Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
File:                     GXYcuDMg_8ugH9gHoG6InMMdhec.mft (raw, json)
Hash identifier:          XqOvaHvdD1oax69HbLclJC3UgDqTySOtAWHJsVV7fEs=
Subject key identifier:   2F:5B:1E:25:33:7E:86:03:30:02:2F:DD:C6:71:67:BB:01:4C:06:0D
Authority key identifier: 19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7
Certificate issuer:       /CN=19761cb83320ffcba01fd807a06e889cc31d85e7
Certificate serial:       0194BD17B2BC50740E71FE1888EBE942E4C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
Manifest number:          7B
Signing time:             Fri 31 Jan 2025 16:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:34 +0000
Files and hashes:         1: GXYcuDMg_8ugH9gHoG6InMMdhec.crl (hash: Uct+SHE3Tv11dSEF173XUoQ6Zopprpa9cylGhgY6qoY=)
                          2: Ty2odF6IC8z1MlXMbYRSCNZm2f8.roa (hash: x0KKkB+0aY8vDOyJs8CL2l2Pu3KalqTjZiy3MLgQKrI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:b2:bc:50:74:0e:71:fe:18:88:eb:e9:42:e4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19761cb83320ffcba01fd807a06e889cc31d85e7
        Validity
            Not Before: Jan 31 16:00:34 2025 GMT
            Not After : Feb  1 16:00:34 2025 GMT
        Subject: CN=2f5b1e25337e860330022fddc67167bb014c060d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e0:fe:71:e1:bb:8a:12:4f:0e:1f:2e:f4:0c:
                    59:59:f5:bd:db:34:44:c2:0e:6a:05:76:85:2d:6a:
                    dd:20:d6:b0:3d:0c:15:44:0b:ae:96:72:79:49:9b:
                    11:16:be:cb:cf:b0:d4:81:91:8d:58:6d:5d:c6:15:
                    c0:ba:f9:3c:40:db:66:38:d8:25:e4:23:be:71:e3:
                    0c:24:ef:0b:f0:2b:70:0c:ca:2d:cc:bc:f7:9c:97:
                    82:6f:83:6a:d8:80:98:6b:f0:fe:4a:06:98:fe:94:
                    6e:66:35:d9:f5:77:44:86:eb:a0:b0:99:1f:c1:b7:
                    5f:73:b5:a0:14:f9:e7:c4:89:28:da:25:7d:69:83:
                    c9:5b:62:09:4f:9a:ed:52:98:cf:92:44:ab:71:18:
                    aa:15:da:51:21:d5:b8:72:69:65:c6:91:d4:8b:c4:
                    3b:58:bb:30:d7:aa:bd:b0:23:fa:0d:ff:e8:90:1b:
                    f9:e5:df:04:dd:92:79:bb:7d:1d:03:51:21:60:66:
                    b5:6a:0a:30:41:b5:67:68:b9:1d:99:f0:c6:1f:e5:
                    cc:45:28:4c:03:ea:2e:b2:2e:d5:0d:a0:60:20:01:
                    3a:5f:91:69:59:ef:19:ff:08:39:15:23:5c:de:74:
                    6a:dd:33:ea:f7:b9:a5:18:64:42:0d:90:f2:df:9b:
                    0e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5B:1E:25:33:7E:86:03:30:02:2F:DD:C6:71:67:BB:01:4C:06:0D
            X509v3 Authority Key Identifier:
                keyid:19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ab:57:e4:86:e1:5d:8e:75:55:83:24:90:40:8d:02:0b:84:
         ef:3e:e6:32:d3:ef:c7:15:3a:ef:97:a8:5a:b8:43:63:1f:ed:
         4b:43:4e:96:53:e7:4c:95:b2:f2:25:48:39:82:03:87:79:7c:
         29:ed:0e:c7:75:21:74:3e:2c:f8:b4:b1:51:e8:eb:0e:f2:ea:
         a9:68:61:f5:ee:ed:0f:e0:f8:b5:4a:e7:e5:80:ab:95:56:6c:
         d1:a8:29:cf:d0:42:d8:ef:54:6a:c7:4d:d6:f7:8b:7d:14:c7:
         08:f4:cb:cc:4e:1d:b3:54:69:37:40:55:6b:dd:ac:15:4e:59:
         e2:61:e7:d2:b3:a5:40:d4:48:bd:b7:ba:52:bc:e3:8b:fe:56:
         8a:48:8a:25:a4:ea:89:35:67:00:5f:c5:84:86:8c:78:a4:24:
         37:1b:27:bf:99:2b:fe:02:6c:2a:0c:71:e4:53:6b:65:5b:28:
         b3:8a:db:b5:2a:33:fa:4c:26:b0:cc:af:be:6e:e4:fa:63:6b:
         9e:bc:97:d0:98:4a:bb:53:8d:23:f5:e0:8f:2a:03:5a:d8:ec:
         45:b3:f7:e5:aa:22:5f:ed:6f:02:1e:49:53:ba:43:6a:59:32:
         9a:d9:bf:5b:ca:96:d5:7c:4d:a0:2a:b9:40:22:ec:1f:e3:17:
         71:be:da:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:01:55 2025 by rpki-client