Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
File:                     Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft (raw, json)
Hash identifier:          Ad5c4dbTblDhifTETPPtfzNSnYwyaDBtG/3VqVcNZCE=
Subject key identifier:   27:C0:9F:4E:A1:24:73:B2:ED:3D:64:84:AD:1F:5B:8A:E1:1F:77:F4
Authority key identifier: 42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
Certificate issuer:       /CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Certificate serial:       0194BD853F7FEF56254D570B07D1034D6DDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
Manifest number:          0E48
Signing time:             Fri 31 Jan 2025 18:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:13 +0000
Files and hashes:         1: Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl (hash: X9wNmDiLJR0exTX1/q/oJ/cnr/48E6IviUoYpX+rTcg=)
                          2: pGi5mprHxSOkx1tGIc-vLUmzaew.roa (hash: dSlWsgh48wgZDLLaxYVN9gYqMrT57evwFejA3CWUycE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:3f:7f:ef:56:25:4d:57:0b:07:d1:03:4d:6d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
        Validity
            Not Before: Jan 31 18:00:13 2025 GMT
            Not After : Feb  1 18:00:13 2025 GMT
        Subject: CN=27c09f4ea12473b2ed3d6484ad1f5b8ae11f77f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:14:cf:c2:f6:00:87:63:0f:a5:a1:8e:67:a0:
                    38:42:5e:35:55:16:cc:82:6a:d4:c0:ff:23:4b:60:
                    16:a7:bf:84:70:8e:19:93:5a:a7:1d:2d:07:f8:c0:
                    18:b1:98:b4:7b:52:82:8d:0a:a4:10:82:2f:c6:37:
                    42:5f:5a:0c:f5:bb:61:8c:c6:c9:bc:bb:6e:43:61:
                    24:b0:a3:29:2e:00:fd:d7:40:ef:55:59:66:59:b0:
                    ca:9d:04:32:da:d4:24:0d:78:a5:01:4f:f6:58:85:
                    42:d6:b0:c5:f4:17:ac:ea:d9:16:d8:63:f2:71:70:
                    3d:a2:c1:25:2f:35:1a:db:cc:19:c6:bc:46:2b:70:
                    5c:da:a7:3e:4b:a1:9a:9b:db:a8:2b:2e:37:bd:6e:
                    c7:58:c6:9b:94:7b:82:2b:ca:6a:f0:9d:5b:e6:fa:
                    d0:be:9c:de:50:72:7a:eb:26:c7:af:65:a2:90:1a:
                    44:f2:3f:49:3c:a0:45:d2:ea:4c:9b:c5:83:4d:73:
                    bb:13:34:47:1a:bb:c0:a5:b8:75:91:50:b8:1f:ca:
                    bb:fe:30:fe:e9:bf:49:a7:07:77:16:9c:5c:6f:5e:
                    1a:15:95:b0:9d:fc:b4:d2:c7:3a:55:17:a0:4d:31:
                    d9:6c:27:8a:69:6a:d8:36:46:98:aa:2a:87:bc:1d:
                    73:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C0:9F:4E:A1:24:73:B2:ED:3D:64:84:AD:1F:5B:8A:E1:1F:77:F4
            X509v3 Authority Key Identifier:
                keyid:42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f1:bb:36:ca:65:53:96:4a:10:16:35:81:eb:2e:38:e9:e6:
         9c:90:7c:2b:cb:e7:ca:be:f1:50:cd:15:ce:bb:fe:62:57:01:
         52:c1:fd:93:63:ad:d3:12:c3:cb:bd:29:60:a0:85:fc:a1:ca:
         79:12:7b:fa:7e:f4:67:b2:00:f1:b4:cf:35:9f:00:94:d5:26:
         b4:76:37:70:e0:26:5f:d8:27:59:eb:eb:b6:77:50:f7:88:93:
         ae:87:b7:11:a1:4f:3e:35:97:aa:83:cd:4d:88:e7:93:79:2b:
         48:b0:33:27:9c:bf:4e:74:13:a6:f7:41:da:4e:d5:ac:59:d0:
         ff:a4:4b:f6:1a:0f:a9:35:08:31:bd:ed:ec:8b:8b:50:2e:43:
         3c:08:04:7c:f2:4e:6c:7c:3a:ae:9c:a6:1e:c5:67:f8:c8:4f:
         ef:b0:a7:9c:08:c6:b4:1f:71:60:34:1d:20:0a:dd:51:9a:bd:
         f4:2d:31:13:84:68:ea:17:d4:99:e2:43:99:1a:32:b6:c3:4f:
         6c:e6:24:4f:63:b4:35:d5:e8:26:b2:95:d8:30:72:22:ec:0d:
         46:11:df:a9:42:27:7e:d6:a3:26:d9:39:d9:b8:7c:13:a5:5b:
         e8:fe:ee:03:e7:d8:9a:37:0f:1a:7d:37:37:b0:cd:c4:11:2c:
         6a:73:35:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:37 2025 by rpki-client