Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File:                     zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier:          HcEcYJ1CRHwveAuh8a00lKxYtS5CuhHPpBhwaig6p/A=
Subject key identifier:   6C:F7:C1:8D:81:E1:78:B9:EB:FB:E6:62:11:70:42:35:C6:55:5C:A5
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer:       /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial:       0194BC04A10A780BE09117EF6B18AA4293B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 11:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:07 +0000
Files and hashes:         1: E-7nk5OKQny9W_bEEmUe46EIcfs.roa (hash: cEU0S6nlC1/hdoqfbgIZpy0a5hGCyF6U3fW531GaMKQ=)
                          2: aPpnczwc4j1JvO2eWOLdAVwWYqU.roa (hash: +J8FGzdm2h6ir6gGWJRFYFJaNDYSWIeOcHIUVt+JT3U=)
                          3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: pE9DPS9566Mbgw7KbO+gEBKFVr+fCiGDs/NbWYcbIgM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:a1:0a:78:0b:e0:91:17:ef:6b:18:aa:42:93:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
        Validity
            Not Before: Jan 31 11:00:07 2025 GMT
            Not After : Feb  1 11:00:07 2025 GMT
        Subject: CN=6cf7c18d81e178b9ebfbe66211704235c6555ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:60:ba:b7:15:71:9b:ad:57:04:57:b1:5e:
                    de:6a:be:a8:95:a9:65:1c:33:b2:a7:9d:1d:4f:88:
                    fe:8e:69:05:ec:49:82:d8:84:b9:0e:37:16:64:60:
                    10:61:5c:fa:d0:57:f0:28:29:0d:2e:ed:b7:eb:16:
                    31:4c:88:67:27:eb:18:3b:73:75:79:60:10:13:db:
                    1a:5f:4e:bb:65:62:c2:e2:c1:df:78:db:43:e4:3d:
                    2c:6f:69:79:c8:c7:2d:5f:af:5a:6e:ab:e0:98:25:
                    5e:51:e7:00:4c:6e:be:3a:23:0e:4f:89:d4:93:be:
                    7f:6e:b7:df:ee:a8:4a:fc:ea:27:9d:fc:8b:8e:c6:
                    d4:8d:10:74:32:6b:fd:d8:3a:60:0f:35:f6:38:12:
                    09:8f:87:46:4f:b3:da:9e:ce:14:9c:66:8d:ba:a1:
                    46:42:03:36:98:e2:67:a7:4f:12:0b:25:df:10:af:
                    76:2b:ce:1e:19:07:65:00:c2:26:63:14:1b:18:a3:
                    be:2f:29:c5:c0:9e:eb:43:ab:dc:19:bd:63:59:f4:
                    ee:87:4c:a8:61:6d:36:ad:12:f1:ea:09:f2:a2:ab:
                    71:8b:12:15:17:e7:e5:c2:71:c8:dc:10:55:1d:d8:
                    7e:18:40:1d:07:95:37:8f:96:3b:82:7d:c2:03:91:
                    57:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F7:C1:8D:81:E1:78:B9:EB:FB:E6:62:11:70:42:35:C6:55:5C:A5
            X509v3 Authority Key Identifier:
                keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:62:4f:5f:3d:25:d8:4f:6c:2b:bc:2c:58:ed:62:30:e4:14:
         4b:f8:1b:d9:8e:01:00:16:f6:7d:61:8a:e8:c1:77:eb:b2:c1:
         b0:7c:e4:66:a2:ce:bb:70:8a:c4:f1:98:48:ff:8f:37:04:a8:
         98:4f:1b:67:e3:20:ab:a0:83:62:c1:b0:e6:1b:2f:b0:ba:b1:
         2b:87:43:84:bc:1d:c6:98:77:45:1d:00:a5:be:60:55:e2:90:
         3a:59:51:9f:34:64:33:c2:76:14:7e:a6:8d:3c:ae:de:3a:1b:
         7c:91:46:79:22:2c:f6:0e:ed:5a:ab:07:5c:06:99:80:d5:b0:
         44:09:3f:85:58:29:a1:7e:8f:ef:55:00:07:ba:58:ce:28:a6:
         28:03:6d:7f:69:34:1a:13:df:92:5f:91:e1:51:18:46:96:a0:
         e4:18:72:cf:1c:46:92:0b:91:48:b0:92:60:7f:58:ec:2d:62:
         a2:7e:52:25:d6:0d:d6:6a:0e:31:26:98:e6:7c:30:aa:b8:08:
         47:4b:18:c8:9a:a1:b2:62:8d:2f:c8:8e:f7:63:f2:c2:c7:39:
         f1:5f:0d:82:c0:83:c2:98:70:40:84:cb:ad:d0:99:8a:6d:6f:
         c4:b3:c6:f2:88:0c:c4:76:92:af:f0:2a:62:95:a9:f9:c8:0c:
         59:f3:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:27 2025 by rpki-client