Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
File:                     GCDxMTkWE4Tq8ToffbYOLGikOVY.mft (raw, json)
Hash identifier:          sHPQbsPGr3YNGWqrCajvcjC/A8NzhZEiRqRk7XmhtwA=
Subject key identifier:   44:2C:D8:3B:1B:3A:75:0A:F4:2B:25:26:CD:20:1B:D1:9C:DD:58:27
Authority key identifier: 18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
Certificate issuer:       /CN=1820f13139161384eaf13a1f7db60e2c68a43956
Certificate serial:       0194BD85294EE350202B207C641B6C97B64F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 18:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:08 +0000
Files and hashes:         1: 5PJP9sz2Qj0R_qvQUI34qPi3A1Y.roa (hash: pR71ZCmNXZbyYfyvw8Yav6FbU05FRtn+pbwLEcOTYyA=)
                          2: GCDxMTkWE4Tq8ToffbYOLGikOVY.crl (hash: KFxupylZkgo3FYddbA5LJplWJ4OAPQ/zORLjzXSIzzU=)
                          3: k-Hv5Avloy-7_yTlO8SDAhMoc5M.roa (hash: iZ+5NIkdY2s7fnzuUEQnr4gkvl0QbM0xPICQPGddznM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:29:4e:e3:50:20:2b:20:7c:64:1b:6c:97:b6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1820f13139161384eaf13a1f7db60e2c68a43956
        Validity
            Not Before: Jan 31 18:00:08 2025 GMT
            Not After : Feb  1 18:00:08 2025 GMT
        Subject: CN=442cd83b1b3a750af42b2526cd201bd19cdd5827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:61:32:55:2b:6b:5f:9a:c2:f6:fd:12:d3:
                    0e:80:a7:10:9a:e9:7e:dd:cf:a3:e5:72:c6:62:37:
                    9f:32:77:cd:f2:8a:7f:52:c5:e4:86:af:6d:84:8d:
                    a0:29:d0:62:ef:b0:25:01:14:a5:e5:1d:76:45:0a:
                    af:6d:fc:9f:6b:bc:a4:21:c4:8d:b5:3c:65:cd:b6:
                    3f:8a:72:84:8c:83:86:39:52:25:ce:a3:8e:f5:7b:
                    14:95:0e:f4:14:b3:57:fa:7a:12:79:e9:06:55:3e:
                    23:d8:d4:c7:c2:19:96:77:47:1f:2d:ef:26:cf:b7:
                    64:95:63:7a:ff:35:cf:5f:0e:d9:ac:c3:c9:14:dc:
                    bb:8f:4a:d9:e2:64:e1:31:7e:9d:87:a7:bc:21:11:
                    c2:b7:69:4d:fb:7b:14:15:37:24:bc:70:7f:7b:9e:
                    1a:db:8d:44:0b:72:49:60:bc:d5:08:56:76:fa:25:
                    3b:d1:2a:18:7e:96:2e:66:8a:9e:f9:46:ff:3b:0e:
                    15:02:d5:64:83:4e:0e:0a:31:07:76:c0:e7:67:ad:
                    89:f0:e6:8e:47:de:db:24:95:a8:fa:31:b8:1c:cd:
                    dd:18:3d:d7:3e:37:28:41:16:3c:f9:cd:f5:60:d8:
                    21:24:39:e7:1b:b3:63:c5:5a:40:a5:17:d2:0b:6e:
                    64:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2C:D8:3B:1B:3A:75:0A:F4:2B:25:26:CD:20:1B:D1:9C:DD:58:27
            X509v3 Authority Key Identifier:
                keyid:18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:2e:85:52:9e:e6:73:7f:08:7e:b6:e1:ac:ae:1e:39:61:b2:
         52:f3:97:f0:f7:bd:4e:62:d8:8e:65:4f:f5:06:22:97:db:97:
         f5:04:00:f2:e1:43:1d:2c:5f:fc:2d:93:39:e5:20:44:3e:0d:
         55:86:94:26:0c:81:bc:11:a5:6d:24:fb:22:7d:ab:cf:94:36:
         b1:d9:9b:f7:02:1d:9b:73:c3:76:79:1a:49:87:e9:f4:e7:d7:
         41:70:d1:2c:87:68:8f:76:aa:30:f8:11:28:3a:6c:25:9b:95:
         05:ac:ea:5f:58:ce:8d:13:7c:fb:04:62:12:b1:d5:d4:04:1e:
         6b:13:69:ff:c2:ed:29:83:16:28:78:9a:fc:03:c2:d1:e0:9a:
         e5:74:31:15:87:99:0d:56:a1:c7:cb:86:87:b4:54:31:16:4b:
         67:55:8c:a9:16:9b:9a:b0:7c:68:71:38:83:8b:7d:40:71:eb:
         8f:42:df:42:e3:7e:98:3a:6e:75:90:a1:07:3d:15:2e:3c:d9:
         ab:83:d1:83:79:42:59:6a:8f:a4:a5:6f:27:b6:32:4d:1c:4a:
         46:59:c4:a8:e4:c0:59:c9:32:0b:b4:b7:fb:12:7e:44:66:0f:
         fe:7f:6d:17:b8:e9:df:8e:10:5e:26:7e:c8:07:96:d6:09:7b:
         c1:f7:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:25:00 2025 by rpki-client