Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
File:                     F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json)
Hash identifier:          a4M+NJ+1ttYRXTqiL08tBt2a7LYwAxoXzMqRFpCxd6w=
Subject key identifier:   E8:78:F3:36:F3:9D:38:AF:3F:D4:96:8E:9B:1C:79:D9:2C:75:D2:78
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Certificate issuer:       /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial:       0194BBCECA567DC66A6A2F40822ED130DCD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
Manifest number:          0D95
Signing time:             Fri 31 Jan 2025 10:01:19 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:19 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:19 +0000
Files and hashes:         1: 5bIFsErhPSlmM37nhrp-eU9l5Y4.roa (hash: W0LEviwE6sQ3/HTSMFGMNopeuLD+ieboT1WS/XkZF1E=)
                          2: 7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa (hash: wbrR267hltnIltfZnIqap+bK1X+30aRn2vIaMwlZYl0=)
                          3: 8B9wa-TamsFPX-b9Sjwq2JWmpu0.roa (hash: mYWGy6vPQqUonSl/lzSA7r99GqgJfzuS4OhPL383spw=)
                          4: A39EZrrDrXLk3J8BZLUN7wQ6C50.roa (hash: Ark/uTgt37FRO8Utnxml8XHzzu9fwVEDGjmOjqbxT4E=)
                          5: Chb74JL8JJmMbGzdCWsV1I9XTHM.roa (hash: uqlIkNtybKQGK6oYFgs8Gcl/3LifaWUOWXgUOaIWjq4=)
                          6: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: AXMvegbOkDelNvTW9Yr94R0ukr88rr+14MuI2lB/tPc=)
                          7: H-wI8WViyvhQ58migChLNEMEYb4.roa (hash: 55jO9FPLyHdmA0ZhDHMAOcwTS+Ma+ZmiF+DkbWOEkzk=)
                          8: JY2Qbmj2mgX3KDG39J6yIxJr0tc.roa (hash: 1KGhpD1HwCPZtP8VkVF45re3cg2JKrviwS59Vb+WzQ4=)
                          9: N2B1iU0YSzB2x_40oFW-BcBZpSE.roa (hash: 3Bt9biLCnw654O83mAV6T9k7ZnWMTrPShbMbJlnWNIs=)
                          10: QnOCtXAVmX13ibu9GQu1nSs9w-k.roa (hash: 2ja4/uzYhdT+ao7xdjqgdrp8HFOJkvXcfpdXCeeEDmY=)
                          11: YRRXPoENpmdtt6jCnuMjG8rrikY.roa (hash: DbDzgUZdi2jed/+3x8UofBswoXpqS+WPTmkA9M7K92c=)
                          12: bA2-1nnLbrWRGqFV2afM2bzGsYs.roa (hash: FCcUA1F21qdmoEMQzczm0l/NGWKzFMZ3eCmf0F/+Cd0=)
                          13: blSvVBOfQQX8HPgRw9s7J2WaT7U.roa (hash: vl3RTDfDlA0AmENRkgmM8JLJlNA1WYfzNQBSFmihkQU=)
                          14: xZC_xBRdyqTElb8rKCSQViw1QQk.roa (hash: Am0BFTFCqKQ+R9vTI46rJ2D1DFX8Hh5BkVmp7WNJvlQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:ca:56:7d:c6:6a:6a:2f:40:82:2e:d1:30:dc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
        Validity
            Not Before: Jan 31 10:01:19 2025 GMT
            Not After : Feb  1 10:01:19 2025 GMT
        Subject: CN=e878f336f39d38af3fd4968e9b1c79d92c75d278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:20:28:c3:36:4f:a3:db:af:55:99:c4:3b:
                    ad:a4:bf:08:d8:11:6a:1d:59:da:d3:fe:8c:f4:20:
                    a2:6f:80:6b:c6:07:d2:77:44:26:4b:b9:33:d1:56:
                    47:b7:ab:89:39:d3:f3:98:3d:dc:02:5e:56:76:ad:
                    0c:9a:01:00:d0:b0:46:92:f3:72:48:a7:e8:7f:16:
                    dc:a0:66:e8:86:bb:5b:69:f8:44:24:cb:c4:04:77:
                    1d:99:18:ba:98:ef:7a:a6:73:e9:ac:a5:47:ec:cc:
                    52:1b:0c:11:13:bf:52:61:e1:ad:6e:c4:da:b1:a8:
                    ff:15:b3:d0:45:a9:8b:4a:91:a2:f6:5f:8a:19:ed:
                    78:54:d9:98:44:6b:06:52:94:5e:1c:5e:d3:2c:16:
                    18:84:57:83:62:f9:33:cb:e7:36:4d:b3:4c:1a:fd:
                    e4:7c:22:7c:f7:49:b0:52:71:10:a3:6b:95:88:8b:
                    36:16:01:a9:b9:9e:62:c5:b7:bf:12:be:b6:a0:f5:
                    56:85:1f:55:a0:46:1a:bc:b6:44:9c:39:94:04:52:
                    d8:2a:5b:9d:e5:74:2b:7d:65:9c:d6:69:3c:a4:0b:
                    35:c6:cf:4a:5b:ad:24:79:45:9a:47:4b:e7:0e:39:
                    5d:61:96:5f:5c:9c:d7:28:6a:54:7c:9a:66:09:af:
                    00:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:78:F3:36:F3:9D:38:AF:3F:D4:96:8E:9B:1C:79:D9:2C:75:D2:78
            X509v3 Authority Key Identifier:
                keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7a:fb:8f:76:da:ae:b2:20:b0:6e:73:17:ac:b7:36:4c:02:
         08:cc:de:d9:c5:cd:51:05:33:c3:79:e9:fc:e0:b3:54:bd:26:
         4e:cb:04:7d:80:63:fa:d2:f5:45:0d:81:54:59:1e:10:64:4e:
         73:b7:fc:da:7f:5a:44:e7:9a:20:93:ba:42:e1:85:c2:29:9b:
         91:3e:48:9e:81:3e:a9:ae:3d:ce:a3:bb:25:3d:c0:07:c5:ca:
         94:a1:58:f1:3a:81:cc:9d:0e:cb:a5:a5:28:42:7c:12:46:1d:
         4f:ab:94:4d:5d:fe:4c:43:8a:88:ee:d1:e5:a9:8d:4c:3c:1b:
         b5:af:1a:e0:a6:d2:e9:b1:ff:1e:a8:e1:15:15:21:15:46:78:
         42:c5:82:f6:bb:b0:8b:0d:30:ec:09:86:47:0a:c2:c0:05:35:
         4d:8e:9f:3c:57:e2:f5:84:b0:26:f2:90:c6:5d:8f:93:10:30:
         d8:ee:d7:4c:2a:7f:3a:75:48:66:66:dd:bb:7f:3e:a1:81:16:
         89:a8:14:58:d8:72:9d:4c:ba:86:aa:7e:62:fc:98:3d:37:2e:
         cf:9d:47:fb:d2:82:f2:5a:a9:87:ea:80:b9:f9:3b:5d:41:b2:
         70:13:53:ab:56:ff:b4:9d:86:3c:b5:12:d6:59:39:11:22:10:
         bc:19:79:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:52:00 2025 by rpki-client