Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
File:                     2yXQP8GPL0LNpQOGneGU_YzCGqk.mft (raw, json)
Hash identifier:          99FTz+JHOFa70xqh+Xi7leO/mfHedUeq9uSYI3Owvlg=
Subject key identifier:   CC:0C:43:E7:11:69:8C:34:27:6D:9A:E2:CA:61:FA:2C:ED:F3:7D:56
Authority key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Certificate issuer:       /CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Certificate serial:       0194BCAA089EF4BBD4ACC01775758A500712
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 14:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:47 +0000
Files and hashes:         1: 2yXQP8GPL0LNpQOGneGU_YzCGqk.crl (hash: 5Ex1aJp3OtfxKQWci34uYCMd8wPT28aA5wjwsxexTOg=)
                          2: p23wwYN_BcdLiJY0vIjxBTg9FfA.roa (hash: BpBe3bEGzQ2vJJNcd5ELYkyQlNL9ofFCJ83jKn6lQFw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:08:9e:f4:bb:d4:ac:c0:17:75:75:8a:50:07:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
        Validity
            Not Before: Jan 31 14:00:47 2025 GMT
            Not After : Feb  1 14:00:47 2025 GMT
        Subject: CN=cc0c43e711698c34276d9ae2ca61fa2cedf37d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e4:41:f6:d5:d9:dc:2f:c1:5d:a8:f7:da:d6:
                    68:79:30:85:d0:cc:a9:76:55:f2:0f:1b:04:40:ce:
                    f0:60:75:ee:6f:fd:e6:97:6b:a9:e5:c8:2c:4c:6d:
                    e6:14:8b:17:da:f9:af:2e:96:ab:72:70:ba:1b:70:
                    a6:7b:ec:07:87:63:d5:5e:62:64:0c:37:71:3f:6c:
                    6a:cf:d8:93:31:1e:2c:3e:43:0e:a8:3d:6a:c3:1e:
                    23:c3:76:e2:c7:15:5c:26:bb:18:55:8b:51:13:cc:
                    5c:d0:4e:fe:88:48:22:6e:51:f7:7a:30:5f:ab:c8:
                    38:bf:41:72:44:1d:18:be:1c:6a:1c:1b:81:11:9e:
                    52:39:ba:8e:4a:36:be:fd:c2:bb:9b:87:24:43:bc:
                    47:b8:aa:a2:05:47:e3:3f:ab:f1:bc:c0:95:8d:67:
                    d5:fb:e1:1c:b7:6a:98:01:3a:33:be:84:c6:78:52:
                    d6:cb:6a:3e:23:d6:1c:50:0e:c7:a9:25:5c:8a:df:
                    2f:76:d5:00:0b:d1:bf:1c:d7:01:2a:29:26:17:2f:
                    69:1d:3b:0f:5e:e2:44:ef:4a:d6:ac:49:57:79:2a:
                    42:54:4f:ec:b2:70:37:2c:39:2c:4e:1f:ad:78:4c:
                    c2:4a:e0:b4:b5:2b:a2:c7:e3:6d:bc:e3:98:41:51:
                    ad:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0C:43:E7:11:69:8C:34:27:6D:9A:E2:CA:61:FA:2C:ED:F3:7D:56
            X509v3 Authority Key Identifier:
                keyid:DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:50:3c:4d:5e:cd:62:75:61:42:77:76:68:fb:1e:53:b7:d4:
         3f:b9:ff:ff:50:54:5d:16:37:bc:9d:4f:fa:9b:54:34:b9:5e:
         82:17:8a:34:a9:20:1c:56:12:2c:93:ca:fe:19:42:d4:41:38:
         37:f3:58:7c:77:58:07:72:18:6d:98:4d:62:db:43:4f:9e:6b:
         51:32:0d:e4:4b:5f:52:65:7f:6e:9e:07:2f:62:58:ee:91:3a:
         02:87:a0:82:32:8c:47:dc:7e:e3:70:f0:fb:1f:dc:39:8d:61:
         4a:5b:ce:65:01:a9:ab:fd:03:59:89:d9:fc:88:1f:ed:9f:03:
         60:4f:8a:9d:66:7b:94:34:4c:85:ba:2d:32:68:14:f5:20:e4:
         63:dd:95:8f:7c:94:d1:91:ba:2e:0d:ed:0e:5f:cc:77:48:7e:
         d4:01:c0:84:af:04:13:ea:0a:bb:d6:8e:42:be:d7:84:b7:13:
         0a:e6:42:01:83:02:b5:0f:60:4c:66:b6:7a:44:49:a1:f9:9e:
         fd:e4:3d:ea:b1:5d:cb:49:b6:6a:1c:1c:6a:c1:62:1d:47:ac:
         19:6d:31:3e:ae:72:9b:f2:f7:f3:5e:74:3d:87:6d:58:a9:35:
         85:54:3a:85:9f:7d:bb:75:69:b8:54:5c:c4:43:80:2e:b8:e9:
         4f:ef:50:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:36 2025 by rpki-client