Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
File:                     CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft (raw, json)
Hash identifier:          SJnags+Aak2OTGgI6oec5y+Yihu/eSIFY3MmJmOcAUs=
Subject key identifier:   42:AC:F2:6E:65:C3:EF:4A:6D:15:FE:BA:E0:13:97:6C:1E:19:57:B9
Authority key identifier: 09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
Certificate issuer:       /CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Certificate serial:       0194BC3C07C31B577CD267A4F1798165D8A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
Manifest number:          10C5
Signing time:             Fri 31 Jan 2025 12:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:38 +0000
Files and hashes:         1: 5gxr50rRC6q1xmQ2obCCI3UU8XE.roa (hash: 788tIYHaxcKJti3OU2hmplvQGAFcsSM5lvHfjYsQU8M=)
                          2: CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl (hash: E8ScFlE1xV5uSP2+vFHisMg10ctv8YkEofRp1vLb95c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:07:c3:1b:57:7c:d2:67:a4:f1:79:81:65:d8:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
        Validity
            Not Before: Jan 31 12:00:38 2025 GMT
            Not After : Feb  1 12:00:38 2025 GMT
        Subject: CN=42acf26e65c3ef4a6d15febae013976c1e1957b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:ea:57:c8:e8:0f:0e:1d:6d:58:28:d3:b6:
                    77:d2:29:32:82:97:bf:64:43:3b:f3:fe:d4:ed:f3:
                    ba:e3:9e:82:1a:9c:47:3c:1d:bb:37:1c:f6:c6:62:
                    d8:16:54:3a:73:7c:b4:cf:b8:8a:4a:0d:79:99:42:
                    3b:31:bc:4b:31:5c:d9:2b:94:f3:44:88:43:bd:f3:
                    41:e1:6b:54:9e:c8:85:af:ca:b6:6d:37:43:a7:8c:
                    d5:ca:cd:11:81:55:e1:21:c8:bb:d3:a7:a2:5f:70:
                    1c:f6:14:fb:c9:e1:62:a9:78:9a:6b:70:38:3f:22:
                    a7:5b:34:7c:6e:87:cc:35:65:8c:45:66:29:98:28:
                    38:44:73:82:e4:0a:91:ad:1a:e6:ed:a1:19:b4:f1:
                    72:cd:ba:75:8d:67:74:95:c0:8a:c9:f3:d9:6d:f4:
                    4a:8f:f8:d3:7a:2f:10:a6:1b:a4:17:d0:7c:b5:01:
                    63:df:16:29:a1:a0:7e:1c:69:31:ff:f7:21:55:b0:
                    cd:4b:19:1a:79:b4:49:8c:92:0f:ed:8e:08:8c:ea:
                    a2:a3:0e:af:6c:a0:36:2e:09:a1:07:36:7d:a9:e5:
                    08:f8:9d:39:0f:6c:45:a0:b2:92:95:38:89:ac:b9:
                    46:d3:51:4b:97:03:fb:a1:76:36:ee:e3:63:74:37:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AC:F2:6E:65:C3:EF:4A:6D:15:FE:BA:E0:13:97:6C:1E:19:57:B9
            X509v3 Authority Key Identifier:
                keyid:09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:13:c8:80:94:73:0b:98:58:6f:ec:99:62:d4:c4:ca:c0:a7:
         bd:ed:b5:02:8b:22:e8:60:61:0c:1b:55:94:96:35:c8:33:51:
         57:e9:6f:eb:cc:1c:e5:e2:86:f6:97:29:0f:64:27:be:2d:32:
         13:1d:7a:b1:a6:32:34:28:1c:c3:1e:3c:fe:50:73:4b:ed:48:
         d3:fd:3c:9e:48:47:83:8e:42:c2:f7:01:29:df:f2:e3:24:29:
         6d:6a:3d:0f:69:1e:cd:1d:48:1e:40:a0:ec:5b:55:e1:35:6c:
         04:6f:3b:10:20:ec:12:b8:56:f5:a0:7a:4d:35:6b:e8:ac:66:
         c8:db:71:6c:77:65:2b:fb:4e:d4:ed:6a:98:12:da:bc:51:80:
         81:68:07:c2:f3:2b:e4:1a:66:fa:88:89:71:29:6e:d2:06:cb:
         f6:00:ba:a4:b7:9f:c1:67:6c:dd:e7:06:bd:e7:60:99:b5:e2:
         33:46:28:7c:c3:72:53:2d:c2:57:89:4f:4f:88:bd:23:55:88:
         e6:f0:d3:97:52:6c:d4:c9:6c:bc:c2:4c:cc:99:f8:42:5b:e5:
         22:eb:e3:fc:aa:7a:f4:cb:a8:45:2b:4f:f4:6c:9f:c3:61:31:
         c7:02:f2:71:34:7d:01:e6:64:9c:d7:32:29:05:5d:a5:30:9e:
         2e:e2:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:07 2025 by rpki-client