Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
File:                     jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft (raw, json)
Hash identifier:          Wv1MnItDPXYywJietnGjsOHMP7ckO+M2T2UxxSgotsI=
Subject key identifier:   CC:22:16:F4:EE:C0:6C:1F:68:D4:46:0A:86:33:59:5F:F3:E8:01:4A
Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
Certificate issuer:       /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Certificate serial:       0194BD175E3D0B4272076AEB849E08AA469E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 16:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:12 +0000
Files and hashes:         1: jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl (hash: D+k/EfKCoSbpuZEJKmDCaC2aoFzbTM+E3Z3zedHIIsQ=)
                          2: sAUuTa0NxQDQaogfsBE0spI7wLY.roa (hash: LqhsGf+sCdkce6YV0v+cako7Xiw7Niu7YnjSoKkIukg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:5e:3d:0b:42:72:07:6a:eb:84:9e:08:aa:46:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
        Validity
            Not Before: Jan 31 16:00:12 2025 GMT
            Not After : Feb  1 16:00:12 2025 GMT
        Subject: CN=cc2216f4eec06c1f68d4460a8633595ff3e8014a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d9:f9:0c:23:c5:b9:95:04:03:e0:f8:1b:14:
                    e1:ac:40:f9:dc:75:a7:c9:01:0a:af:15:ef:50:87:
                    2b:e9:e6:00:fe:62:9c:04:c7:27:ef:5d:64:bf:70:
                    16:f8:b5:7a:6b:3e:4f:4f:57:92:9b:0b:38:99:6f:
                    7b:bf:40:c4:59:f0:72:a7:e2:80:d0:5c:72:dd:14:
                    8b:63:8a:b8:3a:6e:fe:a7:1d:51:38:b8:18:7d:66:
                    bc:11:c9:6b:b7:60:b8:10:28:e9:79:07:70:fe:6d:
                    92:d4:4a:29:ad:6a:ee:46:ce:54:d6:90:17:7d:31:
                    eb:93:bf:25:83:1e:58:59:84:9a:12:ae:75:ec:dc:
                    cd:24:66:91:0b:25:91:80:5e:0d:8e:cd:7a:98:36:
                    80:a9:cb:bb:2e:ca:c1:ef:f8:24:9d:c3:3d:96:ed:
                    2e:cd:fa:19:c9:30:bc:1c:c7:c2:c9:1f:ce:50:db:
                    bf:23:b0:c3:56:5e:0e:fb:2b:b6:c7:4a:d1:ee:57:
                    0b:23:e4:62:b6:a5:fb:97:6c:b0:3e:78:1e:86:5d:
                    51:06:aa:39:dc:03:48:f0:11:2d:26:01:fb:39:e6:
                    3b:28:c4:5c:46:ec:98:8a:0e:ac:33:7c:e0:8c:e0:
                    11:09:47:ff:02:af:a2:fa:d9:f7:39:90:a1:f0:1f:
                    5e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:22:16:F4:EE:C0:6C:1F:68:D4:46:0A:86:33:59:5F:F3:E8:01:4A
            X509v3 Authority Key Identifier:
                keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:95:3a:a5:2e:f3:ca:6e:24:48:b4:64:fa:65:6c:ca:fb:8e:
         dc:11:e1:73:6d:41:8c:41:a2:01:f0:3c:6a:44:8f:ec:3e:4f:
         74:e9:98:04:98:b4:c6:f8:28:33:e2:b9:c9:4c:6d:63:08:43:
         33:a8:ec:c3:b8:d1:37:ea:1f:2c:04:29:75:4e:0f:90:99:c6:
         d6:e0:cf:be:2f:2d:63:f9:1f:3b:3a:40:07:c2:af:c7:53:f5:
         4a:51:62:77:d4:37:89:d1:94:b0:ec:88:ec:e6:6e:83:39:65:
         d1:12:ff:4b:26:e0:98:84:b3:23:bc:25:98:7e:5f:9d:16:56:
         24:79:74:57:bc:c4:40:99:21:6b:5c:ee:06:34:26:a5:d7:1e:
         0d:db:57:c7:cd:d1:73:65:49:88:63:69:2a:b8:cd:96:cc:29:
         cd:c8:a3:eb:32:24:bd:dc:40:5e:22:79:eb:1a:ad:80:35:fd:
         03:1c:d7:1e:42:89:34:c8:3c:3c:83:bb:fb:7b:f0:9a:49:c4:
         00:81:1e:56:16:fb:16:4e:91:b4:93:e5:84:c8:42:1c:e0:8f:
         81:9f:ce:6a:ec:ba:9a:65:0a:c6:e8:fc:b6:47:c6:2d:9f:a6:
         7f:7a:06:6b:49:82:a6:28:bf:70:2a:96:75:92:1f:07:73:ff:
         c2:70:af:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:23 2025 by rpki-client