Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.mft
File:                     5L3Wsev8lYmaWDM9yUz4Khmms74.mft (raw, json)
Hash identifier:          jjmpeAsXEA4wfBa1LAz2rMIRqX2QnPyInWLIUoF/KLk=
Subject key identifier:   CF:C8:16:BA:4E:5D:F7:52:51:95:5B:0E:D4:83:6E:A9:DB:A0:EA:BE
Authority key identifier: E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE
Certificate issuer:       /CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
Certificate serial:       0194BCA9B4783CFC1EC9BC550506829865C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 14:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:25 +0000
Files and hashes:         1: 5L3Wsev8lYmaWDM9yUz4Khmms74.crl (hash: frPX6XYI0e73uV/NgoTttTaJoUC5IKwcZF37XWL3ADk=)
                          2: PaT_nYM6R2ViYAgTUbxQ1NzbOSA.roa (hash: /oXQTiCemS6sXYuRjLsYunox2/Th+MYOuXrgUFHKw9E=)
                          3: YJqTNqqIesHe-dycJcy9xj_pIQY.roa (hash: gWFu5S/Jd4xeYG1Nm3fFs4fqADkExqgxea/J49+nbBA=)
                          4: nRgw2MAt3WYyY35ZFevVa3RbgRI.roa (hash: iMX08HjheTLYkXDYb7SGkWa1cWqxObDNOm7+YW1lPv4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:b4:78:3c:fc:1e:c9:bc:55:05:06:82:98:65:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bdd6b1ebfc95899a58333dc94cf82a19a6b3be
        Validity
            Not Before: Jan 31 14:00:25 2025 GMT
            Not After : Feb  1 14:00:25 2025 GMT
        Subject: CN=cfc816ba4e5df75251955b0ed4836ea9dba0eabe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ad:4e:ac:9b:d0:22:42:62:b1:5e:8c:23:fe:
                    dd:b8:23:a9:b3:94:88:6b:ef:3e:7a:fb:05:e7:86:
                    e3:07:e0:08:81:0d:95:84:00:b2:91:a0:38:70:04:
                    eb:d0:7e:03:be:b1:e6:37:57:f4:b2:5f:54:36:7d:
                    2d:bb:c0:f9:83:24:c4:5d:b2:92:80:44:3a:d3:3d:
                    28:df:cb:ab:d2:1e:4b:b4:39:bd:05:ad:a8:52:64:
                    e2:3d:c7:ed:30:0b:a5:20:a9:fc:d5:ce:30:41:2a:
                    18:e4:3d:06:74:db:24:f1:9f:58:d4:7a:8f:98:8b:
                    26:31:47:6f:0b:bf:ef:51:c9:32:a6:81:ab:3e:24:
                    a4:a5:9d:2c:9d:cd:32:7d:9e:18:9a:7b:43:c3:1b:
                    32:30:1b:a2:a5:48:0f:99:d7:02:21:55:1e:3d:01:
                    ad:54:eb:f1:f5:40:50:e4:d2:4b:5a:94:e8:81:db:
                    d8:c1:f4:42:3b:b8:16:59:65:a1:c7:cb:78:90:5a:
                    c3:22:c1:15:d1:c9:63:28:27:7f:d1:da:84:03:02:
                    f5:dc:3b:89:63:4b:e9:24:53:0c:17:d1:8c:1d:16:
                    b0:46:b5:29:61:be:01:6b:04:46:7f:90:fd:10:a5:
                    c2:78:c5:f6:44:39:b9:ce:54:13:7e:0c:bd:ec:da:
                    23:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C8:16:BA:4E:5D:F7:52:51:95:5B:0E:D4:83:6E:A9:DB:A0:EA:BE
            X509v3 Authority Key Identifier:
                keyid:E4:BD:D6:B1:EB:FC:95:89:9A:58:33:3D:C9:4C:F8:2A:19:A6:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L3Wsev8lYmaWDM9yUz4Khmms74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/2a8f88-b05d-4291-93d4-07f7d5195c2c/1/5L3Wsev8lYmaWDM9yUz4Khmms74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:79:41:9f:bf:40:d0:d5:4d:7c:a0:88:ac:b3:28:54:d6:a4:
         2e:77:aa:6d:7d:e5:cf:19:07:82:dc:28:52:c9:ed:44:c1:56:
         82:6a:1b:bd:69:41:2c:03:4b:37:9d:4e:93:52:0a:40:45:e3:
         2d:c3:56:7a:bf:bd:06:30:56:6c:4a:07:0d:76:48:72:95:df:
         ed:10:6c:50:a2:28:f7:da:f9:da:3a:3f:72:d3:41:51:0a:46:
         ca:31:fd:39:a6:90:ae:52:91:60:79:ad:e1:16:e9:5f:17:d0:
         c2:4c:cd:09:ea:81:cf:26:b2:0e:92:b2:e7:11:db:c9:a0:96:
         1e:a0:40:20:fc:6d:89:4e:6e:5b:4a:cd:af:43:5b:98:7b:f5:
         96:e1:b2:39:59:a6:52:32:37:d8:db:5c:9a:02:d2:d4:f2:27:
         20:5a:c1:c9:90:e4:21:4b:97:d9:26:9e:5e:fd:51:2a:7c:25:
         61:77:62:fe:f0:a4:80:b0:6e:f7:3e:f6:fd:1c:66:81:26:74:
         19:78:4e:87:54:68:de:86:59:a3:7f:7c:cc:31:a1:93:c1:d7:
         56:c3:fb:b3:d4:6c:8f:88:80:1f:47:c5:dc:51:25:aa:b6:c3:
         c6:5f:3e:78:e5:b5:23:11:f8:2b:b4:11:be:13:c3:0f:d7:e2:
         0f:5f:ef:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:05 2025 by rpki-client