Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
File:                     sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json)
Hash identifier:          kyzHfeaPKFaMJ3Ua2yAFnvX+MEnXN/upwArrxVm2QWo=
Subject key identifier:   5D:5E:F3:A9:BD:0E:5D:70:98:BB:A0:2D:8F:71:6E:41:8E:86:29:81
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Certificate issuer:       /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial:       0194BC3C04726EA66FDC69838C1E31915ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
Manifest number:          143D
Signing time:             Fri 31 Jan 2025 12:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:37 +0000
Files and hashes:         1: BO-bzW2V5HfZnpDWCOZRREj0_aA.roa (hash: bBvM5GD33JW26g6UBHC38zwmrN/wxvFNIrA/ZVP1z3g=)
                          2: D2VP3boIbKOt_7fZmoGwBMd0j_E.roa (hash: 5B9i3Ekd388l3dq3yF+uoTeTOTbzf9g6nU3q4mHoYKI=)
                          3: KDntMwv7lfN57GwH3c-ooOZ7MV8.roa (hash: N8ZIBiU8gH7tSdeMv2oT8+5VHr8ZvOaPGXUGzn1qd6o=)
                          4: MKXE3l_kRrUK-SEa0SjlnZgrzOY.roa (hash: qB75ATBjq0bvGr3VuX9ZJkiNF1i/cky+GUiK1V7um9s=)
                          5: OMLGm3M8AukdVmECZgGAm5oBI6w.roa (hash: NhtCtzcMBYjPL2amj6HhHMrktNr+dPVzL27OzOSW9VY=)
                          6: QhEieVCa4VzXwRS2R-uT3VD69zA.roa (hash: g7EksG6Y5xUVpGTxJtSk1SiYEQY9x4uAiGIMcbCmQ/k=)
                          7: T_vGm-YR8rSAG_LKyG-LL0j3jZY.roa (hash: ctLCD3mPPm9ORV/MIVYXQC7GReMvIOdcov6IyRw8Un0=)
                          8: VT5Wd_pqOJ9dH5ke9coXfMElArk.roa (hash: fLcCO/2FWRaPE55k8VUjCjI94f4/oSwtLUtlY9+MVT8=)
                          9: ZwvgwSFitJnn0NI2TLMjAG1OYEI.roa (hash: 3EAQTTBdwC0en0ttbPcWmRtInqoUrBVPVbUH2J6E2Tg=)
                          10: i2Cr6PSWUcoNruWdbdR97Em0Dh4.roa (hash: kTy26coV3ftFQPHtpIaAlqr+Ns/2fmpdvjWPntGul4A=)
                          11: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: 0E8wPx3Gp0uwNfq/oaiB+i4nt3QxAZdsRujtW72NHX4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:04:72:6e:a6:6f:dc:69:83:8c:1e:31:91:5a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
        Validity
            Not Before: Jan 31 12:00:37 2025 GMT
            Not After : Feb  1 12:00:37 2025 GMT
        Subject: CN=5d5ef3a9bd0e5d7098bba02d8f716e418e862981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ac:3b:11:5b:6d:75:45:ca:62:9a:bf:ee:8c:
                    7d:4f:73:2c:7f:63:db:12:9d:8f:e2:2a:56:8d:f5:
                    28:20:ee:54:70:d5:9e:ac:b5:6e:82:0b:e8:c1:0c:
                    12:40:af:c7:5c:e6:9e:7a:17:c1:85:3f:36:28:0b:
                    db:e9:5b:a4:54:a5:12:f9:78:f3:14:99:03:02:b1:
                    ee:bd:18:c3:53:d9:68:bb:14:dd:8e:1a:39:65:4d:
                    24:db:a6:53:ca:1a:60:c6:97:2f:80:0e:9a:64:99:
                    54:4b:82:ae:76:fe:b5:bf:3e:ee:df:1f:42:ee:b6:
                    8f:7e:d5:c5:28:da:b8:38:ed:f0:bf:b7:4d:e5:28:
                    44:cc:32:a2:ff:df:4d:3e:db:d3:aa:3a:0d:a5:d8:
                    4f:14:37:aa:69:80:fe:d5:70:cb:80:ac:6e:82:c5:
                    7d:17:04:11:89:b3:90:5a:1f:3b:73:78:ce:b8:b6:
                    e4:92:0c:12:e3:09:27:d8:8a:76:86:58:db:78:cf:
                    5d:26:06:ea:9c:ab:52:b4:07:35:ec:03:85:d9:33:
                    ee:70:22:8f:7e:de:11:5f:12:49:d0:9c:13:95:a9:
                    0f:74:d6:27:06:03:c9:da:54:8d:08:c0:72:a7:0f:
                    72:ae:72:b1:de:4d:c0:78:cb:2e:72:cb:c1:cb:b7:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5E:F3:A9:BD:0E:5D:70:98:BB:A0:2D:8F:71:6E:41:8E:86:29:81
            X509v3 Authority Key Identifier:
                keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0d:71:51:90:f5:e0:f7:d7:04:26:5c:b6:66:f6:e0:ef:62:
         9d:8d:3d:b1:6b:7d:71:05:5b:a2:39:cd:44:3e:80:e5:a4:02:
         40:98:bb:fd:7a:c9:82:e0:22:59:a6:0b:39:87:c1:3f:a1:bd:
         85:5d:8c:e3:9f:c1:7d:e0:91:45:67:29:ad:be:ef:7f:4d:c9:
         4a:75:c3:a8:83:70:71:77:86:34:8e:9c:34:48:98:2a:8a:ca:
         4c:6a:32:eb:c2:84:6e:6b:9d:20:a5:9d:d9:95:15:14:51:b3:
         d9:8e:11:20:bc:f7:0e:a7:c1:d8:32:dd:7d:ce:18:9e:e9:e6:
         d7:c9:93:db:2f:b9:2e:15:86:8b:1f:4a:53:65:89:99:52:18:
         42:47:2c:b2:04:ea:52:39:ee:3f:f2:03:20:24:e4:70:32:dd:
         db:e9:b7:c3:69:3f:d3:50:08:d9:dd:22:cd:8d:7a:a4:63:82:
         80:07:e1:ad:d7:5f:3e:f5:11:56:0e:ad:98:86:9e:dc:a2:fa:
         28:62:38:a0:a4:9d:2e:d9:1b:5d:f2:d4:7b:7e:1e:b5:21:27:
         b7:d1:ef:c8:03:5e:7b:33:26:bf:47:c9:26:84:b5:fe:ed:6f:
         51:0c:eb:c7:b7:fd:2e:75:92:65:c0:b6:77:41:f7:fa:30:a5:
         15:09:79:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:11 2025 by rpki-client