Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
File:                     7hgkJLSEGX3DBFJAktzdmS_L5L4.mft (raw, json)
Hash identifier:          Fqytfd1KPKhFL8iANKQSdAhqn8E5cK4IizSr9cMiRfA=
Subject key identifier:   CB:24:B7:B6:C3:40:08:BC:90:5C:73:18:E4:37:96:1E:72:BA:0B:1E
Authority key identifier: EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE
Certificate issuer:       /CN=ee182424b484197dc304524092dcdd992fcbe4be
Certificate serial:       0194BC3BDB46591C856D87A8AD1A085B33A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 12:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:26 +0000
Files and hashes:         1: 7hgkJLSEGX3DBFJAktzdmS_L5L4.crl (hash: t2jSCGZFTlGSwuNzdKwkFE+0OLs8RSRGNjAPzpoMYkQ=)
                          2: F0v3ZdAWJMgM-NX7fWdPVPvmHtw.roa (hash: 5lz4KZFI8B9Thk9y5Q0cmh/EUM6SOuSnTkJHbk1d9g0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:db:46:59:1c:85:6d:87:a8:ad:1a:08:5b:33:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee182424b484197dc304524092dcdd992fcbe4be
        Validity
            Not Before: Jan 31 12:00:26 2025 GMT
            Not After : Feb  1 12:00:26 2025 GMT
        Subject: CN=cb24b7b6c34008bc905c7318e437961e72ba0b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:06:08:01:40:9f:28:90:5e:44:91:34:40:b2:
                    25:14:c5:09:59:58:ca:c2:7f:10:09:a5:f2:76:dd:
                    52:c5:26:c8:b3:94:2f:03:28:e8:95:c4:fa:40:27:
                    12:81:e2:38:91:0e:83:84:5e:06:52:bf:af:f0:2e:
                    b9:a1:c9:58:15:83:7e:ae:94:c2:4a:ce:91:02:fe:
                    84:53:48:ab:23:8c:32:4f:c9:66:81:5a:d6:ef:5d:
                    82:4d:33:21:0e:ae:60:af:ba:97:fe:7e:d9:f1:dd:
                    f9:05:a4:25:1e:16:16:0e:b2:fb:f7:37:c6:e7:08:
                    63:c8:57:e4:60:24:98:15:67:b0:5e:aa:61:2c:97:
                    25:0e:a0:c8:33:85:05:b8:75:f6:97:3c:d3:ac:66:
                    5a:1e:e4:ec:03:2d:1f:67:0c:ab:fc:fa:9b:d1:7e:
                    06:18:e2:c4:87:27:0b:94:23:37:b4:fb:ba:36:1e:
                    74:3f:3d:60:90:e2:66:b2:5f:fa:fc:96:ee:6d:9d:
                    10:26:c0:fb:b5:38:12:52:00:25:81:d7:d6:b6:ac:
                    b7:50:76:89:90:6a:9b:94:7c:9a:3d:8c:ae:cd:83:
                    9c:d0:02:02:9b:09:47:fe:b7:3f:7d:7a:ef:30:bf:
                    b9:05:68:ce:29:a4:1b:e7:c9:db:2f:fa:53:6f:e0:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:24:B7:B6:C3:40:08:BC:90:5C:73:18:E4:37:96:1E:72:BA:0B:1E
            X509v3 Authority Key Identifier:
                keyid:EE:18:24:24:B4:84:19:7D:C3:04:52:40:92:DC:DD:99:2F:CB:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hgkJLSEGX3DBFJAktzdmS_L5L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4c4058-8ee3-4e3e-a30c-bac476b97eee/1/7hgkJLSEGX3DBFJAktzdmS_L5L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a1:c5:09:4a:44:c3:ea:e5:ce:ea:35:b3:b9:c2:ba:85:bc:
         a9:75:66:0c:46:a2:15:05:fc:48:85:bf:49:e6:39:7c:3a:7a:
         6b:c8:b2:14:97:55:fc:f7:8e:81:e6:10:03:4a:c0:a1:66:03:
         4e:92:a8:5a:bc:3f:e1:03:29:08:2c:79:bd:65:32:66:b0:6d:
         0c:30:42:8d:37:2a:67:cf:7f:aa:5b:b4:3b:b5:fe:f8:89:83:
         42:12:6c:31:ba:a9:d9:d1:5e:4d:6c:19:42:9e:43:0a:57:d4:
         c6:f2:01:b7:38:ea:ea:73:05:44:e3:32:bc:cc:bc:3f:76:3b:
         c1:96:08:7f:c1:fa:42:a7:8a:8e:27:61:7a:db:9c:bb:5c:af:
         01:25:02:31:b3:7c:1c:fa:63:79:89:02:33:ed:0b:34:17:dd:
         9e:1b:e6:81:fe:35:b5:59:e0:db:16:91:7f:53:7b:43:e6:ab:
         45:89:12:a8:ce:74:2e:48:91:d5:1b:17:55:ca:3e:f9:bf:3d:
         48:32:79:7d:19:f4:19:53:c1:c4:3b:c3:7d:58:db:d0:e8:88:
         bc:d3:ad:a7:95:a3:00:9f:ad:16:3e:99:90:48:8b:34:72:22:
         85:44:a6:2a:52:fd:87:b0:82:31:14:40:5e:80:c0:37:5c:47:
         e2:18:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:41 2025 by rpki-client