Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
File:                     eSMEzs5_tlUdYh4ld0N1PX0-fro.mft (raw, json)
Hash identifier:          a66zyPMrPMhZPEyJzm3sejNl5HPcdB/kI9O4yQ89kr8=
Subject key identifier:   06:3A:96:0C:55:9F:CA:2E:71:16:F4:4C:A8:F6:29:A0:7D:78:14:24
Authority key identifier: 79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA
Certificate issuer:       /CN=792304cece7fb6551d621e257743753d7d3e7eba
Certificate serial:       0194BC3BC7A8620543E24D347444F27F7566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
Manifest number:          116F
Signing time:             Fri 31 Jan 2025 12:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:21 +0000
Files and hashes:         1: IMdPglYzX5a0Y8UZyR6PoX9F3qI.roa (hash: LlemrthVpDv3Bg7I6x+S4EwJBWPGL+Tm33DKrH5qsTc=)
                          2: eSMEzs5_tlUdYh4ld0N1PX0-fro.crl (hash: TRt2yzDkaqHuGvvkNaiaZxREXck5D4QgbtxBf4CHryw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:c7:a8:62:05:43:e2:4d:34:74:44:f2:7f:75:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792304cece7fb6551d621e257743753d7d3e7eba
        Validity
            Not Before: Jan 31 12:00:21 2025 GMT
            Not After : Feb  1 12:00:21 2025 GMT
        Subject: CN=063a960c559fca2e7116f44ca8f629a07d781424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:49:e6:96:3a:ba:2c:30:c4:39:bc:74:9d:
                    91:98:ac:2f:05:f3:9c:35:f9:2b:cb:20:91:b0:39:
                    98:2a:cb:61:f6:c3:a3:62:27:de:b4:df:ac:ec:c7:
                    14:7d:b3:a2:17:7a:c9:61:4f:72:ac:c7:55:82:9d:
                    8d:a2:76:2a:a7:05:99:15:41:90:63:73:ae:09:33:
                    1b:7c:6e:39:64:9c:8d:e1:e2:04:ac:76:68:28:df:
                    c6:be:ff:ca:40:96:79:f3:6c:2f:1a:c6:9e:f3:9f:
                    bc:4f:2e:39:a8:ce:1d:e5:d1:b7:f1:08:a4:62:e8:
                    16:42:a4:0b:ff:70:65:e7:1d:51:b9:86:bb:09:14:
                    82:c9:72:91:d6:56:cc:e2:2f:96:f2:e3:8b:b2:cf:
                    12:3c:c0:1a:e3:6a:93:d2:a1:40:0a:5f:58:08:87:
                    43:67:8d:05:7c:d9:e2:58:5e:1f:0c:ba:65:b2:0a:
                    a9:15:f0:c1:2a:c0:c9:76:9a:f4:5a:ec:2a:15:84:
                    e5:e6:a8:c5:b7:7a:b9:1f:bd:a2:8d:0e:6a:b1:d9:
                    05:7d:c9:68:81:20:86:03:e5:05:e2:58:95:ba:60:
                    b2:a5:e6:40:ad:fe:b7:f5:28:f3:f7:dc:00:49:8c:
                    3e:9e:15:49:1c:e9:24:e3:6d:70:a8:c4:f7:0a:5e:
                    6c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3A:96:0C:55:9F:CA:2E:71:16:F4:4C:A8:F6:29:A0:7D:78:14:24
            X509v3 Authority Key Identifier:
                keyid:79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:10:89:84:10:a4:c3:5e:bb:d1:6f:b2:70:42:d8:4e:1a:3f:
         19:0b:2c:94:86:12:ef:df:40:32:89:89:46:13:f6:8a:66:d3:
         d3:fe:27:94:c0:06:c8:d2:fa:fa:65:68:e3:48:8c:c9:43:33:
         89:95:93:eb:a7:6b:20:a7:ff:3c:55:e5:cb:6b:56:0a:8a:28:
         b4:a5:6c:36:15:4c:b1:b6:08:c4:3e:f5:a5:81:02:dd:ea:8b:
         e9:c7:05:8b:5e:39:eb:ed:38:f5:52:de:6c:a7:cd:be:e4:69:
         87:9a:ea:4a:21:a3:1b:92:fd:b7:75:64:ae:6d:25:23:a2:8a:
         42:c1:4f:40:ed:be:35:7e:b5:ac:8f:b8:5b:a1:e0:75:18:f4:
         71:ee:ad:30:85:a2:16:b0:5b:a6:52:b6:a1:f0:ef:51:32:eb:
         5c:98:26:4e:48:c0:41:3f:82:56:a7:5d:af:70:ba:66:1d:b1:
         58:9f:67:a4:b8:fd:91:32:e2:3d:b8:49:4a:d2:41:06:cd:ad:
         c8:41:8f:39:2f:d8:61:51:6f:32:b2:2f:eb:78:21:31:93:33:
         ab:77:d0:2a:2e:4a:d0:3a:56:84:e1:e8:c0:9b:0b:2e:95:cd:
         93:af:b1:a8:6b:47:57:05:79:47:e3:36:f7:9d:ab:ea:8b:3e:
         01:6d:76:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:39:01 2025 by rpki-client