Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
File:                     MdqeNbdw4uaB91bNfSCBKoLhFhE.mft (raw, json)
Hash identifier:          okTGOdcfHdRdgwQNVDYw4jFKw/G2GYBZguRIq6+3xDI=
Subject key identifier:   5D:86:C9:5B:5E:87:FE:9B:A7:37:BD:6B:38:6D:63:10:DD:87:E3:AE
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Certificate issuer:       /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial:       0194BD4E6B7CCD61BE4EF4809A0B3EFAB8D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 17:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:20 +0000
Files and hashes:         1: 5cSVF2_nio6952U-LXaO6EaByvM.roa (hash: W1RYT1KINzg4/aDaZcRwx3Kyxg4anoPRdOWZGqifkgo=)
                          2: MdqeNbdw4uaB91bNfSCBKoLhFhE.crl (hash: VPTxB3/HC/SVOYwz33s+vNBUom0wAxKmjMjdlZkyiv4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:6b:7c:cd:61:be:4e:f4:80:9a:0b:3e:fa:b8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
        Validity
            Not Before: Jan 31 17:00:20 2025 GMT
            Not After : Feb  1 17:00:20 2025 GMT
        Subject: CN=5d86c95b5e87fe9ba737bd6b386d6310dd87e3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:88:1b:13:73:d9:1e:24:e7:d7:56:ac:a5:
                    21:5b:1e:da:39:ec:9d:85:13:76:0f:0d:65:7b:6c:
                    b0:c9:7a:9f:1e:ea:2f:32:6f:26:2b:8b:aa:e3:8f:
                    94:36:a7:5a:e1:49:3c:63:f4:eb:75:01:99:15:8c:
                    4e:8e:76:e4:d3:66:74:ba:4f:ae:20:da:d0:84:81:
                    1a:ff:fb:d2:34:9b:af:ec:96:59:7c:08:3d:ef:7c:
                    81:04:de:23:a5:46:1b:ba:7c:cd:d1:7f:51:88:6d:
                    6f:9f:0e:58:69:33:c4:7a:d5:ea:48:43:24:ad:45:
                    af:86:09:c7:e7:87:37:63:75:bd:f4:85:7e:9d:a7:
                    e2:b0:da:00:a5:d0:21:00:15:64:92:fe:21:7d:a3:
                    23:b3:43:2d:46:77:11:e8:6b:22:27:a2:3e:74:2d:
                    f0:17:81:ee:ab:08:11:de:f0:b3:81:7e:07:c7:6f:
                    1e:a4:c0:e0:ef:f3:2b:1d:c5:e4:94:43:e7:cb:e6:
                    74:de:c0:03:35:10:57:16:36:67:df:92:05:e2:d7:
                    74:5f:e6:a0:2a:c8:cc:5e:3e:70:0f:9c:02:8b:97:
                    5d:ed:ef:ca:c5:7c:05:1b:b1:e3:37:23:9d:d3:0d:
                    6f:84:ba:75:a4:ad:7c:c2:aa:d7:d7:4a:3b:63:e4:
                    84:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:86:C9:5B:5E:87:FE:9B:A7:37:BD:6B:38:6D:63:10:DD:87:E3:AE
            X509v3 Authority Key Identifier:
                keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:31:bb:c8:26:3e:41:39:10:a1:71:b7:89:f6:21:7c:c3:93:
         1d:25:58:58:7f:0c:57:ff:67:9d:cb:9b:56:e2:1a:78:c1:4a:
         92:df:9b:48:94:9a:3d:b3:46:0a:2b:9b:13:8a:6a:7e:02:a0:
         a1:6c:c8:00:d1:98:65:06:26:14:ab:6d:88:f6:dc:f0:d9:65:
         94:45:2a:13:e1:72:07:07:60:23:2a:7c:b2:f0:9b:6a:ce:32:
         af:0b:4c:35:fb:aa:b3:22:13:00:4f:ef:a8:e2:c8:21:a1:b8:
         45:75:4a:dd:d1:74:73:86:40:d2:31:0e:d8:30:32:3b:63:3c:
         72:91:d3:bb:3a:19:9a:e3:9c:4f:d2:0c:2b:9a:14:70:2d:61:
         f2:8e:a7:1e:8c:44:82:1e:50:f2:2d:72:7d:35:c0:01:16:33:
         ef:f0:38:6f:59:19:a4:c4:9c:2f:00:a9:c2:f0:c7:75:0f:e6:
         0f:de:e6:96:e4:41:e6:90:9b:b0:b2:4b:67:64:e3:41:a5:fc:
         a7:29:ed:6b:19:8f:2e:13:4a:0d:b0:88:e5:8f:de:dc:f8:9c:
         7d:13:62:d3:b9:df:52:27:c9:96:1b:51:59:e9:7a:21:e2:8e:
         59:d4:14:bc:44:9b:81:1d:bf:9b:46:8d:b9:f2:ef:b0:05:c2:
         47:4f:da:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:06 2025 by rpki-client