Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
File:                     ATNUQlFNUkm1FDz9-CEha7XFKUA.mft (raw, json)
Hash identifier:          MYrfYO2crJbSqDWwSqAKK3MEUJhYlU2jZtOE63eqkY4=
Subject key identifier:   D4:00:B9:33:8F:3D:53:52:76:7D:20:93:0D:B9:30:A3:72:7A:12:E6
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Certificate issuer:       /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial:       0194BBCE6614EC43BEC861BC36B85410FC09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
Manifest number:          1186
Signing time:             Fri 31 Jan 2025 10:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:53 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:53 +0000
Files and hashes:         1: ATNUQlFNUkm1FDz9-CEha7XFKUA.crl (hash: MPwPa3n1pFZ7azjr9lPGm1SWnO50E1LbfhD7HwDmtmI=)
                          2: Yp_lUqP28vEyFCPRb80UtGDXNsg.roa (hash: ywVUWmL4GSGoY6WsMRyetGJGnvc6akPYgfQXjeu4wCo=)
                          3: jA79aGVqPI-PvZSOlUeJ0j64c1Q.roa (hash: cpbrUzoeXFWleCog+F05RG8Xxbfmz0h5Ia9JXBRNANY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:66:14:ec:43:be:c8:61:bc:36:b8:54:10:fc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
        Validity
            Not Before: Jan 31 10:00:53 2025 GMT
            Not After : Feb  1 10:00:53 2025 GMT
        Subject: CN=d400b9338f3d5352767d20930db930a3727a12e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f8:d0:d6:c0:ec:77:98:1c:04:a5:5b:88:b9:
                    45:e7:f7:b0:12:9d:e6:8f:a5:43:b9:d6:2a:b9:88:
                    98:ef:c4:03:f4:e2:6e:16:49:1f:d6:3a:19:ac:a9:
                    3d:b9:16:d5:65:af:0c:38:81:0c:50:ec:22:9c:2f:
                    e6:0e:b5:0a:b9:59:60:b7:86:39:14:e4:bc:6b:6b:
                    ff:71:52:c8:55:53:1e:47:08:1b:9d:08:6d:6f:11:
                    19:83:07:fa:d0:56:fb:28:e8:8f:fe:0c:16:3a:b9:
                    5a:85:48:10:31:64:e5:cd:91:04:9b:5a:d8:9e:a1:
                    97:bf:da:f7:d8:1b:30:2a:c1:01:62:a4:12:f9:41:
                    f1:cc:b5:43:56:5d:44:17:d1:54:bf:2a:f9:39:5c:
                    e0:c4:cd:0a:f5:99:08:84:b1:57:b6:1c:8e:91:fe:
                    1d:16:1a:9e:84:f2:c1:a8:db:0a:77:fd:1d:3b:a3:
                    9b:c6:b2:74:f8:a5:f4:27:57:4c:2f:11:26:f8:1c:
                    eb:7a:64:53:7f:c5:3c:1d:89:ed:16:f6:27:fe:5c:
                    c4:90:cd:fb:e7:d6:51:00:10:ca:6b:b1:5d:35:45:
                    e1:66:a8:eb:03:51:4b:22:76:09:c0:55:ff:ca:cc:
                    0b:82:1a:ed:56:f7:f3:16:06:87:e6:2a:c7:e0:09:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:00:B9:33:8F:3D:53:52:76:7D:20:93:0D:B9:30:A3:72:7A:12:E6
            X509v3 Authority Key Identifier:
                keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6b:eb:81:88:8e:6b:20:5e:70:cd:91:8a:34:c4:a2:05:7b:
         2f:b8:f5:f7:cf:38:8a:05:fc:49:09:ed:04:fc:5d:9d:5b:41:
         49:dc:b7:3b:d3:d2:28:91:6a:b1:74:9b:17:95:4f:49:5a:fc:
         95:25:26:db:0e:1a:d9:16:62:99:72:69:8f:26:2f:4e:33:4a:
         3e:e5:2f:d3:2f:ec:f0:3a:81:82:6a:8c:29:cd:cf:7c:bf:31:
         0b:fa:89:38:0d:17:d4:07:7e:86:fa:47:3a:ec:cd:49:36:ab:
         e1:ea:75:f3:2f:8e:08:b8:81:95:f7:18:75:d9:ff:92:c0:d3:
         ae:15:38:76:d2:1f:2b:c6:20:e6:3e:82:55:2d:a7:5f:df:73:
         1c:8f:dc:68:56:43:96:ba:b5:e2:ab:9e:42:2e:29:f2:3f:b4:
         4d:ff:4d:5e:30:40:f4:20:d3:54:bd:bc:6d:48:c2:f3:e1:e4:
         95:53:b6:55:ed:fe:81:85:6e:31:2a:c4:8c:8f:a1:19:66:9b:
         2c:a8:c4:f2:b2:ad:6b:cf:9b:02:3e:39:8d:e9:b6:bf:ea:1f:
         4a:b7:e3:37:16:30:7d:ba:c8:b7:f3:cf:c0:a0:c2:91:4e:3b:
         a6:3c:97:3f:06:e5:07:7b:fd:68:5f:ba:8f:e9:56:8e:96:59:
         f6:b0:99:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:40 2025 by rpki-client