dd:c9:
                    a2:ec:f3:41:65:5a:79:e4:2d:ce:08:e1:f6:f9:67:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AE:F8:96:65:FD:47:EA:C3:D8:74:F6:A8:D0:8A:C0:02:87:21:9A
            X509v3 Authority Key Identifier:
                keyid:B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:85:86:a3:69:c8:79:60:72:30:91:c2:64:c9:d4:49:27:96:
         35:37:c3:ec:5a:a1:e8:5c:13:7a:74:54:f2:e5:69:2c:28:82:
         b3:96:60:3d:94:c1:7d:59:6f:94:62:27:ad:5f:95:9c:7b:dd:
         75:f7:55:b9:31:5b:44:b6:43:b1:9b:a3:29:01:ec:3b:06:8e:
         b4:2f:cc:b2:31:27:22:bf:fa:80:c8:48:ce:00:eb:65:c3:3a:
         ec:39:f7:bf:d5:b9:a2:17:54:7f:66:b6:e9:9a:a7:66:57:9f:
         29:3a:e1:04:8b:e4:9a:3b:e2:d9:c1:9c:b5:00:60:72:bc:a3:
         17:6a:dd:81:f0:78:27:d8:e5:1e:2c:54:8f:9f:a1:64:a7:d4:
         e7:a9:58:7b:f2:61:02:2d:48:d1:81:b3:61:af:04:eb:c2:b7:
         81:81:f2:8e:1b:6b:ae:7d:e2:49:1d:47:fc:0d:7b:56:e8:5f:
         21:32:09:68:57:c8:fd:5d:e1:ce:eb:c4:ff:5d:f9:37:3a:c7:
         a9:28:7c:c9:fe:1d:5d:4a:c7:c2:2f:85:f3:e6:64:b8:dc:51:
         ee:a7:2b:ea:79:70:f5:43:3c:8c:b9:fc:ab:4d:01:b0:87:a8:
         f9:e2:05:eb:d1:4c:22:e4:9e:e7:86:d7:f2:2a:c2:1d:95:ed:
         e2:6a:5b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:07 2025 by rpki-client