Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
File:                     7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft (raw, json)
Hash identifier:          6QvZzSjgOxSlbn7Rq9lcJHGEB5d1H6rTCfastBqTmPE=
Subject key identifier:   AD:4D:7D:8F:E0:B3:A6:88:25:B7:68:98:A8:CB:31:B5:B8:52:C1:02
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Certificate issuer:       /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial:       0194BCE0D206EAFAA19E95AC5E50B43363B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 15:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:37 +0000
Files and hashes:         1: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl (hash: crctfjTFIDKggN8rXzNOciR2A/+YdWG4GLwKQaHpLRU=)
                          2: ucKWTlPN-FuM9B9rpIaHmjJB0uU.roa (hash: NuV8RJZOUsktn6zLXnq7yOANvHrLINcgvHUFAyEOS84=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:d2:06:ea:fa:a1:9e:95:ac:5e:50:b4:33:63:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
        Validity
            Not Before: Jan 31 15:00:37 2025 GMT
            Not After : Feb  1 15:00:37 2025 GMT
        Subject: CN=ad4d7d8fe0b3a68825b76898a8cb31b5b852c102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:53:70:0d:08:3e:b0:33:07:0b:06:d6:f3:
                    49:e7:27:37:b7:cb:6e:84:61:ac:6f:07:dc:12:e2:
                    84:98:e6:5d:57:f9:d8:d7:0b:41:e4:d3:05:90:fb:
                    ec:b2:11:76:15:c8:a1:65:fd:e2:f9:b2:e2:f4:b9:
                    fc:ea:87:24:78:1d:b5:79:00:26:ee:d9:cf:05:bc:
                    de:77:84:cf:46:fd:c7:9e:b2:48:c3:78:1b:13:0e:
                    ad:e9:5d:1c:e7:3e:c9:09:64:2b:dd:52:87:f9:bc:
                    3c:b1:8d:35:fe:12:ba:cf:fc:ad:55:17:16:aa:70:
                    8a:92:84:85:f5:9e:83:33:ce:a1:90:d3:f8:4b:16:
                    50:cf:e9:ab:2a:57:0b:81:e4:1f:c7:07:5e:12:8c:
                    25:21:3b:e3:88:b7:45:fc:13:ff:b6:5b:19:25:f8:
                    55:34:0d:9f:fe:9a:d3:02:6a:5f:d7:e0:92:e4:77:
                    90:78:7b:c7:95:ef:9a:85:d0:7e:ee:36:70:a9:67:
                    85:cb:b6:07:e4:52:03:7e:96:be:6c:2e:ba:b1:f0:
                    51:11:fe:12:89:30:b3:8c:71:8f:2b:a7:e7:e8:1b:
                    69:11:e6:76:79:0f:aa:03:0f:ff:0e:7b:92:04:e1:
                    dc:18:98:51:dd:fd:8f:10:49:58:f3:19:3f:50:ed:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4D:7D:8F:E0:B3:A6:88:25:B7:68:98:A8:CB:31:B5:B8:52:C1:02
            X509v3 Authority Key Identifier:
                keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:52:ba:0e:89:f4:fb:c8:4e:e5:99:61:92:88:72:18:b6:54:
         09:61:a4:38:8a:2d:7d:d6:59:47:33:af:3c:40:49:6a:f8:7a:
         d6:75:20:1a:4a:e9:2e:b9:b5:84:35:60:86:98:f3:53:04:32:
         81:26:f4:c3:3c:1b:af:3b:bc:3c:f0:10:9b:db:37:5d:e3:14:
         00:71:e4:d0:b6:53:0e:27:d2:aa:57:6e:85:8d:07:ab:1c:a8:
         be:0a:19:79:44:a2:e7:73:40:a7:1f:c0:a3:70:39:c6:40:d8:
         3e:5b:64:dc:73:1d:b3:06:23:1b:2e:de:8e:9b:a2:5e:23:22:
         54:88:18:0a:af:94:7b:d5:24:81:00:1f:0f:fc:90:c2:7a:70:
         ec:75:ca:d2:e2:02:fd:f6:3c:f2:e5:9c:36:77:0b:80:d7:b2:
         c4:93:5d:91:f4:2a:59:4c:63:c6:e3:00:33:be:dd:d1:b8:fc:
         50:71:a2:cd:49:fa:47:d0:1f:4a:03:29:14:6f:80:eb:2c:b1:
         4a:4a:3c:bf:1e:a1:53:6c:c7:34:ce:d6:e2:7a:5f:cc:d3:67:
         cb:57:ca:c1:81:c1:a8:18:47:91:4f:df:4d:1a:c7:80:32:ca:
         35:a7:94:a3:f6:b6:93:f8:3c:48:18:f2:14:d3:dd:9a:0a:cc:
         bb:2a:e9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:41 2025 by rpki-client