Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File:                     mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier:          De5CgXWypZQtLtfWi8nuoTx89oUkFO6UHBN1mb1Wggw=
Subject key identifier:   6E:04:87:F4:27:B4:11:5E:D7:06:36:1D:0E:2E:07:27:0C:D0:0E:B3
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer:       /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial:       0194BCE0B5303DACAFAAD3DF82B1355328E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 15:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:30 +0000
Files and hashes:         1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
                          2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
                          3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: gPfP/f6URu1fAEGwpdw4WUWuUv6LDlrW1sd+KAE2dzE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:b5:30:3d:ac:af:aa:d3:df:82:b1:35:53:28:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
        Validity
            Not Before: Jan 31 15:00:30 2025 GMT
            Not After : Feb  1 15:00:30 2025 GMT
        Subject: CN=6e0487f427b4115ed706361d0e2e07270cd00eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:f3:71:60:af:9b:a1:e7:a8:ba:74:aa:e8:
                    71:fb:56:02:91:aa:2c:f7:bf:e0:5b:ab:1b:55:de:
                    3f:dc:f1:f5:67:f0:18:48:bd:3d:56:85:44:c5:49:
                    e4:75:5d:c3:47:6e:fe:72:9e:71:09:95:b6:38:42:
                    0b:59:ef:df:76:8e:3f:8a:bc:c9:9e:32:b0:a1:0e:
                    90:19:c2:4e:06:72:61:85:79:e5:eb:a1:71:23:53:
                    43:96:3f:e9:46:74:8a:87:d1:e0:73:b0:11:3b:d3:
                    b1:7a:43:cc:81:82:b9:c2:a4:8f:39:16:c9:72:17:
                    b8:7e:9e:9b:8a:2f:db:28:d0:e7:2c:21:50:f5:9d:
                    42:5d:f7:61:45:75:e8:d2:ae:e5:38:5d:55:28:45:
                    2c:38:2f:6b:5a:a9:ff:75:24:45:fa:4a:66:9f:91:
                    31:8b:b5:62:8a:d1:5c:35:f9:65:d3:cf:53:c4:94:
                    54:16:8f:a5:50:af:3d:b8:04:64:09:55:d1:5d:60:
                    76:b6:04:d7:a6:35:1c:50:98:c5:f1:5d:6c:c0:14:
                    b3:e9:44:64:06:24:97:33:32:03:29:f0:3d:8c:63:
                    1e:47:03:39:0e:d4:02:34:87:ec:30:b6:90:8a:51:
                    67:b7:6d:41:5b:16:a3:af:fc:03:9b:85:99:4f:05:
                    0f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:04:87:F4:27:B4:11:5E:D7:06:36:1D:0E:2E:07:27:0C:D0:0E:B3
            X509v3 Authority Key Identifier:
                keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:44:7e:07:5d:f7:a0:94:2b:e2:b7:81:fa:78:b1:d8:25:6b:
         4a:5f:df:8c:74:8d:dc:39:8b:47:da:46:b5:48:e9:24:f5:99:
         61:85:be:87:94:fe:0d:85:a7:6b:61:f4:d0:f6:09:df:4e:5e:
         e2:09:38:0d:38:7a:f8:07:96:81:51:e0:60:f8:0a:78:89:ca:
         fc:40:73:5d:5e:2a:fa:08:40:b7:37:f5:8e:96:e9:35:19:db:
         5d:bd:fa:de:59:3e:77:ef:77:0f:fa:ca:12:f8:77:15:f9:7c:
         78:d3:4a:90:d7:3a:2b:8f:de:a1:cd:23:7e:c5:37:18:0c:6f:
         ff:1b:30:12:b5:e4:67:97:07:0b:aa:ff:eb:81:48:93:67:bc:
         02:12:68:d4:78:9b:d8:1b:de:37:69:6a:42:cd:53:ba:9d:61:
         91:cc:7a:9a:7a:2a:16:8c:a3:69:6e:62:cb:3e:2d:a1:72:52:
         f3:6f:80:6d:ef:a3:0c:7d:3f:41:ac:f8:2f:a6:05:8f:1b:8d:
         5f:1d:99:a7:93:63:33:18:7b:05:85:01:dc:bf:86:f0:39:bb:
         d4:04:85:92:e1:9f:5c:b9:be:23:da:00:c0:00:6f:f4:01:f9:
         8e:a1:73:9c:72:f4:46:5e:ec:65:af:16:8a:94:57:d2:2d:62:
         14:f7:a3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:02 2025 by rpki-client