Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
File:                     i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft (raw, json)
Hash identifier:          jrM8lVhlcl256EaOA7lLqQ0ZsNetRvc0uWqdR6J8uQQ=
Subject key identifier:   57:DD:AA:3B:7B:54:60:02:D2:CD:64:10:6F:9F:8D:24:3A:22:5D:E1
Authority key identifier: 8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
Certificate issuer:       /CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Certificate serial:       0194BD17DE2190C08FFDF6EFAB15214D6B54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
Manifest number:          06E0
Signing time:             Fri 31 Jan 2025 16:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:45 +0000
Files and hashes:         1: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl (hash: vwFFkMkcab0jKEsTrdQz6P5qrlMB+k8NxPe0Npf94nQ=)
                          2: i_rrSeZPVtugiJJvEliUK8J1RzA.roa (hash: 1fESgkXEQ9WR5T3026NuI2KYcBFTrF7XO7UpgxQnSpk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:de:21:90:c0:8f:fd:f6:ef:ab:15:21:4d:6b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9289d88259c33cc7ad81482b779450ae4eac03
        Validity
            Not Before: Jan 31 16:00:45 2025 GMT
            Not After : Feb  1 16:00:45 2025 GMT
        Subject: CN=57ddaa3b7b546002d2cd64106f9f8d243a225de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:14:e1:bb:ff:63:03:75:b8:63:ad:36:8b:
                    e9:39:2a:c1:d7:e2:95:d7:3b:1c:1a:b4:ba:c8:34:
                    d6:bb:b8:99:81:7a:e7:82:35:75:f7:c1:13:78:b3:
                    8e:a3:1a:77:72:16:c0:70:76:7e:26:48:b5:9a:7f:
                    24:d0:2a:38:58:9d:8f:0a:42:da:b9:74:1c:63:86:
                    39:4c:bf:c4:f4:9d:ad:52:29:d1:7e:27:e8:0b:c4:
                    01:55:73:8d:66:44:91:cb:c4:03:4e:24:31:a4:7b:
                    70:3c:5b:03:05:6e:f6:12:2f:1e:15:09:fe:39:37:
                    aa:90:71:64:1e:90:0f:97:dc:b2:10:6e:af:48:10:
                    2f:45:3d:8c:65:b5:a9:30:35:a6:ca:7f:c9:e0:8b:
                    c9:6a:09:24:21:5a:c6:1e:62:1a:bf:aa:53:6a:8f:
                    04:2c:aa:5e:db:20:b4:6c:33:6b:34:c3:e1:1d:dc:
                    5a:a8:ae:7e:a6:00:a4:9f:a9:7a:bc:93:75:07:72:
                    b0:ab:3f:c3:db:5c:d0:d3:6c:7c:72:e7:f1:1c:e3:
                    5c:e8:36:38:64:53:89:4b:a0:23:0d:11:5d:ed:b5:
                    b3:d1:ca:9e:43:5f:55:40:da:5a:3e:a0:c8:4f:05:
                    b3:66:05:cd:48:d4:8e:aa:87:ec:90:83:35:0c:40:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DD:AA:3B:7B:54:60:02:D2:CD:64:10:6F:9F:8D:24:3A:22:5D:E1
            X509v3 Authority Key Identifier:
                keyid:8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:59:f1:5e:73:4a:b1:e7:d2:69:c9:4d:af:df:f3:a0:d2:71:
         82:8a:b2:a9:4c:c1:17:66:8f:73:f4:b6:12:55:e3:d9:8a:14:
         df:30:2b:58:35:d6:c9:19:38:47:5c:bd:fe:eb:dd:57:5e:90:
         f9:08:57:65:ef:c4:dd:75:a8:bd:51:9b:b5:1f:82:43:fb:52:
         79:2e:7f:fa:b3:69:74:d8:30:ef:93:b3:a6:7d:23:e8:f4:6d:
         7f:60:4d:d6:0c:c7:27:1e:b0:dc:b8:74:e0:5c:25:8b:03:08:
         89:f9:97:b9:01:b2:63:e9:fe:91:e0:7c:f2:e0:7f:43:4d:a7:
         61:b3:7c:b2:dc:c3:9a:02:ee:aa:b3:75:71:e0:83:a5:49:92:
         f3:97:35:c7:8b:6e:ec:46:44:5d:75:5a:a2:bd:ed:b3:76:6f:
         ae:e5:71:c0:92:d5:2b:0a:ae:3d:47:a9:aa:44:c9:f2:44:16:
         1c:b4:0c:bf:f4:38:f4:1d:94:fa:03:39:e7:38:c1:9a:9f:22:
         e5:3e:c7:a1:1a:e4:38:bc:6a:34:80:13:c1:1f:3b:3f:fc:75:
         22:4b:b1:84:08:62:d0:ec:35:16:71:14:44:45:ce:b3:17:3e:
         e1:2f:0d:81:28:6c:2c:db:e2:65:48:63:50:95:e3:cb:08:c0:
         c5:f8:96:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:51 2025 by rpki-client