Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
File:                     qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft (raw, json)
Hash identifier:          f2xXztdbIgevTER19fk9Dg8VxPZGdZv+apVnFX+45e0=
Subject key identifier:   CA:39:E5:CE:3B:79:4C:51:DC:17:03:C5:51:41:D2:63:00:D6:2A:31
Authority key identifier: A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5
Certificate issuer:       /CN=a8707679223c883fed7f7c79ff2f293bff8730b5
Certificate serial:       0194BD4E380F3452AED2EFC7A8F45A5D7516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
Manifest number:          05BE
Signing time:             Fri 31 Jan 2025 17:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:07 +0000
Files and hashes:         1: qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl (hash: Cw5jRzn+kmue0dwOrT3sgpRypQ7iTrjEuoNww/MxEiA=)
                          2: yHgH_lMUm4oFa_GnCsmAbIU1COM.roa (hash: MjR/P2+PrAk5Bu0tg2NHyXtBDLvOpshbkzdWh1K2WRs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:38:0f:34:52:ae:d2:ef:c7:a8:f4:5a:5d:75:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8707679223c883fed7f7c79ff2f293bff8730b5
        Validity
            Not Before: Jan 31 17:00:07 2025 GMT
            Not After : Feb  1 17:00:07 2025 GMT
        Subject: CN=ca39e5ce3b794c51dc1703c55141d26300d62a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f2:5f:88:e4:50:14:cb:f4:8b:ad:93:1f:d3:
                    bd:5a:d0:75:84:29:b9:da:28:92:6c:10:f7:66:89:
                    d4:07:91:48:ef:a3:c5:b4:d4:81:80:e6:3f:56:df:
                    7c:a7:f7:b9:f4:af:54:23:72:52:55:8e:c6:75:c3:
                    51:64:22:85:20:76:98:ff:6c:9d:79:79:53:3c:42:
                    6e:df:94:aa:3e:80:95:f6:bf:4e:6b:81:71:0a:9d:
                    a8:8a:c8:32:17:d9:0e:6d:b4:f4:6e:c8:d1:74:30:
                    a4:c5:30:75:81:fd:3e:7a:7a:1b:f7:5e:9d:a3:4c:
                    3c:a3:a1:f8:d5:03:0b:a9:44:f0:fe:94:55:c2:16:
                    03:70:79:5b:c0:ae:c5:a2:9e:f3:01:f4:4d:e9:71:
                    a8:17:e7:08:4f:ad:3b:26:64:c5:78:dc:a3:57:29:
                    f3:c8:cd:b6:5c:88:a9:40:13:b4:e8:f4:83:4f:f4:
                    c9:f8:5e:9a:cb:24:e5:31:6a:98:3b:62:2a:51:09:
                    8f:0c:7a:4d:4c:ff:ab:3b:b4:0b:f6:7a:66:6e:cc:
                    0a:12:b4:9e:dc:18:75:b8:10:dd:4c:bd:58:29:1a:
                    5d:c6:63:bf:fc:43:a9:d2:38:e6:d2:26:13:54:67:
                    a8:3f:ea:58:2a:d5:87:5c:44:c2:86:36:ed:d3:fc:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:39:E5:CE:3B:79:4C:51:DC:17:03:C5:51:41:D2:63:00:D6:2A:31
            X509v3 Authority Key Identifier:
                keyid:A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:65:e5:29:3b:82:dc:50:fc:4a:d0:27:c6:2d:40:a0:e1:fd:
         e5:6e:61:b8:8f:4a:ea:85:a7:47:a2:aa:51:3a:e3:06:2d:6b:
         72:4f:c1:87:a7:39:1e:3b:46:95:cf:62:15:80:34:93:0b:50:
         24:62:74:e7:06:6c:97:bc:6d:90:e6:63:87:6d:aa:2e:2f:96:
         bd:0f:e0:48:78:03:7b:b8:d9:b8:8f:9b:f5:04:d9:ce:59:b7:
         78:dd:f3:fa:07:f5:2b:95:90:bd:b8:74:bc:75:43:8a:c3:d7:
         b2:39:0b:a9:7e:d6:b4:91:bd:4e:87:42:78:90:65:37:68:74:
         13:b8:27:a4:31:fc:95:b5:1d:20:3b:91:00:99:ce:9c:32:3e:
         ef:df:9d:a0:ef:39:37:35:65:b0:1b:16:99:23:73:77:22:37:
         6f:59:91:e9:b5:45:3d:e0:ea:7e:35:8e:3f:cb:32:72:83:10:
         3d:bc:44:ca:f3:ba:d4:b6:ae:b6:57:68:ef:3d:5b:1d:fd:d0:
         9b:7f:b1:3d:3a:98:2e:78:1b:47:26:3b:e0:19:85:48:87:51:
         54:6a:95:6f:e9:b0:03:86:18:5e:2e:20:51:5f:2d:ac:90:89:
         02:6e:80:fa:40:74:55:d5:a7:43:ee:e6:5d:34:3b:08:a8:2d:
         3a:21:21:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:08 2025 by rpki-client