Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
File:                     dYeEkqBny1o-35aVpv0lifMnOqc.mft (raw, json)
Hash identifier:          UkJlRc46nd+N4ufFiwOu7Y4YH9Dmu62X+av9YomXtws=
Subject key identifier:   CB:9F:D0:A9:3F:3B:55:4C:ED:24:91:F0:BE:2D:F1:09:B6:C5:D9:C8
Authority key identifier: 75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7
Certificate issuer:       /CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
Certificate serial:       0194BBCEE7471B4A2E63780BCF9392C37E33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft
Manifest number:          03E2
Signing time:             Fri 31 Jan 2025 10:01:26 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:26 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:26 +0000
Files and hashes:         1: dYeEkqBny1o-35aVpv0lifMnOqc.crl (hash: H0nHK0l24pH2B1n+MIjjw/U4iJP/Z+2GekHLabdSmjI=)
                          2: sxE--2M3-CEKutD7kc3XYk7SzFw.roa (hash: B/i9pHkpIcvuAMYO5sH2j+DVrgIPQA4C6/72qRik9/Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:e7:47:1b:4a:2e:63:78:0b:cf:93:92:c3:7e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75878492a067cb5a3edf9695a6fd2589f3273aa7
        Validity
            Not Before: Jan 31 10:01:26 2025 GMT
            Not After : Feb  1 10:01:26 2025 GMT
        Subject: CN=cb9fd0a93f3b554ced2491f0be2df109b6c5d9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:64:18:82:f6:bf:08:f6:b8:d3:a4:f1:8d:
                    04:e5:fd:0b:4f:97:65:39:54:54:e5:eb:64:c7:e1:
                    f6:f5:7e:be:6c:e7:66:bd:a1:5e:e2:5d:1a:25:04:
                    0d:64:55:44:77:69:ec:bb:43:f6:9f:92:74:8d:46:
                    96:26:87:7c:26:65:8e:38:a1:50:d9:a5:14:40:ec:
                    e9:d4:73:fd:31:b9:6f:2d:24:69:a7:ca:73:cb:b1:
                    fa:15:79:a6:6b:0b:10:1f:0f:ae:92:6c:79:ab:bb:
                    95:14:06:bf:5c:57:5f:e6:cc:05:24:2d:b5:91:09:
                    49:b9:5a:37:15:d6:36:55:7b:1e:7c:a4:86:d7:f8:
                    59:2f:f4:24:82:d0:54:68:04:52:98:e6:55:bc:19:
                    2c:cb:28:f4:a1:a4:86:67:91:6b:20:e0:df:23:44:
                    8b:2d:bd:ff:dd:e4:56:77:70:f1:1e:48:79:9b:8d:
                    93:3a:4f:ba:26:92:ab:51:b8:31:96:45:52:fc:a5:
                    db:06:7b:3a:6e:09:c4:ac:75:57:53:f5:49:cd:31:
                    44:37:b7:2d:9d:70:57:7d:59:86:25:94:c2:41:0e:
                    31:be:06:47:4a:37:32:8d:45:a6:8a:c0:24:10:17:
                    5a:7d:05:b4:73:d2:9e:6f:81:7c:89:a0:8e:c8:3c:
                    10:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9F:D0:A9:3F:3B:55:4C:ED:24:91:F0:BE:2D:F1:09:B6:C5:D9:C8
            X509v3 Authority Key Identifier:
                keyid:75:87:84:92:A0:67:CB:5A:3E:DF:96:95:A6:FD:25:89:F3:27:3A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeEkqBny1o-35aVpv0lifMnOqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f1be77-e878-46e8-a875-d09fee09ccb1/1/dYeEkqBny1o-35aVpv0lifMnOqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:83:c1:d0:53:bb:34:6c:3c:ee:02:d2:a3:be:15:e2:60:b7:
         1b:81:b4:fa:17:b1:4c:eb:55:15:44:cd:98:2a:ce:b9:f7:64:
         20:3d:92:49:dc:89:33:31:c5:02:2c:df:c1:12:2d:ee:e7:c3:
         6f:b0:fc:81:8e:5a:fe:24:fa:79:e3:57:d3:c1:b7:c2:e3:ab:
         54:1f:82:21:05:25:19:9c:f2:95:30:04:64:c3:d8:5e:35:67:
         5f:46:01:82:42:87:e1:60:72:53:be:a0:b5:b7:fd:20:3e:67:
         d6:ac:85:54:03:96:64:f2:15:b7:a5:22:e3:20:41:01:e2:40:
         11:aa:d2:d5:7a:a6:f3:1f:b8:dd:76:bc:ec:c5:a3:81:e6:4d:
         57:54:8c:88:97:a1:b3:a1:05:e4:80:e9:b9:4c:bd:cd:1d:03:
         bf:7c:59:4a:eb:ac:6b:4f:9b:35:c2:fc:fe:ac:53:f4:09:7d:
         cf:9f:46:50:a6:a1:4a:9e:6b:6c:e6:fc:5b:e5:df:f7:c4:b0:
         99:68:21:29:b4:b0:15:c4:1a:e7:8e:13:c4:92:32:ca:5a:99:
         5c:40:bb:c5:c4:02:9f:65:a9:be:b6:90:e1:5c:b7:7d:b2:18:
         45:65:c8:ce:ad:ff:16:3e:e6:59:cc:c6:93:03:4e:d9:2e:a4:
         3d:5d:f2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:24:57 2025 by rpki-client