Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
File:                     aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json)
Hash identifier:          lbmLKu1Pq/SU9o37APFqNcsE/tqiZ4enj+pkjimJ3KU=
Subject key identifier:   E0:3B:EF:05:83:9F:DB:B8:8A:5F:7C:BA:AD:C0:EA:27:4C:7F:65:76
Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44
Certificate issuer:       /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
Certificate serial:       0194BD17A490EF9A11C224A7C0A546E653E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft
Manifest number:          0151
Signing time:             Fri 31 Jan 2025 16:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:30 +0000
Files and hashes:         1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: EfcG9ZF3YWG6HoTZrNxCvwn3fvdLojJl9UklgwRsicY=)
                          2: hYYmw5fVDAR1P_MMb_9KXEfTATs.roa (hash: 094S5zaCMwQU0QTJCaSJoP16OB3rfJsQF3J8+250u5M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:a4:90:ef:9a:11:c2:24:a7:c0:a5:46:e6:53:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44
        Validity
            Not Before: Jan 31 16:00:30 2025 GMT
            Not After : Feb  1 16:00:30 2025 GMT
        Subject: CN=e03bef05839fdbb88a5f7cbaadc0ea274c7f6576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:aa:05:94:60:48:6b:10:df:6b:c3:eb:b8:9b:
                    5a:38:78:22:6d:4e:9d:53:11:3e:15:5e:d8:ce:25:
                    c2:89:54:c3:5b:f1:9e:e5:b9:de:d8:6e:ad:e3:bf:
                    8a:d6:ae:06:7b:3b:5d:fd:f8:c7:a1:11:b3:df:18:
                    78:97:59:a8:2b:ab:4f:34:76:83:cd:ca:ff:ae:dc:
                    b6:95:8a:de:00:46:5d:5b:a6:26:97:aa:86:74:a3:
                    d5:2e:07:e6:bc:fb:94:3e:f0:60:d8:3b:3c:c3:6f:
                    4a:e2:27:5f:73:93:6a:e3:5d:3d:26:56:aa:05:d1:
                    b0:7e:b6:07:a6:a7:93:2e:10:91:88:35:54:a0:bd:
                    b6:ce:d2:e2:6d:5a:32:40:e2:c8:e9:01:01:d2:48:
                    a2:f2:23:fc:10:14:f6:a8:4f:3a:12:e6:bf:49:af:
                    84:43:a7:f2:75:8f:74:5b:8e:0d:6a:3e:46:e2:e3:
                    4a:b0:57:2e:2c:e2:f5:a0:cd:20:00:e8:89:d8:12:
                    36:d1:0e:93:84:24:b1:48:e2:ae:0f:97:eb:98:79:
                    b9:de:ee:0d:9d:8f:67:5b:ca:4d:d5:c4:6e:93:20:
                    a5:96:fc:73:b8:0a:f2:49:8b:70:3a:0f:77:70:c6:
                    3c:15:32:2f:64:58:ed:f5:ac:52:2b:8d:b4:ab:20:
                    1e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3B:EF:05:83:9F:DB:B8:8A:5F:7C:BA:AD:C0:EA:27:4C:7F:65:76
            X509v3 Authority Key Identifier:
                keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:52:e2:5a:27:9b:17:18:94:7a:c0:06:82:df:f6:e6:e5:d6:
         c9:34:4b:3a:94:cf:65:8c:7a:cc:1d:88:3f:57:f0:cd:de:93:
         6f:37:9a:9b:18:fe:d1:ac:fc:a3:a4:e2:55:f5:9b:0c:d0:3f:
         6a:14:5a:e0:c6:29:24:90:24:4c:e8:b0:32:f2:46:0a:a1:ca:
         b5:50:d7:6b:36:7d:2a:fe:d6:e1:6d:c4:2a:32:57:ee:a8:b2:
         d4:89:85:29:c5:b8:9f:74:6b:8c:4e:f4:12:5d:2c:78:99:36:
         04:ce:a7:ba:bc:97:79:94:3d:fd:d3:e4:6d:d1:41:94:60:55:
         c1:0b:5c:8f:d2:da:16:ba:a8:4a:80:4e:df:c7:d2:82:53:d5:
         6b:05:41:d9:ca:11:ac:ec:1a:e8:40:ec:c1:14:63:d7:04:5b:
         40:bf:e0:39:36:6b:0b:6e:e7:9f:16:bf:5c:43:0e:7c:8a:fa:
         09:a7:3d:1b:d1:cf:49:e1:a7:5c:e3:b3:e5:b5:7a:5d:03:8f:
         6f:eb:60:09:f7:c7:09:15:7a:9a:8a:71:d7:6c:57:a8:85:0e:
         dd:43:e7:c8:b7:21:1f:ec:2f:68:05:c3:c7:b7:26:b8:10:1a:
         0b:06:c3:20:11:7b:56:24:8c:e1:ac:3d:8c:d4:54:cd:13:f7:
         56:63:41:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:19 2025 by rpki-client