Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
File:                     MHTWUd_sSw03HgJQWx-Gk-0djgI.mft (raw, json)
Hash identifier:          F3WzKwIa0gNdubd7bK7Ofc4YjiKMNHBytPB9+P3odpQ=
Subject key identifier:   50:28:8E:B5:28:20:51:79:41:09:AA:FE:B7:65:AE:3C:3B:DE:A0:DC
Authority key identifier: 30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02
Certificate issuer:       /CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
Certificate serial:       0194BD4E852A64042BD66AEFE107BCF97EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 17:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:27 +0000
Files and hashes:         1: 1-eAJE_ZPw_LJuNlElXg0BRaL11g.roa (hash: YakZb3LMYAiCfML5t2kxegtBvI+8ocrvx+dTJt+Il2M=)
                          2: MHTWUd_sSw03HgJQWx-Gk-0djgI.crl (hash: 5TKC3uGiIc+A5yEWvQy4g3ZqLbB/wFf3VQpog5tbjk4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:85:2a:64:04:2b:d6:6a:ef:e1:07:bc:f9:7e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02
        Validity
            Not Before: Jan 31 17:00:27 2025 GMT
            Not After : Feb  1 17:00:27 2025 GMT
        Subject: CN=50288eb5282051794109aafeb765ae3c3bdea0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:1f:00:10:e8:01:58:84:2c:72:6a:75:56:
                    da:8a:4e:48:49:e2:5c:85:f1:da:25:79:49:44:fc:
                    18:c8:7e:36:72:8c:c9:6c:74:8c:26:43:4a:6b:b6:
                    eb:e0:f0:c6:e4:52:b6:d6:d3:41:7a:75:b9:e0:ad:
                    80:8e:b2:6c:89:1a:e8:f5:39:f5:b1:83:f1:0b:33:
                    c7:48:a5:d0:ea:14:ad:11:db:b3:b1:1f:7b:74:d0:
                    13:3e:a4:7a:5e:55:d0:45:f7:c9:9f:eb:ce:ac:49:
                    d2:63:61:22:03:d0:3f:01:07:0c:7c:9e:8c:0a:06:
                    d6:15:32:1e:56:c1:fc:30:59:00:92:50:03:a4:ef:
                    63:37:00:b5:5d:3c:90:9d:66:ed:c2:a6:04:5e:99:
                    1e:14:29:a0:4b:b6:a7:0e:ff:20:94:49:2a:a1:0f:
                    ae:00:fb:31:85:9a:78:44:51:ac:a8:91:51:5a:4e:
                    a7:11:bd:52:c1:02:f1:cb:f5:0c:fe:6b:e1:99:85:
                    29:db:97:59:91:3d:4b:57:0a:72:7e:aa:7c:2c:b3:
                    4c:ab:cb:a8:58:ef:be:87:6e:62:1c:b9:03:47:ff:
                    93:d9:44:55:89:1e:e6:69:92:67:c3:1b:58:b0:ea:
                    f7:e6:dc:2e:e9:77:0d:56:b0:ca:9f:ce:29:d9:c8:
                    b9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:28:8E:B5:28:20:51:79:41:09:AA:FE:B7:65:AE:3C:3B:DE:A0:DC
            X509v3 Authority Key Identifier:
                keyid:30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:66:65:0b:7d:b6:fe:70:0c:9c:71:b6:c8:27:b5:e9:61:7e:
         c8:32:02:fe:f0:4b:b5:7d:39:6b:73:23:92:81:dc:e8:eb:92:
         ab:ee:b3:bf:c6:ab:56:10:30:3d:85:8e:9a:ed:ae:94:a1:a0:
         41:26:4e:f3:55:01:04:02:59:5a:88:91:da:db:c5:8b:71:80:
         98:5e:ad:d2:a0:d7:c4:5f:2a:43:73:87:15:17:e9:4c:6e:a7:
         be:50:01:71:31:6e:75:e1:4c:2e:15:f7:8a:e2:ab:bd:83:22:
         e9:96:3e:10:ec:70:72:d5:bd:98:6a:59:17:e0:26:7c:71:14:
         21:f4:a8:c4:2d:03:de:1c:4f:5a:c4:d0:c9:1b:45:77:07:89:
         28:b2:a7:51:c7:e0:fa:ea:79:dc:d6:b2:5a:68:75:c3:38:53:
         12:14:4c:05:ef:2d:60:b8:98:c1:bc:65:58:cf:d5:57:ab:0a:
         3c:37:18:4d:85:e9:2e:66:01:45:da:b8:7f:03:07:af:39:5e:
         2b:60:fc:5e:b3:12:9e:e6:6f:bc:59:88:4b:31:d2:b6:db:4b:
         8d:c0:1b:7c:b5:b4:00:7b:f9:28:a7:d5:d6:42:a3:df:5f:d6:
         c9:61:b1:d2:87:dd:78:07:71:46:57:b8:ec:a8:7f:fa:80:32:
         ff:ea:14:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:53 2025 by rpki-client