Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
File:                     pvE9aAzkgFkb-LN93KD66zu-dE4.mft (raw, json)
Hash identifier:          AkK9IhfVeV9yYcIZusC4mOO30gdVFPLIErxz1ZqpDcA=
Subject key identifier:   66:FE:BD:7F:BE:7C:C4:D4:3A:C9:28:4D:6D:40:9C:12:EF:99:16:DB
Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
Certificate issuer:       /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Certificate serial:       0194BC3BCB51E59D2534D961241673B94F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 12:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:22 +0000
Files and hashes:         1: W8EH6cHJ1jqNd1-fbWQ4302NcPE.roa (hash: 0aNZYoUKp18HEp9H4MaKrqtXZZf4gT5hLWGwRtSFdxU=)
                          2: pvE9aAzkgFkb-LN93KD66zu-dE4.crl (hash: 8VfXioZvPpGzUhM2KBAChxt61usx2FpTk1CO5IZjzdQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:cb:51:e5:9d:25:34:d9:61:24:16:73:b9:4f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
        Validity
            Not Before: Jan 31 12:00:22 2025 GMT
            Not After : Feb  1 12:00:22 2025 GMT
        Subject: CN=66febd7fbe7cc4d43ac9284d6d409c12ef9916db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:b2:40:26:e7:5b:8d:c4:f6:46:26:9d:77:
                    e7:e3:66:98:62:b7:54:ca:63:51:46:cf:93:4b:76:
                    01:35:eb:09:bd:4e:49:5e:b5:d3:58:42:83:fa:15:
                    43:ad:06:0a:44:c2:a6:ba:9d:57:c0:ee:9b:38:7e:
                    4a:54:27:39:f8:03:76:cf:24:da:17:bd:59:18:da:
                    1d:66:04:f1:bb:a6:c0:01:e1:8e:70:0a:23:9f:af:
                    40:7b:3b:d5:23:ef:aa:d1:02:f5:73:dd:38:b1:86:
                    e5:c5:85:6f:e8:9b:df:24:10:95:26:b9:35:70:53:
                    b0:12:e2:45:89:bc:ff:a3:2a:be:78:74:57:7b:8a:
                    23:86:29:ff:65:b6:19:7e:cf:d8:a2:b1:dc:cb:df:
                    df:8a:bd:fa:22:28:5d:84:1d:a6:98:23:e4:4a:b2:
                    4f:e8:45:0a:7b:69:3a:1a:ef:ae:65:8c:69:75:2b:
                    90:b1:bb:c9:a3:7b:de:b2:e7:99:7c:ae:34:1d:33:
                    de:bb:08:f1:48:a3:4a:f6:1e:2e:37:fb:27:81:26:
                    21:39:64:e3:cd:d5:95:80:18:13:07:db:34:15:1c:
                    ab:7d:f9:93:1f:a9:80:12:f3:9f:9c:48:6f:17:d5:
                    fd:38:95:f2:26:6c:39:c8:41:ba:bc:80:19:e2:4b:
                    66:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FE:BD:7F:BE:7C:C4:D4:3A:C9:28:4D:6D:40:9C:12:EF:99:16:DB
            X509v3 Authority Key Identifier:
                keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:80:ee:7a:c8:8e:99:74:68:6c:52:c3:5c:42:59:18:a1:d8:
         f0:71:6f:70:f8:64:db:79:c1:5d:e0:b1:bf:58:3d:aa:50:13:
         1d:98:2f:53:9d:6d:7e:d5:19:e4:c0:41:23:fb:19:b8:ab:63:
         84:f8:25:77:fc:81:0f:b7:6c:31:88:62:df:66:a2:c5:74:3d:
         38:35:b2:79:b2:2d:0b:c9:31:9d:38:cb:0d:d5:b1:e1:a4:b8:
         ac:5d:dd:16:9f:6f:8d:1e:56:4b:1a:a0:33:bd:38:39:1e:01:
         59:ec:f9:da:ad:31:9f:69:7c:c5:81:c7:be:39:e2:da:45:ff:
         a7:22:56:56:38:8c:07:c5:dc:51:0a:59:c3:e3:c8:e4:cf:c0:
         69:94:3d:96:de:7a:1c:89:0f:49:a6:39:94:7a:21:d0:d6:60:
         7d:39:61:38:d6:94:6e:91:81:27:1c:06:b2:6f:f2:0f:13:4e:
         ca:fc:10:95:06:37:b8:f5:ec:17:76:a1:2a:1f:4e:66:1b:41:
         b6:4a:4e:eb:5b:ee:3b:ca:6e:ee:a6:02:de:18:ec:d6:11:eb:
         a2:53:d5:a8:68:a4:01:7d:b5:98:e7:c1:29:3c:fe:ce:12:71:
         88:4c:5e:3b:f3:bd:ba:86:48:33:97:e7:e0:6b:c5:46:93:98:
         c0:20:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:53 2025 by rpki-client