Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File:                     4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier:          NUcgm2R8ypJ5C/ppCT+Gp2JCqyY0WqZI6m2VpnWhsA8=
Subject key identifier:   F5:A3:17:B3:1D:0B:62:D6:51:1A:63:C7:7E:9D:E1:23:5C:C7:E9:EC
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer:       /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial:       0194BCE0C86540612FC804FFDA0DAB7D65A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number:          06B0
Signing time:             Fri 31 Jan 2025 15:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:35 +0000
Files and hashes:         1: 1qu70rxHLlsLAV5g5Efa66s6iag.roa (hash: YmJJTTwGISEG6l96iV4cbfKm+Xa4J2z07ynSRxjgi3U=)
                          2: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: WrJ5768ndleTOH8nfsvjHJHsHkVbJrAp7QvppgmcI6w=)
                          3: q1pnCW-BLUiZBZvb23K3UxB_wVE.roa (hash: pCVPRKxVl5EU92p/4v7xk8uVkYaxmpQbOuLsACDt2jk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:c8:65:40:61:2f:c8:04:ff:da:0d:ab:7d:65:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
        Validity
            Not Before: Jan 31 15:00:35 2025 GMT
            Not After : Feb  1 15:00:35 2025 GMT
        Subject: CN=f5a317b31d0b62d6511a63c77e9de1235cc7e9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:a7:7e:15:27:e9:14:81:3b:17:b6:3b:cb:
                    7e:c4:1b:07:f7:cc:33:5a:f8:f1:dd:3d:1f:a1:4e:
                    a3:28:3b:52:98:26:66:12:89:b3:ab:c8:a9:65:e8:
                    a2:e2:54:06:6e:0f:08:27:cc:11:c6:e8:9b:57:92:
                    23:84:c4:58:e1:ac:4c:2b:59:67:2a:f8:e5:2d:06:
                    d2:f3:06:a0:79:09:77:73:90:13:31:db:a5:01:b8:
                    3a:99:8a:ec:79:a1:c2:94:6f:a6:97:8e:86:c5:58:
                    f3:05:ff:54:5b:91:8c:e2:9b:95:78:63:25:4c:85:
                    26:85:19:54:f3:46:08:cf:3a:93:ba:c8:f6:2f:7c:
                    7a:13:f5:e9:ab:33:18:3e:c2:21:68:58:7f:f2:ee:
                    20:4a:e4:c9:ff:99:b0:cb:e2:d3:c0:38:01:de:6b:
                    4a:83:df:5a:37:92:2b:12:be:63:28:0a:a8:ab:99:
                    5c:3b:8a:27:70:4f:75:9e:2d:9c:ac:5f:96:08:33:
                    38:b7:a5:66:a1:8e:29:e4:98:39:20:4e:04:d9:b5:
                    60:3a:f3:6e:d0:fa:6e:42:ed:2e:d1:e5:a9:f6:f0:
                    4d:20:b5:68:b7:3a:2b:01:80:19:a1:00:6c:03:11:
                    23:e5:eb:2c:61:1b:ac:33:a1:05:57:c2:1a:f7:18:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A3:17:B3:1D:0B:62:D6:51:1A:63:C7:7E:9D:E1:23:5C:C7:E9:EC
            X509v3 Authority Key Identifier:
                keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f8:d5:16:29:18:b0:31:03:a7:3c:40:bd:cf:0f:eb:f2:49:
         2c:f0:f4:77:23:5b:78:9a:90:e9:71:6b:8c:b5:7f:1f:1a:bb:
         ed:74:3d:65:aa:be:94:03:7e:3e:b6:d4:fe:cd:97:83:74:e0:
         86:06:23:e5:8a:b7:28:88:ce:de:cc:cd:11:a0:b2:cf:f1:38:
         43:7b:30:d0:8b:ba:3a:61:07:ec:42:50:7f:20:2c:62:37:9c:
         08:37:c6:1f:1a:50:47:a5:95:a3:89:db:65:77:eb:cd:aa:a3:
         ad:5c:ae:db:df:fa:75:48:03:16:cf:8b:3a:ba:ef:6b:33:83:
         96:43:3c:5c:26:2d:8a:ef:aa:a2:40:aa:fb:8a:74:5f:b5:c5:
         b2:30:79:a9:43:ab:2d:ef:c4:5f:5a:87:77:eb:e9:6e:5b:ec:
         6b:de:6f:7e:b4:3b:9b:07:19:c4:fd:c7:15:11:58:01:79:87:
         f1:17:62:2e:19:44:3e:66:ea:26:e1:db:e6:1d:4a:7c:6a:11:
         e4:ff:c3:2d:aa:47:f6:f5:10:ba:2e:cf:c9:c5:e2:8b:13:71:
         80:8a:1c:ce:d4:b0:56:1a:71:54:7a:37:f0:62:3a:44:d4:d8:
         10:33:d3:0f:4e:43:88:26:ab:01:0f:29:a4:2a:5e:d1:d3:46:
         05:aa:d6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:14 2025 by rpki-client