Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File:                     jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier:          C8rQPXkFM0WkWmCM3fUOfQ8dZiwILb3cDLxI/VE+gmo=
Subject key identifier:   1C:01:A1:45:48:FC:6E:5D:90:BD:76:A2:BD:5F:7F:99:2E:8D:84:66
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer:       /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial:       0194BD17838F0448BF352C0A48C6F065C8CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number:          137C
Signing time:             Fri 31 Jan 2025 16:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:22 +0000
Files and hashes:         1: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: q9ErXVCnABCtV6Me768/y3+KTlJPSQ3KIpAu4iTcyJ0=)
                          2: kPouSigkCfrRHoMg7De2TJT88UA.roa (hash: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:83:8f:04:48:bf:35:2c:0a:48:c6:f0:65:c8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
        Validity
            Not Before: Jan 31 16:00:22 2025 GMT
            Not After : Feb  1 16:00:22 2025 GMT
        Subject: CN=1c01a14548fc6e5d90bd76a2bd5f7f992e8d8466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:3d:0f:35:77:1a:1e:1a:30:e4:60:a6:05:
                    55:20:c0:18:ea:4e:51:19:45:13:e6:d9:66:9e:f2:
                    b2:9a:d3:00:f6:26:0e:65:e5:0d:97:c8:33:e3:18:
                    0b:ae:0e:cb:b4:31:d4:73:e2:2c:6e:74:89:bb:4c:
                    ed:99:f8:69:be:d6:a5:00:c5:02:a5:e9:bf:02:a9:
                    31:52:85:41:91:a3:76:42:e6:ed:52:6e:37:be:8a:
                    9a:bf:65:9f:20:a5:c6:3f:52:9e:8c:c9:d1:5d:08:
                    52:49:9e:ff:ab:92:5f:c6:c5:72:65:ce:47:c5:e0:
                    d6:c8:d8:4d:86:df:67:81:cd:ce:ef:ed:69:d2:54:
                    54:a1:73:86:59:bb:a4:01:ce:07:75:84:68:56:5d:
                    42:d3:e4:3d:20:55:2d:fb:f1:aa:49:27:6c:d1:cc:
                    24:dd:4f:c3:96:0b:e3:e2:79:a2:94:1f:17:09:e5:
                    b3:54:33:30:a0:69:25:6a:52:0f:e8:7f:d2:fa:7b:
                    76:6f:0d:cb:a5:56:33:d0:a5:dc:df:65:7d:3f:00:
                    84:92:8d:28:ed:c0:64:24:f0:82:03:9e:7c:ed:7d:
                    cf:63:51:24:28:bd:ed:e9:33:f8:50:1a:8d:4d:9d:
                    d0:d5:f8:52:93:50:80:65:48:7e:3f:74:9c:36:5b:
                    58:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:01:A1:45:48:FC:6E:5D:90:BD:76:A2:BD:5F:7F:99:2E:8D:84:66
            X509v3 Authority Key Identifier:
                keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a2:3b:e4:fe:7a:8a:cf:34:a7:9f:81:d2:db:9d:49:bf:26:
         9e:5c:40:97:b8:ca:88:5d:2e:a8:60:1c:4d:a9:2a:66:2a:9a:
         3f:bf:a1:53:1e:db:f3:b7:e1:41:bd:af:3e:44:85:81:4b:32:
         45:e9:d2:7d:97:2b:76:1a:c9:5f:3e:39:cf:a0:80:9f:44:3e:
         2d:91:ab:b4:4c:81:21:5e:b4:6f:1e:75:f6:d8:12:a3:c2:85:
         68:9f:ef:81:f6:ff:55:a3:d2:bd:a0:dd:60:1c:56:4a:d9:30:
         7b:8e:26:2a:c9:29:16:d7:07:5c:ee:37:a8:a5:53:cd:86:0b:
         d1:ba:16:64:bd:d7:a0:57:e7:7c:aa:a3:82:05:2a:a8:2f:7d:
         7d:06:f5:94:27:b3:17:bc:16:86:4a:60:8f:11:77:1d:42:e1:
         fd:ca:7d:2a:4c:66:3e:28:48:40:9a:df:75:03:ac:57:b7:68:
         fc:6b:f3:c1:5a:5f:d5:4b:be:94:c7:2d:78:2c:53:2e:a7:06:
         92:c5:0e:a2:66:9f:c8:de:ca:b3:13:c7:68:24:41:bb:5c:35:
         e7:90:cf:62:d5:47:5a:c4:da:87:03:a9:73:a0:79:0e:2e:c9:
         54:cc:e1:d0:30:98:8d:c8:9c:72:26:77:bd:75:93:7d:32:35:
         77:ec:dd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:43:21 2025 by rpki-client