Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File:                     4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier:          e+bQmfcoe9ciesFQi7+1DJzUjDCd6lBC3ugdIYtRbXs=
Subject key identifier:   E0:2C:41:69:73:9B:3D:83:32:3B:1A:96:96:86:A8:0E:13:FA:A0:78
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer:       /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial:       0194BD4E9164BFE9B8663111C9F425154079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number:          0F5B
Signing time:             Fri 31 Jan 2025 17:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:30 +0000
Files and hashes:         1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: ygBGwJrLQmNymmIuri2oFaVUc0HLMxH/t7vrtrwkzJM=)
                          2: WX9ifdPc509PIWH1MshzaQ9gKs4.roa (hash: N2NEfXL50JrESYal+4AtaFkCctqevfpLSA3CNFTMaFM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:91:64:bf:e9:b8:66:31:11:c9:f4:25:15:40:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
        Validity
            Not Before: Jan 31 17:00:30 2025 GMT
            Not After : Feb  1 17:00:30 2025 GMT
        Subject: CN=e02c4169739b3d83323b1a969686a80e13faa078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:c8:fb:c4:28:1b:45:f8:29:bc:47:ea:db:
                    0d:f6:88:22:b2:f9:1c:ef:53:1b:30:34:d9:2f:7a:
                    a4:b6:81:5b:55:c6:da:a7:6b:e7:c5:23:6a:0b:b6:
                    e2:5d:2c:42:da:71:3e:cd:da:a5:ef:78:47:0d:40:
                    a2:db:59:83:3a:de:da:02:03:bc:e3:7b:ce:0b:04:
                    1c:d4:91:e3:cd:91:63:7f:62:29:ab:69:62:ab:c9:
                    5d:6c:af:49:c6:57:73:d2:b1:30:32:b5:03:f4:9c:
                    38:f7:45:8d:35:08:fa:11:de:8f:21:6a:1c:57:b1:
                    89:b3:e1:bc:cf:ae:11:dd:8c:f7:13:a1:a6:95:ec:
                    6d:8c:7a:c7:0d:3f:6f:68:6a:27:5a:54:71:7a:97:
                    48:f4:d3:bc:4e:7d:0f:1f:d6:fd:2d:a4:db:23:56:
                    c4:4a:ed:c1:d4:54:4f:08:a4:21:11:4e:b2:29:d8:
                    9f:b0:29:9e:f3:3e:06:f2:36:f3:28:7a:fe:a9:b6:
                    a7:dd:4b:0f:f0:8a:31:75:6f:1a:0c:85:3b:d6:c7:
                    21:33:6f:ed:f3:be:84:6f:f1:5f:4a:1c:06:69:1f:
                    84:83:8f:4e:ff:44:0c:a0:47:93:c0:bd:70:98:d4:
                    7f:d5:df:5f:1f:47:cc:c4:09:23:0f:0c:1f:06:dd:
                    63:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2C:41:69:73:9B:3D:83:32:3B:1A:96:96:86:A8:0E:13:FA:A0:78
            X509v3 Authority Key Identifier:
                keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:7b:1f:b5:d0:25:94:77:c5:10:76:a3:62:5f:8b:a5:95:6d:
         54:9d:bc:27:e3:a9:86:41:4e:2e:bc:9c:14:e3:e6:d3:be:c2:
         db:0c:5d:42:a0:eb:29:a7:7a:d6:74:cd:07:0f:1a:0a:29:2f:
         9f:cf:ef:29:50:a1:4c:ac:47:96:fc:82:e1:75:c1:6b:8d:c7:
         86:fa:27:39:a9:ea:65:ff:31:09:b6:c8:54:1b:7f:7b:1b:34:
         9e:50:25:3c:3e:61:2f:ea:2b:6e:ec:de:72:fd:db:42:09:67:
         13:81:c2:d4:34:9b:8d:4f:53:4a:37:3b:81:a1:0b:e5:e8:58:
         16:f1:22:53:a6:f4:19:63:78:25:56:33:bf:f1:37:ca:e7:ce:
         a0:b5:b3:67:59:71:7a:1c:bb:e4:79:c3:f6:9d:8a:ef:70:e8:
         65:eb:bc:a8:47:74:10:c4:70:11:b9:ec:d9:ca:b3:2f:11:fa:
         d9:e5:73:86:5a:3c:c7:87:18:b7:49:76:8e:8e:c0:63:5f:97:
         cc:e3:67:3a:53:f6:9c:f0:f1:a4:7f:ed:67:c4:40:ed:d0:e3:
         9f:53:94:b4:db:70:1a:97:24:13:72:94:9a:c1:52:3d:0d:e2:
         dd:28:6a:4d:33:08:c3:6e:40:45:37:fb:af:21:ab:85:31:06:
         20:83:60:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:24 2025 by rpki-client