Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
File:                     4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft (raw, json)
Hash identifier:          TW0H+tEEjNxXUrFXwBjlOhot9uF2Xa453ln9tq+hEOw=
Subject key identifier:   CB:32:4D:71:B3:C6:E5:70:FE:21:3C:F4:0E:A6:55:8B:C4:8D:D3:3D
Authority key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
Certificate issuer:       /CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Certificate serial:       0194BD4EB91D57B376EB92AF3C7B7763BF11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 17:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:40 +0000
Files and hashes:         1: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl (hash: j242CCp6yAglSI1/HoeDDGymulSRh5PsfJZ+MfiCbEo=)
                          2: dcj_O6LOhrZyjlYfbFWKtd8afLs.roa (hash: 6QlVZfYgCQ+Co7hd7hXUtwQRQFR7TWRFQKMzrXC6rV4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:b9:1d:57:b3:76:eb:92:af:3c:7b:77:63:bf:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
        Validity
            Not Before: Jan 31 17:00:40 2025 GMT
            Not After : Feb  1 17:00:40 2025 GMT
        Subject: CN=cb324d71b3c6e570fe213cf40ea6558bc48dd33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:4c:5d:a1:41:6f:ec:1f:59:c2:3d:7c:de:
                    4d:18:8a:fe:6a:52:f9:cc:45:b9:00:ef:07:d9:7e:
                    4d:53:aa:d5:05:96:8d:f4:1e:cd:07:59:28:46:b8:
                    f9:12:1f:a4:8d:d7:d3:7b:1f:f2:49:bb:5e:3a:ff:
                    d2:a6:b0:02:01:47:ae:be:cc:bb:84:f5:b8:7f:63:
                    51:80:24:97:69:e5:b1:e6:9a:46:09:ea:9b:8b:20:
                    95:27:0a:17:17:44:44:60:9d:33:8d:84:b1:dd:4a:
                    94:33:fe:f3:f7:d0:89:22:8b:ff:b2:97:c4:f9:fd:
                    9f:bc:d6:8e:16:30:7a:60:3a:7b:80:7a:4f:30:31:
                    14:9e:61:ce:ea:c0:bf:f3:fe:e6:46:af:18:8e:dd:
                    21:49:49:91:f7:71:2d:da:f4:6e:fb:2a:bb:6d:d0:
                    c5:0f:f1:ea:01:3c:05:82:49:02:fe:95:8d:be:27:
                    09:45:ce:c2:72:ff:d2:6e:bd:be:8e:86:f3:f5:4d:
                    0c:7b:84:b3:5e:3f:eb:88:4c:49:a0:a5:31:37:9c:
                    33:11:f6:9e:d0:5c:e0:66:bc:b8:de:40:ad:d6:6c:
                    f0:2b:a7:e6:82:b5:da:be:d4:cc:8b:64:aa:94:41:
                    47:91:26:32:af:9f:c1:2a:2a:67:2c:9e:0a:bb:98:
                    07:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:32:4D:71:B3:C6:E5:70:FE:21:3C:F4:0E:A6:55:8B:C4:8D:D3:3D
            X509v3 Authority Key Identifier:
                keyid:E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:be:f7:2a:4e:37:65:e4:9f:12:32:36:e1:05:82:d6:97:9f:
         02:08:55:86:c9:b7:93:4a:5e:03:5f:35:3f:0c:c8:b9:ff:ce:
         0d:ee:5f:d5:0b:7a:a9:50:ed:f8:d3:a0:f8:08:9f:d8:a0:6b:
         23:ce:4f:97:a9:0e:87:0d:fc:1e:e7:f8:74:73:4e:71:3b:e1:
         d5:c6:1d:65:6a:b6:f5:46:2e:e5:6f:7a:7b:a4:8a:39:e3:ce:
         84:82:fe:02:d5:1a:68:c5:5f:5f:91:2d:c4:bf:c3:82:bd:3f:
         55:54:7e:49:db:f6:fa:d4:a6:5c:03:97:e3:42:a4:fa:ac:17:
         78:4b:4c:1b:f3:7e:8f:2c:87:5c:2a:1b:0e:11:d5:38:ef:5e:
         b5:f0:0a:38:82:91:1c:8f:4c:4b:b8:56:4f:56:3e:d8:85:04:
         df:09:55:3a:75:7e:93:6b:8b:d0:ab:89:82:2e:2a:49:f1:19:
         89:25:f0:90:95:57:5e:38:cd:6b:90:30:64:61:d2:57:99:a7:
         49:d9:5a:df:a3:00:6e:6e:a3:45:01:71:82:61:9b:46:16:1c:
         46:c5:52:4f:12:09:f5:f5:d8:a6:65:79:f5:e9:e1:ac:93:26:
         47:45:45:c7:55:c2:ec:e5:6d:55:db:26:6f:86:f9:c3:5c:c2:
         16:7d:4c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:09 2025 by rpki-client