Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
File:                     818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft (raw, json)
Hash identifier:          2k+BBtWlTTB1a9k6uhCwNUhWcDIHkPdgRJ+8pUprUCU=
Subject key identifier:   E1:2B:94:5B:FF:69:96:FF:28:3A:97:5C:17:89:69:8F:5C:89:FA:C7
Authority key identifier: F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
Certificate issuer:       /CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Certificate serial:       0194BD17B69877CBE5A494B3BF64F416C0F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 16:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:35 +0000
Files and hashes:         1: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl (hash: riw4osfywaguo/mhKlRj/sTlNEAgXEiy3vbO1LoFpw4=)
                          2: POD0rcdBSvDIH2xQjNK7FTsBiSU.roa (hash: qqDcVkaCep5jyj7VmzlXWQJNTWjPppQG+dngjp5gRWQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:b6:98:77:cb:e5:a4:94:b3:bf:64:f4:16:c0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35f3f2ebf80c77669250a759be1e5c91e388435
        Validity
            Not Before: Jan 31 16:00:35 2025 GMT
            Not After : Feb  1 16:00:35 2025 GMT
        Subject: CN=e12b945bff6996ff283a975c1789698f5c89fac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:54:a3:f1:d4:65:33:83:75:06:88:7c:3e:17:
                    7a:c6:f7:54:ac:61:9c:fe:11:c3:22:0d:7f:8c:00:
                    ec:6c:9a:c5:b2:1f:0b:1d:94:f3:11:e5:d5:4c:93:
                    79:60:24:7e:2d:97:ba:f4:e0:03:c8:ea:3b:35:cb:
                    8a:0b:6b:bd:c6:3b:1e:2d:92:8c:0c:05:e7:21:e0:
                    9d:2e:fa:9f:d6:8f:e1:4a:fe:f5:9d:64:f2:34:af:
                    6d:47:2e:c6:9d:b2:a2:f3:85:aa:a7:ba:53:31:e6:
                    ab:f1:a7:61:15:bf:2b:be:ac:b8:c4:52:c8:86:5b:
                    f2:d4:05:a0:64:f3:f2:d0:0b:f8:10:a6:d6:7b:37:
                    ff:1b:59:ee:0a:d1:b2:d7:2f:29:f0:6a:9a:cb:3a:
                    6c:31:93:1f:1a:bf:70:79:ad:a4:2c:ea:63:ed:a5:
                    01:57:d2:c1:47:db:53:23:2c:3b:ee:e5:73:46:7d:
                    1f:c5:65:9d:86:37:10:70:2a:ae:a8:fb:38:53:89:
                    23:3e:46:7e:12:94:3f:82:a4:ea:53:3a:c7:8d:c9:
                    34:9c:6c:67:72:1f:7c:d2:a6:d4:1e:86:10:39:cb:
                    1c:b5:3f:3f:95:a2:5e:fb:d9:07:06:7d:ab:fc:a7:
                    69:bf:6b:25:86:c4:1a:86:07:61:71:29:9e:e9:86:
                    b5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2B:94:5B:FF:69:96:FF:28:3A:97:5C:17:89:69:8F:5C:89:FA:C7
            X509v3 Authority Key Identifier:
                keyid:F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:97:f6:cf:38:35:21:b1:fd:27:54:3c:a4:36:54:7a:94:b4:
         13:a9:9f:99:2d:05:b1:de:60:d8:ba:ad:4c:bb:b4:b1:70:47:
         89:7f:52:ab:cb:c0:51:50:24:8d:83:16:4f:ea:0a:17:f9:b8:
         82:6b:22:5e:ec:09:77:6b:d5:89:d5:14:63:a1:2d:b3:9d:39:
         65:ff:df:0f:88:1a:4a:6b:e3:d8:8f:8e:7e:f9:77:e8:1f:b6:
         3f:97:1a:2b:5d:d5:58:87:59:cc:67:4a:18:60:19:7f:02:f9:
         2f:05:17:5c:1b:1e:d0:c0:36:a3:17:b8:84:7e:a8:42:6a:37:
         5f:ed:52:ce:ca:89:1a:0f:5e:ea:19:76:d4:44:38:e7:3e:03:
         52:66:c3:5b:ac:82:bc:01:57:8c:2d:23:a7:2b:96:03:d3:35:
         8e:45:58:ce:79:15:8e:fc:cd:25:89:f4:d2:23:45:a4:e2:86:
         48:ec:c7:b1:4c:48:b2:de:55:4b:8d:78:0a:b2:6f:6b:fd:73:
         dd:ca:1e:94:7f:6b:87:6f:85:43:de:3b:81:c8:a6:da:fa:1e:
         f0:e7:d3:61:43:60:1b:25:5b:45:b0:ae:4f:59:34:b2:15:6f:
         48:73:e8:f7:76:d6:31:fd:fc:2e:dd:cb:f6:c1:5e:13:c4:70:
         56:19:4d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:51 2025 by rpki-client