Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
File:                     PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft (raw, json)
Hash identifier:          1T6PWd6/ptJpCqldrQmY6ru75eNjIB3CmLcC3wU8zgI=
Subject key identifier:   5D:6C:19:64:7B:F8:4B:C3:FA:FA:18:27:13:44:12:46:E9:C2:2B:42
Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Certificate issuer:       /CN=3eb1788fe220e46434692d1cc437072d792d7888
Certificate serial:       0194BC3C37B749CCB82AB80949D2ED9BACC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 12:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:50 +0000
Files and hashes:         1: 2YadcCcrthTPeDDHEpW__8Qd9bs.roa (hash: OdnpX4OxWP0430jIZ65+bJ7XNUvVVpsmfscwz1Ws1zM=)
                          2: 5NVHCfMQ6W48yxlWBv3uWNtbJDs.roa (hash: xWoUftWDtv357JcFYDaq4ko62SbPA3ugAxMWTRo1aWY=)
                          3: CVexCZZcrh9ZcPNoGlGj6g2cPNY.roa (hash: oCKOi7GJALUFPXeLK9MWcGccq1tZ9vcEgFN5xNZTkgo=)
                          4: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl (hash: lLonA++LZy9bCih9zz8xMmF2Fk01esF5YfxBFScvXYw=)
                          5: UmpHN1dTZ2hpLcnnZpWS2Jt3BIg.roa (hash: PTvkuklKNLY3Mh0Z7gawtcDt9dMpbGsMOP+ydZCmFBk=)
                          6: puQ4Sk8pHIWfFKAYZzp1IAYEd0Q.roa (hash: tM5HP1N7Kc8KkaIaBlmp8d2jgH4OgbCHpaIgKSubYgE=)
                          7: zijtuBvUTHoACL0vLKqZfOgzwrA.roa (hash: /MUioQ1kaDrTgFZ5Z1TeKDrxhjrVzyNRI36qm2VszV8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:37:b7:49:cc:b8:2a:b8:09:49:d2:ed:9b:ac:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888
        Validity
            Not Before: Jan 31 12:00:50 2025 GMT
            Not After : Feb  1 12:00:50 2025 GMT
        Subject: CN=5d6c19647bf84bc3fafa182713441246e9c22b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:72:48:d5:19:66:b3:43:eb:ec:f2:50:da:
                    d6:59:d0:47:cb:3f:5b:e4:04:b5:d3:9e:5a:26:59:
                    e0:aa:04:8f:5f:b4:98:9d:d7:16:80:1d:87:03:bc:
                    88:b7:33:c0:06:cf:e3:9e:76:8d:74:79:30:19:49:
                    c6:fd:bc:b5:45:79:a0:5e:90:37:e4:e6:f8:51:db:
                    53:ab:ff:73:9f:62:e2:e1:15:16:8d:ea:56:e3:6f:
                    d8:7b:62:95:3e:19:a0:da:97:ba:b1:d7:55:5b:5b:
                    19:65:cb:89:2c:de:19:80:54:7a:eb:6f:bf:67:bc:
                    e6:dd:50:9a:cc:25:a9:21:aa:3c:20:37:14:a7:d7:
                    9e:9c:75:02:c6:3d:d5:a6:f2:fb:8f:87:d1:70:70:
                    d3:3f:0d:96:26:19:c3:dd:8c:fd:2a:a8:43:54:01:
                    66:80:52:dd:fb:c4:79:7e:09:7b:df:3e:b3:5e:92:
                    59:7b:4d:d2:fd:19:33:1a:be:22:37:3a:d7:cf:b9:
                    69:2e:d4:9f:b4:a9:c0:8b:55:45:63:ff:c4:98:af:
                    d5:7c:9a:f2:81:38:3d:96:57:2a:98:44:0b:6d:5a:
                    a6:13:73:5a:0a:f2:bc:22:c6:87:cd:f6:dd:8a:19:
                    0b:3d:02:cc:af:d4:6f:53:e9:1d:d6:ea:36:61:f4:
                    b4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6C:19:64:7B:F8:4B:C3:FA:FA:18:27:13:44:12:46:E9:C2:2B:42
            X509v3 Authority Key Identifier:
                keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:92:cb:81:ef:78:19:50:dc:4e:b1:ea:a6:54:a8:52:72:d8:
         3a:1c:51:03:b7:27:dc:75:e5:ac:19:29:2b:df:ef:0a:ef:26:
         1d:b3:57:78:27:c0:26:5e:55:09:5b:80:34:db:fd:24:d5:26:
         46:f2:14:99:9a:a8:b8:be:54:66:5a:00:46:94:10:ef:10:8b:
         0a:ed:29:a7:8c:92:4b:31:1d:96:19:bd:1b:50:15:ef:aa:0f:
         d0:0c:f9:ef:36:93:7a:e7:e2:60:03:32:39:be:b5:15:b9:9c:
         cf:3c:78:d0:8d:72:ac:69:af:c4:22:96:b2:9b:d3:4e:11:c0:
         b2:ea:cb:87:f8:cb:c9:f4:72:91:d9:db:f7:95:5a:81:e0:ac:
         76:d1:27:77:7f:3e:3f:d4:7f:6b:a3:bd:ff:94:4b:b5:0b:05:
         00:da:5c:ac:31:96:8e:c3:bf:48:38:c1:9e:0c:7b:99:48:1e:
         ee:10:90:24:57:c8:13:c4:61:74:c4:53:94:d8:5d:d0:17:07:
         83:7e:af:ab:c2:e4:e3:17:1d:7a:5b:6c:1b:28:39:89:48:c9:
         0f:54:00:21:29:4a:ac:5b:d0:82:1c:bf:a9:ed:65:19:a5:a2:
         d8:be:55:9b:a1:b1:38:fc:5b:d1:89:aa:4b:bf:74:92:cd:f5:
         b0:f2:f1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:44 2025 by rpki-client