Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
File:                     G57Ppx7--bsb_nsuQCFc2lsjHl0.mft (raw, json)
Hash identifier:          ow2FFqq+Zit+tAMXCcB4JzNsBA+ulV5RqD0xd1csmfk=
Subject key identifier:   91:0E:8B:E2:32:5F:C9:43:46:D3:89:B6:BE:C0:8B:01:EA:4C:1B:B4
Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
Certificate issuer:       /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Certificate serial:       0194BD4E9FE7DFB4B06678DC323BACA421A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 17:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:34 +0000
Files and hashes:         1: G57Ppx7--bsb_nsuQCFc2lsjHl0.crl (hash: 5jvlD7LjKPpVYC9cx94lGuS3NuIPr5QSqvvg7zSMhm4=)
                          2: lxlrJ6zUgWTjPJVPagQ8_bikf3Y.roa (hash: ohk+IdQW1buST7Ifi9lGkmLrZs39V2tT52pS0ULxhf8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:9f:e7:df:b4:b0:66:78:dc:32:3b:ac:a4:21:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
        Validity
            Not Before: Jan 31 17:00:34 2025 GMT
            Not After : Feb  1 17:00:34 2025 GMT
        Subject: CN=910e8be2325fc94346d389b6bec08b01ea4c1bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:13:36:59:1f:32:ba:9a:a2:6b:d5:58:39:
                    7d:9a:14:a8:e9:e2:0e:e4:a9:85:33:ea:5c:c7:61:
                    79:55:d3:43:d4:a4:69:8b:7b:44:2b:2f:ff:51:0a:
                    da:10:34:1d:4b:93:97:2e:47:1e:2f:50:0d:36:78:
                    78:0a:06:04:5f:bb:07:0d:3d:13:de:c7:1f:3d:17:
                    ff:75:60:7a:00:81:0f:ab:69:d1:80:77:5b:00:f5:
                    ba:ea:09:2e:f2:ff:f3:d8:fe:6b:96:8f:c8:e5:7b:
                    7e:42:49:09:28:09:db:10:68:34:34:c3:54:20:f9:
                    9a:3f:fd:49:87:7a:4e:a2:d9:89:92:f6:e8:57:f3:
                    5b:96:0f:2c:dc:4b:17:ce:3c:d7:6d:a6:22:ec:81:
                    f1:e0:75:d8:1e:8c:17:56:bb:9c:63:3e:e1:47:0a:
                    3e:a5:43:47:f3:4a:f4:0d:cf:59:4e:c9:2b:7a:54:
                    dd:af:b9:3d:4d:b0:e2:3e:f8:75:8a:4e:7f:ea:53:
                    08:91:4e:fe:15:b1:fd:16:f1:b3:5d:eb:b9:e8:c2:
                    da:bb:39:d7:71:12:90:50:43:cc:ac:dc:ac:6c:9b:
                    fe:f7:33:ec:12:4a:9d:f9:9d:a4:f3:ef:a4:34:70:
                    58:65:ba:b4:27:af:47:27:6c:73:1b:e6:a1:a5:05:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0E:8B:E2:32:5F:C9:43:46:D3:89:B6:BE:C0:8B:01:EA:4C:1B:B4
            X509v3 Authority Key Identifier:
                keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:36:a1:04:54:0b:9e:36:65:61:4f:08:67:a2:f8:19:f7:34:
         4c:6b:33:17:f3:be:03:31:0e:98:91:60:96:24:0b:7a:a3:20:
         34:f1:dd:64:71:7f:2d:61:cc:71:ae:49:3f:1b:1f:11:f0:d1:
         fa:13:af:05:e5:4c:1b:d9:2a:1e:38:8b:fc:2d:76:46:55:98:
         fb:9a:24:69:29:73:fb:7b:98:02:23:8d:2b:24:d1:53:8d:0f:
         24:0c:1d:7e:6e:ec:a5:9b:9b:01:f5:f5:4a:9b:00:67:8b:01:
         58:35:a4:78:63:61:0d:eb:7c:98:99:c1:59:c8:f7:56:2a:29:
         2d:80:e3:5e:9d:b7:34:17:3e:b1:fc:1e:7c:b4:a4:ed:3e:d9:
         5e:42:51:e3:aa:cc:7c:c8:90:12:a4:7d:2f:79:fe:bd:56:1d:
         36:1a:e6:8d:58:17:95:08:62:9d:96:79:1c:87:4d:29:2a:cd:
         ec:b0:99:ef:97:a4:38:f3:d4:af:d4:46:4d:7f:af:1a:09:8d:
         34:48:8b:b9:84:b9:1f:ec:74:7d:d1:75:84:43:24:fe:4a:bc:
         1c:ca:97:41:ab:20:9a:25:8f:cc:6a:16:e7:f5:a6:55:5a:f9:
         3d:50:43:78:a0:7b:42:12:46:63:1d:71:f3:0d:84:1e:27:e1:
         f7:68:92:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:17 2025 by rpki-client