Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
File:                     5hU_zqGfHUn68-R-mJ22v15v5ak.mft (raw, json)
Hash identifier:          UpLm4mgDbewc2T905jJp5VlEPcYxixDc3iOiAoqWPCM=
Subject key identifier:   00:13:60:8F:23:F4:22:F1:C3:A4:3E:C2:AC:89:BA:E0:81:97:2D:3F
Authority key identifier: E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9
Certificate issuer:       /CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
Certificate serial:       0194BCE09B19CAC627596EA25BD3E4037F21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 15:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:23 +0000
Files and hashes:         1: 5hU_zqGfHUn68-R-mJ22v15v5ak.crl (hash: KAi3OTS2JT+WA+2A7MkZdFx955tdMwnxPjY8d44rr7o=)
                          2: AfwJnib3HYEEvfX22iQD4QQrJJU.roa (hash: ZxsajNoVQaxEO2iOv8vpTbsfS52PxCBiq/kifGttXT0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:9b:19:ca:c6:27:59:6e:a2:5b:d3:e4:03:7f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
        Validity
            Not Before: Jan 31 15:00:23 2025 GMT
            Not After : Feb  1 15:00:23 2025 GMT
        Subject: CN=0013608f23f422f1c3a43ec2ac89bae081972d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3a:97:9c:2e:7d:91:45:e0:75:28:3b:3e:37:
                    2e:a8:b2:ed:d4:9a:64:aa:18:49:84:64:ce:4f:29:
                    ae:4c:fe:f9:fd:14:b2:c3:a7:4d:bf:1e:23:a4:e5:
                    ff:51:52:1f:b3:1e:26:ed:bf:8e:de:04:e0:23:a4:
                    14:bb:35:d7:85:05:4d:fd:0b:79:57:ee:97:7a:eb:
                    f3:cd:41:44:4a:d6:be:79:1f:88:d6:6e:d7:be:f9:
                    38:7e:d7:94:06:80:1b:58:f1:be:64:2b:26:dd:b4:
                    65:91:e9:49:45:4c:3d:4f:be:20:9d:5a:5a:88:0e:
                    44:54:c0:f2:94:28:07:24:f0:59:c3:b1:53:0d:64:
                    a8:ab:1e:dd:a0:e2:63:11:c6:a0:fd:7f:df:80:32:
                    f9:49:e5:95:b7:03:7e:51:59:b9:25:7d:cc:8e:f8:
                    34:9e:29:cb:a5:c4:46:6d:ea:47:3d:2c:8f:d1:fa:
                    90:1a:ba:9e:84:fb:00:c0:04:98:0c:54:9d:40:b9:
                    f7:3d:d9:c5:41:ae:52:4d:24:f3:9e:bc:b3:07:f0:
                    82:94:a1:bf:58:d5:65:73:14:8b:43:61:b6:16:77:
                    a8:81:ed:23:b8:c1:cf:e2:f2:3d:3b:00:5d:b5:79:
                    1e:b6:95:4f:37:38:5a:46:e7:2d:64:40:ca:b3:27:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:13:60:8F:23:F4:22:F1:C3:A4:3E:C2:AC:89:BA:E0:81:97:2D:3F
            X509v3 Authority Key Identifier:
                keyid:E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:19:67:78:68:a2:e3:3e:3b:f7:65:0c:5f:8e:95:b2:c2:ad:
         eb:bb:2a:cd:79:2d:08:5e:24:6e:60:70:fd:cf:c0:46:23:50:
         0d:cc:c0:d9:fa:a5:59:ca:d4:8e:fa:4d:af:f7:cd:2a:2e:83:
         09:11:6e:ed:97:13:1d:ec:d6:2d:e8:91:71:7f:9d:38:6c:85:
         97:e8:11:1d:8c:1b:a4:5a:db:b9:b0:47:38:2f:91:b2:c4:60:
         e1:b6:65:a5:1c:f3:a1:ce:4b:29:b1:59:71:f9:8b:26:61:82:
         f8:8a:2c:91:7a:03:b9:83:1c:49:2a:b1:30:b8:65:89:76:ad:
         e0:3b:23:75:f3:66:29:15:7a:87:88:49:0c:86:0c:29:72:d7:
         b6:38:56:25:6f:fa:06:bb:45:da:24:a8:fc:6a:29:d5:b0:7c:
         06:98:4f:d2:a2:76:2a:fb:cd:45:9b:0d:11:4f:6f:fa:ee:2c:
         0d:01:f2:00:ff:1c:a7:c0:83:21:ce:33:93:4b:f0:19:81:54:
         cf:0d:15:89:26:9e:1f:00:3c:8c:73:16:c4:05:a4:20:70:85:
         73:6f:ed:e9:fe:9c:18:99:ec:cf:f3:8c:14:62:4e:f3:f9:0f:
         ba:5c:9c:e2:45:f5:d0:dd:ed:d0:04:e4:e6:f0:af:8d:34:10:
         4a:4b:90:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 09:53:43 2025 by rpki-client