Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
File:                     1-X_eytsyYTNDh88JHQLgcTt4HTE.mft (raw, json)
Hash identifier:          hNrnno+7av8aUDKA9EnTcSlNUHozX3bkzX6sVXUL0gc=
Subject key identifier:   70:6A:ED:32:CB:0E:37:41:73:4D:4C:0E:15:EA:49:C1:DC:D5:E3:C3
Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
Certificate issuer:       /CN=f97fdecadb3261334387cf091d02e0713b781d31
Certificate serial:       0194BCA96DFB473BDA469FA062C74AB4D8DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 14:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:07 +0000
Files and hashes:         1: 1-X_eytsyYTNDh88JHQLgcTt4HTE.crl (hash: gk9anus27A1fS1fArKh5EFIHhVWwNtJgJ29lyCR+SUI=)
                          2: FCnaaFMRUSsD-s93_AVnx22U1ao.roa (hash: 4tCe1gcr3PUaM9byeRkhDZQavz/cazZjqikDLI+wcCg=)
                          3: mAXlXNB9v-X9Wiu9xA-qkNOSmGk.roa (hash: oVGw8L/hb1uj03ZIPyJ/jrTD+46lhm6KM/O1Nxc9Los=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:6d:fb:47:3b:da:46:9f:a0:62:c7:4a:b4:d8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31
        Validity
            Not Before: Jan 31 14:00:07 2025 GMT
            Not After : Feb  1 14:00:07 2025 GMT
        Subject: CN=706aed32cb0e3741734d4c0e15ea49c1dcd5e3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b6:da:fc:a6:68:f8:43:a6:43:d4:4e:38:04:
                    6d:41:1a:99:7b:dc:b5:66:2b:fc:6a:c5:72:3a:d7:
                    b0:a2:29:dc:5f:6b:de:3e:03:e2:f9:44:3e:46:5a:
                    ec:9d:83:61:7e:23:f0:ff:8c:f3:79:d8:16:0c:10:
                    65:f9:c5:8b:f2:af:7e:8b:ee:d7:80:f2:9e:55:84:
                    c6:8b:f9:1d:3c:92:95:91:c7:5f:57:43:79:75:e2:
                    bd:f3:8e:1f:cb:54:55:ab:90:0a:19:6f:f7:97:84:
                    ff:e4:aa:57:01:67:49:7e:48:8c:aa:4d:d6:77:4e:
                    82:51:12:44:cc:de:bc:76:7c:8e:78:19:f3:d8:2d:
                    1f:cb:38:e0:79:d9:06:09:15:d6:d1:42:57:90:dd:
                    91:62:b5:a2:3b:2e:80:84:e8:b4:a8:fc:01:b9:03:
                    c5:a2:97:17:05:4c:23:bf:8d:d6:e6:39:0e:b5:e6:
                    68:15:cc:89:e7:4f:bc:34:63:b1:64:86:00:6a:47:
                    5a:92:89:99:30:51:d1:e4:5d:bc:db:cd:5f:87:4b:
                    d2:7a:b8:54:5b:3e:8b:93:fd:47:e5:ba:5e:08:54:
                    fd:5f:ec:f5:5e:40:9b:a4:70:7f:e4:17:58:9d:e0:
                    f2:13:56:0a:17:e1:bf:bb:01:c7:05:47:68:ed:0e:
                    37:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6A:ED:32:CB:0E:37:41:73:4D:4C:0E:15:EA:49:C1:DC:D5:E3:C3
            X509v3 Authority Key Identifier:
                keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6e:7e:1f:ea:07:b6:bb:81:56:72:1b:18:f3:4e:97:ea:81:
         26:ee:3c:fe:d1:25:cf:08:6d:57:1b:c3:b2:90:5e:51:8f:f0:
         87:9f:a9:84:2b:e9:f4:7c:f6:8d:cd:a4:3d:f2:b5:08:b9:18:
         00:cd:9e:b5:e9:95:b1:16:5f:d5:a9:5c:58:e9:65:b7:50:02:
         92:c7:59:14:d2:3e:3a:9e:fa:2b:fe:e0:09:be:40:00:75:24:
         55:b7:ef:76:ca:f7:47:d5:db:95:ed:0b:3a:12:f6:48:e6:0c:
         10:45:ce:32:6e:bc:36:e5:f1:0a:b1:5e:02:4c:8a:9f:5d:b8:
         05:40:0d:79:61:16:34:f8:58:9b:de:62:bd:23:f3:2d:7d:42:
         ad:3e:60:4b:d9:a4:83:b1:92:51:bd:07:38:fd:72:99:e6:dd:
         fc:6a:62:aa:eb:86:c6:23:05:d8:e2:2d:38:a1:f6:e9:a5:9a:
         f7:de:6d:3f:a1:eb:2e:13:c2:a9:5b:c7:5b:d3:7e:4a:ba:49:
         5d:7c:28:c1:22:2f:8d:69:e5:24:f5:e8:2b:81:9e:18:3b:59:
         d7:47:ce:9a:00:6d:db:6f:e2:b2:44:6f:d7:2f:b8:2a:9d:2e:
         e2:c7:7b:eb:54:65:7f:77:a3:2a:e1:a7:d4:df:5c:ec:5e:30:
         2a:41:48:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:37:02 2025 by rpki-client