Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
File:                     jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json)
Hash identifier:          ln2EKnl4gZmJnxOz1JDpEeUhiCGe5KhP+G0gYh+xZ/4=
Subject key identifier:   5F:F1:54:1A:BB:AE:15:8D:2C:FF:D2:17:4B:7F:86:F5:68:F5:F2:CD
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Certificate issuer:       /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial:       0194BBCE7A67CE56043E0C656955AE2E6B39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
Manifest number:          0B39
Signing time:             Fri 31 Jan 2025 10:00:58 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:58 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:58 +0000
Files and hashes:         1: GXn4ppunsJgcgy-UOrFrKoqoiSI.roa (hash: W8qTLACZpN2+EybB8zHXMWE+Y43RFaP41c0nB7EvPAY=)
                          2: UiywziZxN-7MEINyZRyFT2U_5J0.roa (hash: Hs9brKdNVbXd9gOK7GzpNeHkytFA64OrK6GnB4LNebo=)
                          3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: j8Uckif1Mbrz3nt7GNYdzw8Eoo/q/WAYKznc9ECpRzQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:7a:67:ce:56:04:3e:0c:65:69:55:ae:2e:6b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
        Validity
            Not Before: Jan 31 10:00:58 2025 GMT
            Not After : Feb  1 10:00:58 2025 GMT
        Subject: CN=5ff1541abbae158d2cffd2174b7f86f568f5f2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:f1:7f:0a:6d:74:e5:bc:fb:b1:80:40:15:
                    51:a3:87:94:38:95:53:4f:01:1b:ce:3d:d7:3b:84:
                    9c:56:9f:75:1e:2d:f0:13:05:77:63:4e:34:41:9d:
                    f0:41:e1:b7:ff:06:65:5d:c9:0e:84:a1:72:ad:3a:
                    7b:c2:35:55:1f:48:84:7d:37:7b:a7:0c:fe:71:45:
                    72:a3:37:e9:a6:86:f0:29:79:07:a4:4a:7c:76:0c:
                    5f:d0:b4:4e:7d:fc:26:94:20:f9:0a:82:4c:47:eb:
                    4b:67:0b:4c:ef:95:ed:41:a3:0f:fe:47:b0:98:07:
                    c1:1d:dc:03:de:c4:b5:4f:a5:99:5e:33:6f:59:bc:
                    13:d0:bb:d8:e4:1b:4e:62:27:ad:28:98:30:68:03:
                    76:9e:5e:da:7f:03:c4:96:99:94:c2:a9:f4:90:c6:
                    94:ce:d0:f2:a0:2d:e1:fc:26:81:c1:58:82:a7:a6:
                    91:78:bc:6e:73:d5:8c:05:e9:cd:16:c3:4a:ad:53:
                    dc:69:0f:e8:e3:fe:74:69:e7:ca:5b:fe:ec:ac:e2:
                    8c:78:68:3a:57:4d:05:4f:3a:bd:61:25:00:18:95:
                    14:0b:91:25:ad:e0:5c:36:2a:dd:c1:72:c8:82:6b:
                    c6:be:72:99:3d:74:18:92:55:4a:4b:d8:f9:25:c0:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F1:54:1A:BB:AE:15:8D:2C:FF:D2:17:4B:7F:86:F5:68:F5:F2:CD
            X509v3 Authority Key Identifier:
                keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c7:1c:d8:56:b5:86:68:4b:4a:ce:4d:0b:35:ec:ae:73:78:
         2f:a8:ec:a0:2d:88:b2:a1:cb:8a:86:eb:6b:8f:e8:09:75:8e:
         52:fc:dd:06:ec:d8:41:73:2b:8b:b1:29:3a:28:f6:25:1c:c2:
         7f:7f:67:16:a8:54:2e:28:af:9e:e6:40:5a:35:79:4d:78:83:
         3b:be:ae:72:ac:25:1c:00:4c:2c:0a:c5:46:72:ae:ae:75:3e:
         b6:e2:bb:f6:c0:bd:22:d7:48:52:37:49:a4:f7:05:42:7f:c2:
         2e:13:ea:d8:25:85:3b:d7:14:e9:a4:7f:08:e6:ca:60:c8:d7:
         24:2b:e6:83:00:ae:54:04:68:3c:e2:e3:93:6a:06:97:92:34:
         6e:5f:1d:ec:f8:e3:7b:ae:62:85:a0:a7:28:81:0d:fe:de:7e:
         fb:ff:59:42:c9:db:db:92:35:c8:e2:28:40:f6:07:5d:b9:c9:
         4b:4c:f8:49:eb:11:59:2f:c2:43:9a:31:b0:d0:51:06:db:fe:
         42:62:bd:ce:6b:06:4b:90:b7:ed:d0:3e:e6:7b:b4:4a:2c:83:
         c5:54:a1:b5:35:23:f4:b0:26:05:99:5d:8e:69:fb:d7:9b:7f:
         95:7f:dc:68:c0:8e:de:d5:0e:6f:e3:8c:66:11:69:91:ba:d1:
         5a:69:96:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znpnzlYEPgxlaVWuLms5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWZlYjZiMDQ0YmJmNjExMTc3NWJjYTAzOGQ2NWU2ZDIy
MzBmMTQwHhcNMjUwMTMxMTAwMDU4WhcNMjUwMjAxMTAwMDU4WjAzMTEwLwYDVQQD
Eyg1ZmYxNTQxYWJiYWUxNThkMmNmZmQyMTc0YjdmODZmNTY4ZjVmMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb/xfwptdOW8+7GAQBVRo4eUOJVT
TwEbzj3XO4ScVp91Hi3wEwV3Y040QZ3wQeG3/wZlXckOhKFyrTp7wjVVH0iEfTd7
pwz+cUVyozfppobwKXkHpEp8dgxf0LROffwmlCD5CoJMR+tLZwtM75XtQaMP/kew
mAfBHdwD3sS1T6WZXjNvWbwT0LvY5BtOYietKJgwaAN2nl7afwPElpmUwqn0kMaU
ztDyoC3h/CaBwViCp6aReLxuc9WMBenNFsNKrVPcaQ/o4/50aefKW/7srOKMeGg6
V00FTzq9YSUAGJUUC5ElreBcNirdwXLIgmvGvnKZPXQYklVKS9j5JcC3gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/xVBq7rhWNLP/SF0t/hvVo9fLNMB8GA1UdIwQY
MBaAFI4f62sES79hEXdbygONZebSIw8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAt
MGQ4ZmNlM2ViZmJiLzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83ZjFmMjktMTI0Mi00MWY0LWEwOTAtMGQ4ZmNlM2ViZmJi
LzEvamhfcmF3Ukx2MkVSZDF2S0E0MWw1dElqRHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMcc2Fa1
hmhLSs5NCzXsrnN4L6jsoC2IsqHLiobra4/oCXWOUvzdBuzYQXMri7EpOij2JRzC
f39nFqhULiivnuZAWjV5TXiDO76ucqwlHABMLArFRnKurnU+tuK79sC9ItdIUjdJ
pPcFQn/CLhPq2CWFO9cU6aR/CObKYMjXJCvmgwCuVARoPOLjk2oGl5I0bl8d7Pjj
e65ihaCnKIEN/t5++/9ZQsnb25I1yOIoQPYHXbnJS0z4SesRWS/CQ5oxsNBRBtv+
QmK9zmsGS5C37dA+5nu0SiyDxVShtTUj9LAmBZldjmn715t/lX/caMCO3tUOb+OM
ZhFpkbrRWmmWfQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:55 2025 by rpki-client