Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File:                     jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier:          QGvQT51xx1ljcizFgtkGhykintWzf9C9qIqdckycBQY=
Subject key identifier:   DF:2E:8D:89:8E:28:30:19:51:1B:63:76:27:83:41:24:0B:D5:7D:29
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer:       /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial:       0194BBCE5B243F1C82163CBC5D5985C398DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number:          0D56
Signing time:             Fri 31 Jan 2025 10:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:50 +0000
Files and hashes:         1: LSJWw_ptvazCnhCar9l_Y1TpHAM.roa (hash: wjRArMMbVUG2mvjIwU1Y1QgYT+m8+bZU67i+Zotaojs=)
                          2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: poPX31uxqw707wxcdqOfrQyibE0MmMwGCIR62sKsdBg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:5b:24:3f:1c:82:16:3c:bc:5d:59:85:c3:98:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
        Validity
            Not Before: Jan 31 10:00:50 2025 GMT
            Not After : Feb  1 10:00:50 2025 GMT
        Subject: CN=df2e8d898e283019511b6376278341240bd57d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:c5:d2:48:ca:2f:9a:86:32:f4:ea:db:b7:
                    b7:87:ac:00:c7:07:a2:f8:0d:07:93:15:81:95:a8:
                    6e:b5:8c:2f:49:bd:be:0c:f2:e8:17:29:6f:ff:79:
                    0b:9f:53:7a:44:ee:2d:b3:51:53:4f:11:c0:92:c3:
                    1b:05:a7:94:58:b5:d0:d5:0c:94:09:2a:e5:4f:48:
                    a0:9f:9a:99:f9:06:f3:38:5c:85:30:60:f8:0c:d3:
                    1d:30:f8:2e:94:44:2f:15:48:99:c0:f8:4d:24:00:
                    5d:a5:e7:02:ca:12:83:99:3e:36:86:8a:5e:88:d0:
                    aa:7a:b0:86:2a:5b:27:f6:3b:30:15:ea:7e:9e:ae:
                    96:62:d5:e0:d6:41:ff:eb:78:cc:d7:b5:c7:c9:18:
                    03:e3:94:4d:f3:b6:1b:2d:71:c5:e8:95:d5:67:ca:
                    3a:b0:b1:ae:3e:6e:eb:6c:95:33:63:9f:69:b4:b2:
                    da:1e:8f:eb:fc:3f:07:da:4d:25:3c:f9:af:5a:b4:
                    3e:c2:f9:71:64:e1:44:28:70:6b:1a:9f:cd:6b:e3:
                    d7:b6:bf:a6:a6:f0:8c:36:4a:a2:f9:0e:62:d7:48:
                    63:3b:03:ee:fd:c4:b4:1c:fc:35:0c:c4:bd:48:2a:
                    78:af:dd:ee:3d:5d:64:53:b8:79:d8:ea:fb:4b:9b:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2E:8D:89:8E:28:30:19:51:1B:63:76:27:83:41:24:0B:D5:7D:29
            X509v3 Authority Key Identifier:
                keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:7e:08:c9:65:f2:ee:ab:67:34:da:0b:3e:8e:92:85:a2:91:
         c2:e9:62:54:23:af:c8:59:76:d5:51:d5:4d:ba:46:42:2f:8c:
         71:0c:f9:38:8c:6b:e5:54:30:a8:0d:55:95:48:ee:b1:c3:16:
         47:05:ef:af:f6:a1:01:0e:b8:e5:16:78:f9:9c:57:ae:c3:24:
         99:06:71:9a:83:f4:29:c8:5c:e7:77:af:5f:6e:95:b8:47:25:
         ca:b6:b5:8c:9e:30:30:bc:1c:22:14:e8:2b:5d:60:fa:92:29:
         a8:0d:ac:79:30:12:2a:0f:45:2b:66:98:64:99:3b:ca:9d:99:
         d3:94:74:39:a3:17:02:28:88:4e:24:6b:70:61:f7:76:01:86:
         26:81:bd:5b:a4:35:1d:c5:8f:82:6f:2e:07:01:a1:40:51:2d:
         bf:b1:19:b3:6b:d9:8a:0a:23:81:af:8a:4e:1c:a1:0e:99:b4:
         99:a1:00:35:0b:a2:bb:11:5a:39:be:26:7c:cf:e8:76:f8:e7:
         d9:26:61:b5:b5:0c:05:df:3d:2f:30:3d:ab:92:c3:87:75:3e:
         e4:a7:09:22:41:33:a9:60:7d:f4:75:dd:7d:ec:a7:a1:50:ec:
         29:9a:4b:16:1c:b9:95:10:d9:49:7d:7f:b2:e8:6f:c5:e7:1e:
         4c:10:d4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:55 2025 by rpki-client