Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
File:                     J5O96Uauk208rME2pfMjnt8kMfQ.mft (raw, json)
Hash identifier:          C0XXcO+JgMUWCefUbZ1IlZVA1wy0OxEPEve8XbJT+o8=
Subject key identifier:   DB:34:B2:FD:AB:2A:AA:A2:10:5E:77:EF:F5:A6:6C:F7:25:44:79:C7
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Certificate issuer:       /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial:       0194BCA98B8E1B5255FF5DD920B6C0272E30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
Manifest number:          0EE0
Signing time:             Fri 31 Jan 2025 14:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:15 +0000
Files and hashes:         1: 7E5LSfCOnSbjv-AVC1nxJJ66F4U.roa (hash: /aIHlfM99fuCwlGxN5/ehUDLpA24+vyDEzZMgylijKg=)
                          2: 9UkCw4b12dxaFQuWu2BWrAq18cs.roa (hash: uCtVg42ZHDXRQtsH4hBM45QWmlQhdogsHZ3bdPv3hOo=)
                          3: J5O96Uauk208rME2pfMjnt8kMfQ.crl (hash: 3pP/3SA0XZnKAHcbqQrkokvtNj26vLYMtQUTnKNLc/8=)
                          4: Lzxta0jd7ucvehlsvKMLCGGj4SU.roa (hash: r2f4C1ycLWis+wP1tatuwRPmqShhZKPPE1FJIgRZw1w=)
                          5: ONAb3aa9aLqBAH1nZ2X-0Z8C9Vk.roa (hash: toxq5hd68ktpiB99iFz4dER/H0vTabk/sYSInN7166g=)
                          6: P_96blpHfAQM3voIBaqDmBhs-8E.roa (hash: R9hyFEujTVmaNvCmjtuWK6MWoWwhFPOAcCmIzjoPwgM=)
                          7: ZtPUyk_TNktoLC4Kb0JqAQbyro0.roa (hash: AOW26RlAnZ0u9tHghS8csH7uDfnP5ryVT/Rp+gEYBlU=)
                          8: ulUXrUDPWH1jBF3XUvGFq6u9UBA.roa (hash: JO8Wuf/EekqDvWZVFwjNa4p80lEXLhg9dIYBQ3yRrjk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:8b:8e:1b:52:55:ff:5d:d9:20:b6:c0:27:2e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
        Validity
            Not Before: Jan 31 14:00:15 2025 GMT
            Not After : Feb  1 14:00:15 2025 GMT
        Subject: CN=db34b2fdab2aaaa2105e77eff5a66cf7254479c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:68:49:94:f3:e2:9b:b3:10:0e:46:ea:39:af:
                    08:c7:f6:cc:15:3c:f4:57:fe:7f:3b:bb:e2:56:6e:
                    ed:be:93:f0:b2:d2:65:7e:d2:53:31:86:ce:d3:df:
                    d0:0c:16:80:2f:52:19:2a:e0:dc:a1:24:aa:5d:93:
                    c1:08:a6:aa:f5:17:98:28:63:c9:b5:eb:bf:ab:b5:
                    9b:d4:8e:6b:83:3d:72:4c:7a:c9:54:e3:af:59:ce:
                    62:1e:b3:b8:75:01:5a:39:14:f3:3a:e8:4d:3d:6f:
                    19:3c:a1:4c:35:ca:ec:35:50:8a:24:61:4c:57:b9:
                    4d:70:90:72:bc:6f:a5:4c:be:e1:33:e9:15:7b:0b:
                    4c:bb:79:03:fd:04:4c:fc:dd:52:ee:15:ea:5b:3e:
                    d9:5d:f4:42:9b:ae:96:b5:4a:24:2c:b1:9e:12:b7:
                    24:33:52:38:47:3f:3d:99:3b:e8:52:32:c4:2a:f3:
                    76:0b:c2:17:bd:80:e3:53:f3:15:8c:7b:4c:f2:ba:
                    cc:b6:69:7d:10:21:1c:b7:83:6e:4d:49:39:20:ed:
                    ba:dd:1f:fe:8e:f1:20:25:01:db:fd:eb:a6:c1:60:
                    34:f3:58:2f:f3:5c:30:c1:e2:dc:7b:db:2d:69:b3:
                    f0:a5:97:e5:81:6b:9e:30:18:79:34:73:1e:79:7b:
                    0a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:34:B2:FD:AB:2A:AA:A2:10:5E:77:EF:F5:A6:6C:F7:25:44:79:C7
            X509v3 Authority Key Identifier:
                keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:18:cb:e7:5b:e4:42:7c:0e:b8:c7:4a:93:a1:e7:9c:16:fa:
         b5:ba:ec:d3:a2:1c:19:cb:93:6b:34:0e:84:ac:fe:09:26:36:
         1e:89:4d:9d:7a:bd:62:e3:0c:0d:c4:a6:83:da:54:66:0e:3d:
         49:39:25:84:7b:ec:44:ba:ae:9f:54:03:09:3b:4b:9b:a0:e9:
         ae:77:d0:83:3a:43:e3:99:fb:07:75:e1:0d:2d:74:79:ab:af:
         00:95:9e:e6:39:b2:92:c7:34:66:ea:ad:45:8f:14:19:0b:55:
         5e:3c:1e:27:aa:3b:16:b4:8b:c1:93:96:33:21:f7:52:55:1e:
         95:0c:4d:12:40:b8:7c:f6:dd:7e:a7:60:33:b2:6e:81:66:71:
         4d:52:1a:3a:6f:6d:3c:d2:88:76:ca:ba:48:db:ec:15:af:fe:
         94:9e:7e:77:57:ea:a8:ef:91:ca:86:69:55:7b:a6:a7:51:45:
         ce:bc:d5:3f:f0:dc:56:0b:1a:dd:67:97:f4:14:ab:28:97:0d:
         16:19:7a:17:16:0b:91:16:91:b9:c5:3c:98:3b:5c:2d:10:17:
         65:f1:90:bf:51:68:d6:5f:cf:00:b0:5f:b3:25:93:11:23:7a:
         52:48:a8:5d:24:d7:df:7c:3c:a2:1c:84:79:0d:aa:17:8a:b1:
         24:5b:dc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:28 2025 by rpki-client