Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File:                     8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier:          X6fUoDIRb5vZtRuaz+kXj2LYtC935XP/gqKBNZjw3Qg=
Subject key identifier:   59:84:64:7A:F0:2B:98:27:59:7B:94:06:20:E5:C0:EA:F1:BD:CB:85
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer:       /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial:       0194BCE0B54E3E866501F68BAB5114519C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 15:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:30 +0000
Files and hashes:         1: 3-RywYSjpl9yuamrGaiHfk5Mz6o.roa (hash: khi3zX71hfk8spUUIwuIJwDTfe1y2tzgOMplAgujSag=)
                          2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: ZAlvEh/viqUxDmBAap3xy74+S7e3VDN2/x9Gan3kHRg=)
                          3: qmufYg21c7b0gdjuY1ziryDKce0.roa (hash: cPNs19EWQmBAO/qKhHL4tQL9v8RMF/40vmmVOD5n7Ds=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:b5:4e:3e:86:65:01:f6:8b:ab:51:14:51:9c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
        Validity
            Not Before: Jan 31 15:00:30 2025 GMT
            Not After : Feb  1 15:00:30 2025 GMT
        Subject: CN=5984647af02b9827597b940620e5c0eaf1bdcb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:36:36:c7:6c:39:ef:ad:de:1a:63:9b:b5:
                    fb:c6:c5:f3:fe:39:5f:16:f6:8d:c2:f1:f3:fb:52:
                    36:af:d2:14:ee:ca:47:5d:41:4a:73:fe:5e:f4:36:
                    a2:b1:9a:a8:70:4c:64:be:c1:5c:c7:57:e8:87:19:
                    bf:4a:ce:4c:90:ec:ed:8d:d1:b1:e4:74:0b:0d:3a:
                    f6:46:38:29:43:ec:fa:f1:a0:02:1f:77:17:f0:6c:
                    05:8e:ab:e8:b3:2d:7b:0e:29:18:63:e9:22:3d:ff:
                    52:28:68:24:6c:49:32:13:b2:47:75:e6:02:1a:03:
                    8b:cc:3e:d1:5b:68:27:83:98:19:3d:96:20:22:82:
                    b9:37:1e:30:3e:89:35:28:84:11:1c:ac:82:8b:c8:
                    f1:17:30:9d:1f:39:44:25:bb:ed:e7:79:a7:4b:77:
                    02:7b:56:c9:82:2f:e7:86:78:9d:1d:02:ad:6e:dc:
                    93:91:27:3a:5f:40:b6:a3:5b:b3:46:94:26:e9:24:
                    ae:27:3e:c2:e5:68:76:72:c9:1c:2a:ff:da:0d:5a:
                    0b:81:a0:a7:60:e3:a3:cf:a5:13:66:94:1a:d7:2b:
                    c1:75:82:54:86:95:39:02:58:2d:4e:e5:cf:9c:ea:
                    58:02:68:30:ab:21:96:97:51:be:68:c7:a0:40:32:
                    a8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:84:64:7A:F0:2B:98:27:59:7B:94:06:20:E5:C0:EA:F1:BD:CB:85
            X509v3 Authority Key Identifier:
                keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f3:0b:cd:8c:1e:0e:92:7a:35:91:54:c5:5b:d1:a9:d8:50:
         c7:fe:e4:4d:c7:81:76:c5:cc:36:c5:49:21:33:67:92:b0:a1:
         ab:89:10:08:5a:72:92:8e:45:47:99:85:40:37:eb:55:2a:c8:
         af:cd:98:0b:32:c1:75:84:dd:c0:d8:a9:f7:9d:74:33:79:f7:
         a5:ec:e7:5c:09:f0:fc:2f:d9:e0:06:05:95:b5:6f:de:47:ce:
         92:1e:ad:44:c6:7f:6e:a9:f4:e0:0f:03:ce:ee:9f:bf:a5:9a:
         2f:20:9a:4d:20:a3:21:d0:63:24:26:a1:c8:3d:5d:41:73:54:
         89:a5:8d:48:99:df:5a:85:a1:1b:dc:78:76:93:91:e9:77:20:
         14:6c:79:21:11:d0:04:20:c3:7f:3e:2e:51:56:c8:06:c0:c2:
         6c:15:26:24:82:66:1c:cd:fd:09:c8:c9:37:5e:af:ce:f7:e9:
         61:dc:e7:93:e7:1f:66:f9:c0:72:1d:e6:f4:10:be:3a:06:95:
         83:8f:ef:b1:ab:56:c8:93:67:4e:4d:61:69:59:e6:77:b1:eb:
         be:ca:0d:76:56:ae:b6:88:60:bc:fa:5a:0c:2e:f8:6f:0a:9d:
         1b:7f:6c:19:c7:e1:aa:67:e7:a1:7f:5d:ed:1b:ea:7b:e6:12:
         c2:63:7b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:50 2025 by rpki-client