Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
File:                     FLcYAN3cSX9g-e23gzyUlzq33Bw.mft (raw, json)
Hash identifier:          CFjoD16deW2qyxnjV13v7C/Y9ZJqvDlv5Ox+8MRPLhg=
Subject key identifier:   ED:C2:4F:6A:58:C4:C2:15:AF:F8:55:B1:18:65:4D:16:3B:77:33:74
Authority key identifier: 14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
Certificate issuer:       /CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
Certificate serial:       0194BC052C1E27BABEBE87FB9B4EEDEE7F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
Manifest number:          1316
Signing time:             Fri 31 Jan 2025 11:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:43 +0000
Files and hashes:         1: FLcYAN3cSX9g-e23gzyUlzq33Bw.crl (hash: 3EqGPc1sBDD2VIQUpe6/zajOlQ2WJArnnREFk6d/OOw=)
                          2: jh-TOxpxIUBWeRHqyE_TsQ3xZPw.roa (hash: h4140lmsN13+jNtLubDuYn8kTL6T4/sAQ4MD0yMdaVw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:2c:1e:27:ba:be:be:87:fb:9b:4e:ed:ee:7f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
        Validity
            Not Before: Jan 31 11:00:43 2025 GMT
            Not After : Feb  1 11:00:43 2025 GMT
        Subject: CN=edc24f6a58c4c215aff855b118654d163b773374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:87:ff:c0:d9:b6:6c:1d:ad:07:e6:ee:65:
                    cb:d7:e1:26:7b:d8:08:bd:e4:6b:46:18:8c:a9:af:
                    32:de:e7:88:75:3e:62:1f:7d:3a:4d:6a:fb:2d:5f:
                    a2:fd:e7:47:20:52:7f:ba:81:d2:89:58:a3:c7:4c:
                    64:54:b5:8b:c1:34:74:73:1b:a4:dc:87:aa:b7:1b:
                    f9:d3:e8:56:19:78:9b:7f:25:68:3b:bd:36:f5:f8:
                    81:b8:19:b2:fd:ed:4e:aa:40:05:5b:53:fe:1d:3d:
                    d8:78:da:9a:de:b8:57:9a:7c:3d:36:85:91:9e:26:
                    21:6b:53:b0:7d:da:a7:60:3b:3f:7e:00:45:c1:74:
                    76:a6:3d:28:f2:fa:c2:28:85:63:ee:c8:0c:d7:90:
                    5b:26:7f:9b:1c:e6:35:b0:89:31:95:60:83:db:16:
                    67:dc:c6:c2:0d:d3:ce:25:84:a3:11:cc:30:03:a0:
                    c7:1e:9c:e4:4e:a1:7e:f4:9f:4c:9c:5a:84:aa:0e:
                    34:b7:58:33:45:9f:3c:c5:16:2c:3d:1c:e5:80:a2:
                    bd:a9:b7:81:0e:b9:3b:bc:f1:84:d7:eb:4c:54:7f:
                    de:c4:f4:5a:8a:7a:15:82:a1:bd:8f:c1:d7:dd:e1:
                    24:f2:0f:3d:bf:35:4d:2a:cd:76:c2:ef:e0:e7:f6:
                    f1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C2:4F:6A:58:C4:C2:15:AF:F8:55:B1:18:65:4D:16:3B:77:33:74
            X509v3 Authority Key Identifier:
                keyid:14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:00:01:bb:ca:31:23:4d:8c:2a:c1:c8:39:3b:d9:58:f8:7d:
         be:9a:a7:7f:29:7f:56:ba:a7:e4:d4:12:a1:cb:4a:47:9c:97:
         83:ed:20:54:37:72:ec:15:e2:73:3e:40:b5:99:8c:dd:ab:7e:
         72:24:b6:97:9b:1a:d0:80:d9:f0:bd:19:8e:32:35:29:05:86:
         38:59:28:50:f2:9b:f5:47:d2:1e:f1:fb:65:c4:f4:b2:a2:e6:
         75:46:33:f0:36:9d:26:5e:d3:99:91:59:61:8d:bc:b5:f4:df:
         32:0d:4e:1c:64:f3:53:ac:51:f0:bc:c6:4f:b2:da:c8:27:8a:
         16:13:65:9e:5f:1b:9c:a9:ea:72:37:8d:8c:76:ca:87:af:bd:
         4b:bb:3a:82:07:c3:55:5c:74:95:8c:56:02:9c:f9:18:04:83:
         37:1f:75:45:19:52:94:74:e8:7c:d7:56:a0:c5:d1:66:02:13:
         c0:15:5b:ce:62:fd:28:b1:54:1a:f4:05:25:37:30:66:b0:3e:
         91:1a:38:61:5a:48:db:2c:d9:90:bd:ec:e9:3c:a7:49:e2:3e:
         08:69:98:1d:52:0e:89:6a:7f:c2:8a:ee:cd:ec:b9:be:97:f8:
         6c:78:46:af:56:fc:3e:df:59:49:27:fd:24:89:19:fe:bd:e4:
         25:6f:93:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:30:59 2025 by rpki-client