Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft
File:                     x9uZhsBTq3lIoSw9DITO65Om1j0.mft (raw, json)
Hash identifier:          +k+9KOJae2EAMtWjwSFjW4LLaPEeIzcKdXJ7XLhvEb0=
Subject key identifier:   AE:2B:14:37:A5:8F:E9:98:E9:86:60:A2:F6:3D:90:0C:8F:41:82:90
Authority key identifier: C7:DB:99:86:C0:53:AB:79:48:A1:2C:3D:0C:84:CE:EB:93:A6:D6:3D
Certificate issuer:       /CN=c7db9986c053ab7948a12c3d0c84ceeb93a6d63d
Certificate serial:       0194BBCDB4511C80A70769E831452633406B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:07 +0000
Files and hashes:         1: P-wj_vrRcbXiIB_5K8UUWmn7wtA.roa (hash: DBiwTIAVoLlTcU9IX3rDmcOWHkGERlsL2UhqGoUcwKc=)
                          2: x9uZhsBTq3lIoSw9DITO65Om1j0.crl (hash: RBlxYMIamX0PINh4qyVKVdDj9cHu5lBA3ZQ8YveUrCU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:b4:51:1c:80:a7:07:69:e8:31:45:26:33:40:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7db9986c053ab7948a12c3d0c84ceeb93a6d63d
        Validity
            Not Before: Jan 31 10:00:07 2025 GMT
            Not After : Feb  1 10:00:07 2025 GMT
        Subject: CN=ae2b1437a58fe998e98660a2f63d900c8f418290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:29:27:ff:97:8a:cd:fe:e3:f8:e2:af:06:
                    09:87:96:a8:0f:a6:b1:28:50:2d:08:85:9f:f5:68:
                    26:ef:4a:b7:77:b1:24:92:43:a8:2c:7f:f8:9a:20:
                    e1:a4:b2:91:2b:33:67:32:16:f6:df:38:29:ac:5c:
                    c0:45:24:d8:ff:04:49:d7:be:7b:6e:1d:54:8b:78:
                    44:de:e0:f2:b6:3e:88:b0:fd:80:bb:e9:43:46:4d:
                    9a:20:ff:d9:c2:e1:a0:03:ff:54:65:17:24:54:2f:
                    83:05:01:4d:fa:c5:98:66:6a:8d:f0:74:e1:33:55:
                    88:1a:6e:f6:02:1e:27:30:3a:ad:39:6b:4e:9b:83:
                    3f:f3:fe:fb:09:82:da:fb:a4:7a:e3:c7:90:92:69:
                    17:74:12:f2:cc:7d:66:18:fb:b3:36:75:ea:e2:6d:
                    9e:4f:b9:f6:e3:89:7f:05:63:2a:8c:bd:0e:48:ab:
                    86:14:42:4e:5e:5b:02:85:bd:64:b0:8c:ea:0b:b2:
                    f5:ad:60:5b:ed:82:65:81:0d:27:60:9c:be:6c:e4:
                    15:d1:89:06:3b:a7:b4:6f:4e:74:ca:13:60:d6:5a:
                    fb:e3:46:18:fc:21:f0:82:9b:64:19:c3:16:ef:5a:
                    72:1a:2e:be:a7:08:6c:b8:95:31:49:ef:88:d8:14:
                    17:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2B:14:37:A5:8F:E9:98:E9:86:60:A2:F6:3D:90:0C:8F:41:82:90
            X509v3 Authority Key Identifier:
                keyid:C7:DB:99:86:C0:53:AB:79:48:A1:2C:3D:0C:84:CE:EB:93:A6:D6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9uZhsBTq3lIoSw9DITO65Om1j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/67335c-362c-47af-9fb9-12c6b0fd7f73/1/x9uZhsBTq3lIoSw9DITO65Om1j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:16:bd:e8:cd:16:9f:d7:cc:7f:7f:93:f8:ee:39:fe:bf:1f:
         b5:12:f0:a6:7d:9b:c6:e0:6a:32:bf:83:8c:e4:58:b9:68:2b:
         18:a4:11:cc:a0:1a:80:06:dc:82:11:4f:30:4a:9e:98:4d:a7:
         ee:58:d4:52:c1:90:52:64:c2:04:43:87:eb:ca:87:97:92:6e:
         5b:cd:da:01:ce:1e:a8:bb:fc:89:d5:e3:9c:e2:bd:eb:cb:b6:
         f8:34:84:a5:3a:75:b4:65:3c:c7:9f:f9:a3:6b:03:ac:b3:94:
         5b:21:35:bf:a3:c1:29:a6:48:4c:dc:a5:7c:14:d9:04:63:31:
         77:88:16:a0:42:ca:a2:74:e7:33:81:40:12:6e:b1:16:26:53:
         54:86:a5:00:8d:4b:22:d6:8a:c8:ad:d2:a0:25:43:27:1e:00:
         ff:04:77:7b:d2:f3:93:39:2e:bf:f2:28:15:00:d0:17:8a:96:
         18:d0:80:cd:af:98:0a:53:f4:3c:0e:2a:63:aa:94:8f:04:ea:
         e3:c0:25:34:3e:61:e3:57:1c:b7:aa:6e:f3:bb:7b:5c:69:d0:
         2c:93:72:f3:70:28:60:a0:31:86:6e:a9:92:f5:38:17:5f:93:
         ba:e0:67:80:6c:22:b5:92:dd:37:45:1c:25:4e:21:e6:80:e1:
         a0:65:90:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:11 2025 by rpki-client