Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File:                     J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier:          aqplN9tTU+kwUcea6HVf30bbH/+yfKR12oh24Q9zuTE=
Subject key identifier:   56:26:4E:4C:D9:F3:7D:0C:2B:01:74:47:4A:E2:F4:FC:B9:6A:D4:6D
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer:       /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial:       0194BC050122CB970C9D5139B34076E79552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number:          0BE8
Signing time:             Fri 31 Jan 2025 11:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:31 +0000
Files and hashes:         1: EfwLikTBq1BQAGfNQNV1E8qGDAc.roa (hash: yRt0hCbp/cepFk2zNBBsY1KquLoFtQD0MeEg7vy0YTA=)
                          2: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: P+UuNFXSAfWeBEj3e+4OHHpFoCNWlLJx8JG6opnOMg0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:01:22:cb:97:0c:9d:51:39:b3:40:76:e7:95:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
        Validity
            Not Before: Jan 31 11:00:31 2025 GMT
            Not After : Feb  1 11:00:31 2025 GMT
        Subject: CN=56264e4cd9f37d0c2b0174474ae2f4fcb96ad46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:f1:cb:11:b2:be:b4:04:53:e3:fd:91:2c:
                    4f:fb:00:a9:9c:24:7e:ef:5e:a5:a6:9b:6e:d9:dc:
                    5e:84:ce:a9:04:cb:cf:82:a7:86:93:48:35:40:b7:
                    6a:35:9b:ea:91:59:f8:0e:91:15:5d:a7:bc:c7:bb:
                    c4:e5:4d:d1:ae:43:cf:a5:20:6d:15:3b:a8:41:e4:
                    03:e4:ba:a0:61:36:3a:88:0f:2b:f5:96:fb:5c:3b:
                    3c:52:a6:a8:3d:d6:6d:ac:2e:f0:44:31:c9:8a:55:
                    53:83:81:73:6a:99:46:df:29:c1:8f:44:01:a2:e0:
                    24:eb:27:d3:de:64:9f:93:de:00:01:56:00:fb:a0:
                    f9:4e:be:d7:a4:f9:b5:ea:8f:ee:2e:c8:9f:9b:48:
                    58:cd:02:1d:bf:b7:62:9b:79:b5:e0:ab:61:a6:63:
                    d1:b5:ad:8f:8f:2e:bf:65:80:da:d6:42:74:85:c9:
                    42:b3:e7:0f:7f:83:68:64:c6:32:94:07:cc:96:0f:
                    d4:6f:1c:65:80:7c:a4:8c:0f:84:35:8f:34:01:b6:
                    a6:22:25:69:d9:f5:63:1f:2e:c3:ea:17:e7:f7:12:
                    bd:bc:86:a6:62:ac:ea:52:cb:8f:16:f9:ba:38:16:
                    3d:10:b6:08:f1:7b:17:04:16:88:8f:d5:c5:5f:b3:
                    b4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:26:4E:4C:D9:F3:7D:0C:2B:01:74:47:4A:E2:F4:FC:B9:6A:D4:6D
            X509v3 Authority Key Identifier:
                keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a4:85:d8:32:75:38:e3:59:62:2f:6f:ca:ff:4b:fd:2b:5f:
         dd:25:00:be:f3:56:a5:52:58:d3:1d:28:a6:68:7c:b5:0f:d1:
         5d:53:51:0a:27:2a:98:cb:43:37:61:3d:94:01:9d:da:e6:ed:
         c6:39:c8:21:82:00:ca:3e:41:fa:b5:5d:27:a6:85:a9:b8:4b:
         ef:de:ad:b9:1e:ca:5a:9b:48:a3:96:ec:37:4f:6f:61:e9:c5:
         92:f7:9e:12:51:61:4c:3f:92:de:f7:3f:7c:38:2e:af:31:2a:
         23:79:e2:91:7f:14:39:4a:96:f5:33:45:6e:de:27:40:d4:5c:
         f7:fa:14:92:59:a7:6d:79:c2:56:db:5c:74:62:5f:00:fd:84:
         87:81:52:ec:6d:a5:e2:40:d4:83:54:ab:29:69:21:67:04:95:
         f7:06:b5:ac:e3:85:4f:d1:eb:53:83:e0:a8:8b:a6:b2:83:af:
         7f:3e:17:7c:f0:35:23:37:e1:ce:d3:79:ac:8e:e8:a9:7f:cf:
         2f:9c:ab:66:c3:7e:72:72:69:6d:8d:c4:4c:8a:00:24:2c:fb:
         8e:01:1f:87:7f:76:26:bf:e1:e2:ac:9e:30:ff:bc:01:3d:27:
         95:c5:1b:db:3e:fa:31:cc:a9:3e:34:9e:77:8d:84:be:d5:91:
         66:19:20:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:19:51 2025 by rpki-client