Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
File:                     V5NTy0LgxPulyuJTpXaLwfJGW5k.mft (raw, json)
Hash identifier:          BBD0c9yfNsiaG/nY+qhKP9/JoC3qR0hm/0KK7erIKAg=
Subject key identifier:   E3:B8:F1:6B:47:D1:35:8F:E6:F5:7E:24:A8:CB:CF:13:79:16:02:A2
Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Certificate issuer:       /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Certificate serial:       0194BD8526C1F923D1410B43FA657A641522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
Manifest number:          0EB0
Signing time:             Fri 31 Jan 2025 18:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:07 +0000
Files and hashes:         1: D3QeUsU8Q-1bY74EwK2MA0No9Ew.roa (hash: N97kcfMNA4uFpsheDLzM7+Nl7AAF28L1BPIs41yYMZY=)
                          2: Q07EucI5XyAYo9s-A9qqwpcEGlA.roa (hash: VFWYrVVM3MpoRzNbOjii1yFOv4OAEiNvOV4MAp0ri4Y=)
                          3: V5NTy0LgxPulyuJTpXaLwfJGW5k.crl (hash: aOu7CeEJPQBPvzMgsRtWGlpDi5gXz3t5SBvhxIdPT1k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:26:c1:f9:23:d1:41:0b:43:fa:65:7a:64:15:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
        Validity
            Not Before: Jan 31 18:00:07 2025 GMT
            Not After : Feb  1 18:00:07 2025 GMT
        Subject: CN=e3b8f16b47d1358fe6f57e24a8cbcf13791602a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:94:93:8e:38:60:ca:f3:51:38:0f:03:ae:
                    40:eb:ae:98:82:8d:5e:d5:3f:24:ed:6e:e6:5e:4a:
                    24:d3:0a:a6:63:4c:9f:9c:41:ea:b7:4a:ec:a4:51:
                    a2:3d:7b:5e:f6:da:6c:72:51:ca:0d:80:5b:f2:48:
                    8f:fd:d6:91:99:8b:7d:13:06:52:8c:1e:3e:0d:72:
                    8d:41:60:79:d1:14:db:dc:5c:f7:9e:f2:c6:7e:94:
                    ef:3d:71:ab:23:42:e9:9b:4b:ec:2b:ab:d0:73:83:
                    95:26:1b:7f:f3:6d:28:24:e0:66:08:df:b2:6d:1f:
                    9e:b3:1b:50:b2:08:1d:b6:f6:f3:00:ef:06:18:eb:
                    19:18:58:3a:8d:46:20:1f:4d:aa:b4:4c:aa:60:f7:
                    bb:41:17:0a:67:5d:44:60:1f:d3:0f:5e:99:76:32:
                    78:c6:a0:1a:b1:92:6f:96:89:a2:e3:70:eb:65:c3:
                    da:d8:6e:07:f7:ee:29:69:4e:a5:44:7e:85:82:44:
                    55:9b:6b:b5:cf:9f:7a:4f:ad:90:7c:07:1c:88:1a:
                    f2:90:2c:ba:f9:07:07:65:6c:ce:ae:35:39:f7:be:
                    1e:52:f5:43:a8:b1:b6:06:a8:d2:82:74:a1:ac:04:
                    3a:89:f2:20:06:72:22:87:48:be:e1:d5:b4:96:b0:
                    3d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B8:F1:6B:47:D1:35:8F:E6:F5:7E:24:A8:CB:CF:13:79:16:02:A2
            X509v3 Authority Key Identifier:
                keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a5:3c:e0:41:77:e5:de:52:33:31:d2:e1:5a:fb:ad:4d:c3:
         04:20:4f:d8:fc:94:db:05:2e:5c:ca:cf:ee:ab:0a:40:07:89:
         42:51:d0:45:e5:08:cb:00:f1:f4:cf:31:7d:a4:a1:bf:13:17:
         75:b0:90:cd:03:4f:64:33:d6:f2:51:aa:fb:a5:4d:e9:e4:26:
         01:8b:96:52:41:20:24:53:d1:d3:9f:80:d0:19:bc:08:2b:b5:
         eb:8b:6c:5e:53:02:e0:6a:51:cc:ea:3c:b6:f2:e8:88:0d:51:
         2e:44:b1:04:db:a3:64:03:b2:31:1e:be:73:df:12:a8:a9:e3:
         74:2a:b3:0f:2b:a0:e6:3b:90:67:77:40:6b:5f:3e:06:91:d5:
         ac:62:a7:36:61:f5:ce:17:d7:f3:e6:c8:dd:01:fe:94:3c:52:
         4f:db:2e:c2:81:69:fb:31:ce:54:fa:d2:7a:ae:a7:e7:ac:a7:
         12:d0:50:02:ea:f9:ec:d9:89:f5:40:70:db:a5:40:17:a3:d7:
         ba:72:8a:2a:40:cc:79:0f:14:0e:16:ac:27:b5:a7:46:8a:70:
         e8:4e:a1:59:46:09:67:4c:00:1a:19:5e:94:ce:98:a1:09:5b:
         25:79:44:ac:1b:48:40:93:b9:77:00:7c:1d:21:1d:7a:8c:46:
         03:ea:5e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:09:58 2025 by rpki-client