Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
File:                     5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft (raw, json)
Hash identifier:          gP5V3DILb6B8Oordhj0wNPTFJoLepGf+sTLSBIH4PjU=
Subject key identifier:   BA:E7:0A:D6:B5:EA:A4:8E:19:47:F3:C4:5A:72:0D:4C:7B:AC:C5:35
Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
Certificate issuer:       /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Certificate serial:       0194BD4E6577A8F5E64A66763DF981C4165A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 17:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:19 +0000
Files and hashes:         1: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl (hash: 5zAhSlq5+ewu9G1u+fE9ydLNOuIQh9iMY0BmYTYGaj4=)
                          2: Sl8BbPDt6kdls_K1R2Dh5Z2l9ss.roa (hash: FohmZC9RjfkLWGSkIiIa2VtU1w5u6RfcN+tDaynMZcc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:65:77:a8:f5:e6:4a:66:76:3d:f9:81:c4:16:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
        Validity
            Not Before: Jan 31 17:00:19 2025 GMT
            Not After : Feb  1 17:00:19 2025 GMT
        Subject: CN=bae70ad6b5eaa48e1947f3c45a720d4c7bacc535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:ad:c9:f2:ba:a4:ff:12:4a:01:81:f1:7e:
                    d2:43:e2:51:b7:7e:f6:35:91:34:51:c4:b8:02:33:
                    d3:93:74:96:78:02:24:0f:0f:d3:d0:64:75:be:4c:
                    37:c9:dd:95:88:4a:ae:98:65:cb:a5:b6:94:31:15:
                    24:a2:ef:9c:a6:90:09:3a:21:b4:7a:82:55:43:04:
                    2d:aa:3c:6b:15:27:84:27:1f:55:5c:8c:13:6c:63:
                    a4:0e:41:d5:4a:63:ad:b6:c8:cb:91:26:a6:58:8c:
                    11:ef:d1:fc:62:73:82:71:05:b1:38:88:0a:a6:2b:
                    e5:4f:48:af:1b:4a:40:1c:f1:10:1c:4e:01:b4:80:
                    8e:d6:26:0d:7a:b9:96:0b:5f:8d:63:0d:fc:ba:fd:
                    f8:3d:ed:69:c9:f0:32:80:b3:80:92:48:a9:57:72:
                    62:ef:56:9d:da:c0:83:46:82:40:eb:a2:3b:54:cf:
                    ca:81:f0:d2:26:9d:be:18:17:d3:54:8a:82:48:77:
                    fa:a3:bb:70:33:16:5c:0c:d6:57:50:01:a1:8f:f8:
                    00:25:2b:24:8c:77:65:5f:d5:48:2e:76:a5:ed:60:
                    c3:8d:c2:6b:d9:02:d6:b6:a5:34:f4:22:d2:0f:98:
                    6d:08:9c:b4:43:c0:69:b3:c4:c8:43:d3:9e:47:c3:
                    56:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E7:0A:D6:B5:EA:A4:8E:19:47:F3:C4:5A:72:0D:4C:7B:AC:C5:35
            X509v3 Authority Key Identifier:
                keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1e:25:90:ea:32:b0:be:90:b2:eb:fc:01:e4:b9:e2:64:d4:
         cd:64:ae:ef:e7:ee:0f:5a:47:01:aa:00:55:40:0b:a2:24:a7:
         6e:36:cb:7a:8e:7d:e6:23:97:9d:9a:eb:9c:45:eb:e9:a3:a4:
         b3:9f:37:9e:f2:e1:39:0e:38:03:d0:ea:96:d4:e1:39:db:78:
         20:ae:9f:6a:b3:91:fb:c6:84:9f:03:8d:6d:38:23:40:2c:42:
         cc:0d:65:dc:59:8c:83:2d:59:8d:34:91:d3:91:be:40:77:14:
         d7:da:e8:b5:62:16:9f:c9:f0:89:7b:c0:9a:a6:3f:c5:2c:fe:
         54:5b:b4:af:86:72:87:08:9f:19:9b:42:4d:d3:71:d2:32:88:
         43:f6:93:6a:a4:ad:41:d5:9a:7e:0a:50:0a:10:97:af:96:41:
         db:5d:7a:32:4a:df:87:a2:a6:97:93:ff:09:e3:50:40:e7:c2:
         1b:94:5e:b9:09:21:91:a3:5e:e7:7d:61:df:91:d0:bd:24:a3:
         62:bf:64:a4:f4:01:fe:af:2d:fe:a7:ec:07:54:94:e9:d7:ab:
         fb:d5:ed:2c:36:89:73:fd:12:d6:c5:e9:9b:5a:9b:f7:e4:00:
         e5:be:35:94:a6:da:e5:27:cc:1c:08:2c:78:4b:56:26:9b:a9:
         a1:4b:f3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:12 2025 by rpki-client