Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.mft
File:                     Zp7b-uhlCtvWryB7bqIlZUObSZw.mft (raw, json)
Hash identifier:          eNYpvPGvetOBuO3BX/0lxhpevKIHcf+/eBh3JnhrJBg=
Subject key identifier:   4C:9F:62:39:0F:34:AB:DC:33:EC:85:A7:CC:FE:DB:39:D1:58:CA:81
Authority key identifier: 66:9E:DB:FA:E8:65:0A:DB:D6:AF:20:7B:6E:A2:25:65:43:9B:49:9C
Certificate issuer:       /CN=669edbfae8650adbd6af207b6ea22565439b499c
Certificate serial:       0194BC3C400AFC2560C4082783D81B6E6903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zp7b-uhlCtvWryB7bqIlZUObSZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.mft
Manifest number:          076F
Signing time:             Fri 31 Jan 2025 12:00:52 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:52 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:52 +0000
Files and hashes:         1: Zp7b-uhlCtvWryB7bqIlZUObSZw.crl (hash: Fe0K2sJduOAByNQLr7h/Wksjb6C0cXciX3w9tYcGJmc=)
                          2: v7HN1z-hIgMA1JNadgPizSrJJ8k.roa (hash: D2dlwsBojyjnhUUBcM6gmSASwHH0fMP571DfVs0x/SM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:40:0a:fc:25:60:c4:08:27:83:d8:1b:6e:69:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669edbfae8650adbd6af207b6ea22565439b499c
        Validity
            Not Before: Jan 31 12:00:52 2025 GMT
            Not After : Feb  1 12:00:52 2025 GMT
        Subject: CN=4c9f62390f34abdc33ec85a7ccfedb39d158ca81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:28:8b:b6:8a:53:b6:df:96:e0:d1:f3:5e:
                    cb:5f:09:94:db:c5:b0:4c:1d:1f:be:c8:ee:6c:d3:
                    d6:83:8b:7c:b5:b6:5b:54:9b:a6:e9:6a:f2:57:e8:
                    82:d6:33:f6:27:41:49:65:ca:fc:06:a0:62:68:eb:
                    2f:3a:a3:07:25:27:5d:6c:aa:58:8d:30:57:e1:37:
                    a5:22:a7:65:19:00:47:b8:c6:fd:f8:4d:8f:ea:5b:
                    ee:af:4c:6a:0d:c9:a8:ac:fa:f2:53:77:4c:05:f7:
                    0f:25:ea:07:e9:60:ba:fa:68:9b:1a:83:ec:ac:d0:
                    ea:ad:11:2e:aa:77:38:c3:35:77:2e:0d:c4:23:37:
                    ed:d8:4d:9c:20:a8:08:0a:b2:4e:92:25:d9:23:34:
                    b2:be:f8:75:59:5f:c4:44:56:af:ec:f7:60:98:ee:
                    19:4c:12:91:15:f0:de:c3:d7:b1:97:2e:82:1a:53:
                    a0:53:54:0b:e7:56:4c:45:74:4a:27:b8:cb:20:65:
                    74:56:9b:e6:40:e5:4d:74:a6:0d:5c:2e:50:28:ff:
                    15:3e:68:9a:5d:ca:54:89:ac:94:9b:e0:4f:06:3e:
                    90:1c:f3:31:dd:cb:7c:92:7f:8b:88:df:db:18:86:
                    2d:04:86:9e:23:be:1b:f4:1a:e8:0c:f5:6a:99:d1:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9F:62:39:0F:34:AB:DC:33:EC:85:A7:CC:FE:DB:39:D1:58:CA:81
            X509v3 Authority Key Identifier:
                keyid:66:9E:DB:FA:E8:65:0A:DB:D6:AF:20:7B:6E:A2:25:65:43:9B:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp7b-uhlCtvWryB7bqIlZUObSZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f4:54:e5:d2:8e:d7:ae:82:6f:a8:8d:5f:d2:f8:b9:d9:5d:
         44:f1:60:53:aa:68:cc:34:d4:8a:86:3e:0c:77:7d:39:f5:ad:
         ad:8b:a9:bc:aa:04:b4:61:a7:41:fe:e6:37:d0:82:61:1b:d0:
         e6:14:c1:f0:39:4b:a2:38:0c:05:34:6b:3a:e5:d1:0d:c0:36:
         5f:fc:47:98:7b:2e:96:23:0a:70:90:3f:c2:17:82:3f:45:dc:
         13:b0:8b:8a:bd:fd:ef:6b:7f:5d:38:a0:37:02:0e:c7:9c:80:
         6c:71:68:9e:32:d1:98:61:36:bc:ef:a1:d3:e4:ff:38:b1:65:
         9c:d9:26:b6:91:28:1f:ae:79:d0:42:d0:f0:63:fe:6c:ce:26:
         53:0f:bd:d5:bf:49:e4:e5:52:f9:ab:6a:6c:1a:5e:98:78:3c:
         3b:a0:16:05:71:5f:3c:5a:ab:f7:99:e9:4a:7e:d0:cc:ee:c5:
         d7:68:2a:8b:3c:aa:a1:f1:a3:e6:f9:70:76:64:fa:fc:44:58:
         9a:40:7d:28:a7:ec:45:e4:e5:7e:89:5e:b7:20:02:5d:99:58:
         50:67:95:05:c8:ea:ed:48:2a:f2:ef:2f:05:23:e8:19:e0:3d:
         fc:49:cd:12:74:56:8a:54:23:89:aa:e5:6e:5d:6e:1a:90:80:
         44:c5:ba:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:23 2025 by rpki-client