Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
File:                     JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft (raw, json)
Hash identifier:          xfpHRat5dv0ZxgCezJhVxuxLbHSV2QPpmEuamlKfxaI=
Subject key identifier:   10:AF:FE:77:41:6F:73:69:B4:13:95:7B:95:50:B1:11:0B:EC:44:D4
Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
Certificate issuer:       /CN=261b941dbe59651fafbba9724a12775e07edb635
Certificate serial:       0194BC0501C659A4CE939E486970D66A13A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
Manifest number:          0A18
Signing time:             Fri 31 Jan 2025 11:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:32 +0000
Files and hashes:         1: C03oYsQeKmNqstjprcrpWU_C_FA.roa (hash: XjHgFgaeV7edOP+rVRUhxH/PoL1vk7vdaF1YjoWE+DE=)
                          2: JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl (hash: nVtVWOqKkLjj+S3WX5Gfp1BEJyGMfpzzcMyZCnnH6/c=)
                          3: _5zMdOWOnuF29ViyjTYdqmiabT0.roa (hash: bOHD6ebnTlGjO2kqvQSoKN6+pQ2e9dKaoGGov9ljW5w=)
                          4: iz1oLphOz4C0RKqGaCjwgWp4k-4.roa (hash: Spyiz27gUIj8vniKoNjV++85gF3fncVYgrGF+1dIJog=)
                          5: j4xQMv8fOD6vNafgvqaj-sinhSA.roa (hash: g/n7i1hhBBo3Q/tKawsn3d1mvtP+3frbkbuj6wZhZkE=)
                          6: uXwQWRGTbp4iQG2hqxNhBERgVfM.roa (hash: ZMVua8ZiPI5nY6upqsZo7sTjSdm1cARPTecfc5Wvr3E=)
                          7: zhL3mw3tfGz22FNWwzYf3uLwlM0.roa (hash: zAOff2Kw1dbM05MiGj7aU4wK2pL5mdV5s1R3xN1PATI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:01:c6:59:a4:ce:93:9e:48:69:70:d6:6a:13:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635
        Validity
            Not Before: Jan 31 11:00:32 2025 GMT
            Not After : Feb  1 11:00:32 2025 GMT
        Subject: CN=10affe77416f7369b413957b9550b1110bec44d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:cc:98:76:10:6f:df:0d:cc:bb:12:39:ff:
                    d9:c3:50:26:fe:2d:7b:76:50:d6:1a:8e:96:da:3c:
                    34:a1:95:df:b2:b6:9c:cb:69:1e:37:a1:1b:ea:d4:
                    2e:09:d8:35:66:cc:e6:37:a7:65:1f:b2:ac:76:b2:
                    9f:a7:b6:e8:6b:13:8e:72:6b:b3:f8:71:30:e2:fb:
                    a3:8d:32:01:0c:50:a4:61:26:11:44:93:53:70:1f:
                    e5:c1:26:e3:d8:58:23:a3:bb:0e:c3:6b:f8:85:f3:
                    51:1d:e1:6d:3c:a8:b1:6d:87:0f:d2:eb:6d:eb:db:
                    09:08:c5:f3:f4:f2:92:7b:20:85:5c:41:f4:bd:9b:
                    f1:a7:fb:d9:3e:fe:96:97:cc:0f:06:cd:f2:16:a1:
                    6c:0a:d1:f7:57:ae:25:f2:e0:4b:82:87:26:7a:b9:
                    47:0b:85:87:54:90:b3:39:b1:40:20:20:02:47:15:
                    fe:c7:46:9b:ef:09:b0:8e:1e:bd:c7:5c:3f:71:d1:
                    fc:be:d8:ed:f9:fb:77:fc:4b:47:fe:fd:c3:fe:3b:
                    52:36:91:05:44:44:36:df:31:d3:56:f6:aa:0c:75:
                    c2:f5:21:6e:f3:dc:12:54:43:8d:d6:e1:ee:08:5b:
                    2b:e2:bb:22:85:cb:f2:80:cf:35:af:c9:28:2c:f3:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AF:FE:77:41:6F:73:69:B4:13:95:7B:95:50:B1:11:0B:EC:44:D4
            X509v3 Authority Key Identifier:
                keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b7:8d:96:b9:a2:6c:79:0e:3a:3b:76:93:39:f5:6e:85:0b:
         bf:2f:15:3f:44:8f:77:2b:54:ac:22:1d:4d:58:57:dd:bc:4a:
         86:74:5e:d1:7e:c5:d3:2a:e4:f5:99:c5:97:6a:55:84:9f:77:
         0c:4a:28:fd:bb:73:17:24:5c:f6:26:29:0a:6b:86:0b:70:91:
         96:10:c8:9e:aa:6c:bf:e0:06:ad:52:6e:be:48:50:87:35:1c:
         63:f7:d3:b5:a5:ea:ad:0f:47:dd:e2:b7:a6:f1:30:05:fd:b0:
         48:9a:cd:35:f5:70:3d:07:69:a0:bb:58:ba:5d:66:57:c4:08:
         95:05:a6:43:f8:3e:73:a8:f8:46:0f:cb:e3:a4:e8:c4:f5:18:
         61:49:05:36:cb:3e:ea:18:22:62:c6:bd:62:56:84:1d:b7:20:
         8c:3c:00:1c:57:52:41:b4:2f:45:31:0b:29:ac:17:f0:3b:94:
         15:59:55:52:83:6b:68:bb:a7:1b:07:37:82:9b:86:36:df:22:
         09:5e:18:2f:0c:d9:1d:54:b0:06:48:1f:f1:ac:ff:16:88:7e:
         a8:29:8f:bf:a6:12:e2:1a:1d:94:e7:4a:80:e4:f0:ab:da:97:
         96:ef:70:e5:b3:61:dc:8b:99:fa:6e:0a:8d:37:a9:44:fe:83:
         34:c9:ac:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:43:24 2025 by rpki-client