Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File:                     IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier:          G+lSYpvixA5m4ey/OH7SzsBHthkI/LcKUMhnEEBphx4=
Subject key identifier:   61:BF:07:25:86:6F:D2:71:11:6B:B9:F8:35:9C:D7:7F:0D:55:BF:7C
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer:       /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial:       0194BBCE36652CD3BC02089C7A31C4B7662E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 10:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:41 +0000
Files and hashes:         1: 8BE15BYRjJfhZasQiCcSRq-1rvE.roa (hash: owl3mrEo7nmudL7UJFk7qfjK5dtTSEPpdF0yRa2bSts=)
                          2: 8pfPZSOu9OxWh0zIohg91aPGe8w.roa (hash: c5LZlJIp5DIk0u0EVUZdwpG29wBKxdLqbOnohSJsuL0=)
                          3: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: yvuUV7+3Wb/QGxyILYRrtti0Q6u94c2J7em/OEo29Vs=)
                          4: W5_MS3jBPdXrXt2CXzKVEDSySg4.roa (hash: 5kr0YkXkQlloL0Dx58yHdS9CGeVUoXp4B0GMVprtw4I=)
                          5: YZdW1FTou_f-R0pbpF5XZ4Tx3hg.roa (hash: zlg3+gSw7tZCxS27EU5I1VhaiNCdA3Z7IiLzIapPksE=)
                          6: j5QKeuGXTRBwPGjQWWnfRFS80gs.roa (hash: Z4Hp9oqaE6vPUIIGvGUpRfdgDDW4cmfUljTJCbGbKQk=)
                          7: nAr5TcbaRaUgvGs6GhoEMZYw2k4.roa (hash: PsVErZ9iC+yU1AQTc2kN6DO2ltE02bbxJGF/AxC6Z9Q=)
                          8: qH4AOngGgCDKos4oiBE8L48PaSU.roa (hash: wAl3jqMD73juUqzGb6OKFl9PHSoZSU+evXbe0KXVLu4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:36:65:2c:d3:bc:02:08:9c:7a:31:c4:b7:66:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
        Validity
            Not Before: Jan 31 10:00:41 2025 GMT
            Not After : Feb  1 10:00:41 2025 GMT
        Subject: CN=61bf0725866fd271116bb9f8359cd77f0d55bf7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:59:b6:6b:18:ea:92:5a:a0:6d:9f:24:12:
                    bd:82:f3:00:20:96:c5:e4:b8:c4:35:20:7e:42:7c:
                    5a:6a:33:0c:62:70:c0:99:f5:ca:c5:de:84:19:70:
                    3b:b5:3a:33:a4:21:df:4c:1f:7f:b9:26:c1:95:82:
                    ca:74:8e:a1:aa:09:aa:3c:99:0c:1d:4e:c8:7f:9d:
                    11:97:d3:72:ca:df:b5:40:db:c8:af:2a:5e:cb:2a:
                    33:32:b4:4d:b9:23:34:9b:20:72:9d:a0:4a:28:a1:
                    ef:dc:c6:dd:56:76:0b:34:d7:d0:64:7a:fb:32:63:
                    4f:22:7e:c0:36:be:fc:7f:87:d5:05:54:55:44:ea:
                    41:a2:fd:c7:f4:4b:09:f6:3b:ad:85:2e:4b:00:62:
                    d8:b0:4c:28:89:28:cb:d1:47:04:b3:a0:4d:87:95:
                    63:3f:e2:b7:4a:34:bf:77:e3:06:cf:7d:0a:52:0f:
                    ed:84:64:8d:3b:9c:30:6d:7f:da:0c:64:03:d5:f2:
                    fe:1b:69:50:92:d5:ce:46:9d:e0:bc:3f:c1:34:c0:
                    b4:74:00:0f:89:f4:23:81:a5:c4:40:11:83:62:01:
                    b4:29:64:13:f1:96:f0:bd:7d:67:8f:32:20:37:29:
                    17:03:a6:3b:bb:05:fb:a0:79:07:3f:95:79:88:ee:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BF:07:25:86:6F:D2:71:11:6B:B9:F8:35:9C:D7:7F:0D:55:BF:7C
            X509v3 Authority Key Identifier:
                keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:6a:a0:42:5b:3b:c7:6d:4f:38:04:6b:bf:6f:f8:be:f0:c0:
         3f:98:f8:ed:f7:a1:8b:a6:3c:0d:bb:72:21:e4:1a:03:d8:79:
         58:ea:9b:c3:55:ff:76:3d:73:a8:0b:cb:49:e6:be:0f:fe:b5:
         83:00:89:d7:e7:0d:84:de:4b:c5:3e:20:1d:15:de:b9:04:ee:
         ec:59:d3:76:99:b4:a9:6d:1b:16:49:2e:69:90:c4:9e:c3:d3:
         1d:82:d6:48:ef:3b:62:8f:c3:b7:61:6f:53:73:04:8c:9a:d9:
         9c:3b:0d:c2:f4:1d:93:b0:da:0f:1b:ca:ec:e0:b9:8e:82:72:
         22:50:d4:f9:e3:3b:0a:64:cc:17:c9:70:bd:3d:28:15:e6:6e:
         1c:a6:21:3a:29:e4:86:ff:51:cb:f1:35:7c:09:bd:f4:3f:45:
         88:88:11:91:08:52:ca:38:d4:20:9b:0f:d6:3e:5b:cc:0a:c8:
         c3:1e:6a:46:47:1e:68:c8:ef:68:8e:5b:de:d8:25:dd:bf:6e:
         2d:2f:e4:fd:dd:e0:82:89:09:0b:67:e6:03:5c:d9:71:e9:73:
         53:c0:0f:be:88:64:d4:15:d6:c0:28:73:03:40:39:af:5d:da:
         5c:ab:06:2c:f2:ec:19:b1:51:05:49:8b:7f:46:c1:66:e3:7d:
         3a:c0:91:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:07 2025 by rpki-client