Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/599366-b524-456b-bfaa-10f597928806/1/EJh-dKTaRf5Z5q73zyeF6gEN4Vs.mft
File:                     EJh-dKTaRf5Z5q73zyeF6gEN4Vs.mft (raw, json)
Hash identifier:          tLTt4cznDmFtd/NgTtWKybV/2PoP+kbTuZT8PH7Puxc=
Subject key identifier:   02:0E:B7:C9:4E:3F:40:49:14:92:39:9E:19:B9:99:2D:A0:C8:49:79
Authority key identifier: 10:98:7E:74:A4:DA:45:FE:59:E6:AE:F7:CF:27:85:EA:01:0D:E1:5B
Certificate issuer:       /CN=10987e74a4da45fe59e6aef7cf2785ea010de15b
Certificate serial:       0194BBCDDBA9AB0F3196277546C117006A58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EJh-dKTaRf5Z5q73zyeF6gEN4Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/599366-b524-456b-bfaa-10f597928806/1/EJh-dKTaRf5Z5q73zyeF6gEN4Vs.mft
Manifest number:          139B
Signing time:             Fri 31 Jan 2025 10:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:17 +0000
Files and hashes:         1: EJh-dKTaRf5Z5q73zyeF6gEN4Vs.crl (hash: eTyy1rzTcMzNIe5T8v+e4IgMDPMG8fWADOCFImAh7nw=)
                          2: GX55OM1YBP_pyJD3-MXlaRI1Hig.roa (hash: EW/1fbHbHmkY6Ap4m06Z13l9mlZBTHQTXTCytU9lMBA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:db:a9:ab:0f:31:96:27:75:46:c1:17:00:6a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10987e74a4da45fe59e6aef7cf2785ea010de15b
        Validity
            Not Before: Jan 31 10:00:17 2025 GMT
            Not After : Feb  1 10:00:17 2025 GMT
        Subject: CN=020eb7c94e3f40491492399e19b9992da0c84979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:57:6b:a2:f3:89:9a:2a:3e:51:b3:88:58:bb:
                    c1:1b:25:30:43:cf:97:e7:e8:12:48:09:1d:37:17:
                    10:e9:62:a9:e6:22:19:f4:a7:a9:42:fb:b7:ea:72:
                    53:29:ab:cb:7d:38:06:47:0d:1b:63:7c:72:58:b3:
                    13:e8:e9:64:db:0d:4d:c2:3b:92:67:d4:e5:29:03:
                    ba:6a:f3:21:32:b7:03:fb:f1:8d:b5:8e:ff:0c:45:
                    5a:d2:94:9e:0c:3a:23:a2:73:78:6e:97:21:83:d5:
                    51:d7:89:91:36:d6:be:eb:34:fe:d0:62:f6:86:cc:
                    89:73:6e:35:ae:db:83:73:ba:a3:f7:90:9c:9a:3a:
                    c4:1d:4b:c0:02:7e:cb:ca:2a:9d:21:e8:5c:1c:2e:
                    a2:3c:80:d7:b3:e1:79:01:ad:ad:af:26:d8:51:6a:
                    ae:f8:0e:b3:e5:e5:84:be:a2:24:38:dc:64:df:f4:
                    02:ea:01:31:15:7e:c4:21:7d:56:a4:4f:65:7d:81:
                    b1:38:d8:bd:9b:90:d1:cc:46:a3:ba:c0:df:13:73:
                    25:64:14:3e:4b:ec:4b:c6:ca:ee:22:c3:df:c8:d4:
                    23:37:ad:ca:a7:02:78:36:14:b2:f4:59:59:29:40:
                    80:77:e8:ad:83:8b:f4:32:87:44:f8:fd:ab:57:be:
                    6b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0E:B7:C9:4E:3F:40:49:14:92:39:9E:19:B9:99:2D:A0:C8:49:79
            X509v3 Authority Key Identifier:
                keyid:10:98:7E:74:A4:DA:45:FE:59:E6:AE:F7:CF:27:85:EA:01:0D:E1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJh-dKTaRf5Z5q73zyeF6gEN4Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/599366-b524-456b-bfaa-10f597928806/1/EJh-dKTaRf5Z5q73zyeF6gEN4Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/599366-b524-456b-bfaa-10f597928806/1/EJh-dKTaRf5Z5q73zyeF6gEN4Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:34:e2:ee:ef:1f:4b:0f:30:19:04:9c:cc:67:f0:ba:e0:f8:
         a2:52:0e:01:f5:dc:cd:74:63:8c:e4:67:cd:44:33:3a:f4:63:
         72:cd:91:47:86:42:ae:49:f6:35:12:cf:7f:6e:bb:b1:04:c5:
         f0:ee:a3:48:c2:06:cb:ae:16:f9:d6:03:fc:31:c9:a0:71:ad:
         ba:fb:f9:57:94:04:1c:d1:3c:eb:47:54:29:50:84:9c:09:1d:
         2d:d9:31:da:d4:71:68:f0:42:22:f5:55:19:ff:31:a3:2c:47:
         a9:d6:49:30:20:24:2a:0f:a6:60:f0:db:c4:00:7f:a4:71:fb:
         29:70:bc:39:aa:c0:a2:bd:9d:2f:20:6a:3e:79:5d:80:9e:78:
         93:39:1b:11:ad:d2:60:c8:14:eb:a7:50:64:ef:fa:fc:a7:48:
         56:ba:bf:02:ca:0a:70:97:d9:06:96:2b:ff:87:83:67:47:75:
         47:d6:9e:7e:18:61:20:18:04:01:95:29:c9:50:bf:b2:88:e0:
         e7:04:7b:7d:d1:4b:31:bf:b2:d5:53:06:db:4c:aa:14:f2:d8:
         04:a5:32:ab:d8:e9:8b:c1:17:42:34:68:50:fe:75:37:58:0b:
         6b:0a:e3:0e:01:2f:02:b2:aa:06:2c:62:06:3c:62:27:bf:55:
         a6:09:2f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:27:29 2025 by rpki-client