Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
File:                     Xjp4NTd7noSf58M_n8pFctkCZz8.mft (raw, json)
Hash identifier:          46jy39BSugtj03tXr74xM0zvxkig4zzDFxATRbYZvSg=
Subject key identifier:   03:F6:05:16:91:55:EF:A5:4F:58:6F:75:55:D7:17:3A:61:92:C9:82
Authority key identifier: 5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F
Certificate issuer:       /CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
Certificate serial:       0194BCAA0AA0CF768B1BB935C4BD23FE8069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft
Manifest number:          0BDF
Signing time:             Fri 31 Jan 2025 14:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:47 +0000
Files and hashes:         1: Xjp4NTd7noSf58M_n8pFctkCZz8.crl (hash: hJhvc8hhDsdyf4affhcyGQLDENCbFekUVRQRsDw6zYU=)
                          2: YZ4IKL3VI82kHojYvMEpDnn7Ttk.roa (hash: /ay5+Bvjtyx5aTWN+x50j7spAi6yaynSV6oKHUcA/E8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:0a:a0:cf:76:8b:1b:b9:35:c4:bd:23:fe:80:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3a7835377b9e849fe7c33f9fca4572d902673f
        Validity
            Not Before: Jan 31 14:00:47 2025 GMT
            Not After : Feb  1 14:00:47 2025 GMT
        Subject: CN=03f605169155efa54f586f7555d7173a6192c982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:0f:53:33:81:94:03:57:1d:11:cc:4e:dd:
                    8a:aa:31:ef:6f:f3:8e:6b:40:2d:47:0f:e4:f4:44:
                    e2:46:d9:01:aa:bd:a1:6e:6c:12:42:44:0d:da:79:
                    df:0e:d3:71:bd:bd:c3:45:c7:2f:f4:8e:e8:bf:5f:
                    9f:f3:da:8e:6c:8b:d1:53:64:c9:d9:90:09:b0:34:
                    ea:c1:b4:93:ae:03:60:be:bf:34:7f:31:58:47:0a:
                    9e:12:b4:f3:33:3f:81:78:61:46:59:7e:d0:0e:7e:
                    8a:35:d3:9c:41:5a:17:94:5c:22:6e:1f:ad:48:f7:
                    15:29:2a:23:a7:cc:29:48:3c:a5:71:a1:1a:a9:a0:
                    09:00:0d:98:60:ec:98:c9:55:ef:5a:62:ce:4a:4d:
                    2f:0e:fa:ee:b1:8a:13:fb:0c:45:df:33:a3:63:68:
                    9a:b0:25:da:62:a5:40:19:0d:b1:d6:e6:59:c2:f1:
                    e2:34:a3:76:f6:0b:91:15:50:a9:35:70:2d:92:90:
                    fa:3f:bd:1a:b0:19:3a:51:4a:7b:79:4d:2e:4f:d8:
                    1c:25:e0:9a:bd:89:7a:70:6f:91:b6:31:2f:5e:14:
                    11:a0:8c:09:1f:18:f1:5e:3a:07:f9:4b:ca:9b:66:
                    92:b6:4f:b1:ea:86:df:8e:35:71:56:5a:44:0f:fc:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F6:05:16:91:55:EF:A5:4F:58:6F:75:55:D7:17:3A:61:92:C9:82
            X509v3 Authority Key Identifier:
                keyid:5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:12:ed:8c:02:26:e9:a2:ca:61:9e:79:e0:09:c2:dc:91:dd:
         b6:4f:9b:e6:c3:bb:0d:83:b1:2a:67:0a:b8:5a:42:4e:cb:62:
         77:61:9a:a4:52:80:7f:c0:0c:f2:0c:29:ca:2b:65:bb:db:af:
         f1:19:a3:01:b2:0f:62:40:72:77:24:ee:1a:77:19:f5:36:be:
         95:43:8d:8d:a6:15:81:c0:4a:1c:ce:6c:97:40:88:1e:5c:46:
         44:14:b0:01:7d:f2:2c:de:9c:ec:c7:e7:59:71:22:6d:d2:b0:
         99:14:f6:d5:87:f6:96:5e:cd:b9:6e:0d:f8:74:22:dc:9d:52:
         38:16:45:82:49:01:9f:15:2e:24:a3:ff:8b:7d:f5:7d:97:1a:
         16:51:ab:a5:98:49:89:3e:55:06:33:c6:2d:d3:ff:b1:e0:1e:
         f6:ce:07:63:f1:59:2c:4c:71:5f:05:97:90:83:41:ab:a8:d2:
         96:42:cb:72:c4:67:6c:c2:5f:0d:ef:e8:f9:00:0d:8d:5f:b1:
         e1:d2:a1:21:5e:a1:01:42:f6:7a:57:10:08:a4:5c:a6:61:a0:
         da:14:53:be:a3:57:1c:01:85:cd:35:82:2f:4f:ba:9a:a7:e9:
         44:b2:e4:31:ed:57:a7:6d:e1:ac:20:fa:b2:1c:68:be:3f:a8:
         55:37:1c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:44 2025 by rpki-client