Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File:                     3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier:          htkFyGSVcu6cWm6TXyZO6ewAEb87S5sv0jAUyxqg0jU=
Subject key identifier:   60:E6:DB:7B:61:B9:38:15:A8:6F:EA:9C:A0:16:63:69:A3:65:4B:29
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer:       /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial:       0194BC0519F7F5319ADB91B15D928241CCC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 11:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:38 +0000
Files and hashes:         1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: +kXAvBoWvrwcbQ6rykLbCxmgHP+UTyyhRE3wi/T6jZc=)
                          2: aUaxmc4yn8DWQgssucohLW2GTOs.roa (hash: SOdn4BM+lJeHsX2EdSBfNJjI/S1sYp7gdR+GcCunEpg=)
                          3: v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa (hash: 0sTmm1OvDNHW8cfRGw9gOppSFK5VfYqSrXVw8T0yJBM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:19:f7:f5:31:9a:db:91:b1:5d:92:82:41:cc:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
        Validity
            Not Before: Jan 31 11:00:38 2025 GMT
            Not After : Feb  1 11:00:38 2025 GMT
        Subject: CN=60e6db7b61b93815a86fea9ca0166369a3654b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:53:65:23:11:42:96:ce:eb:8c:6a:c9:68:20:
                    c6:94:12:f4:58:c8:a0:a5:36:7e:89:50:44:ba:ba:
                    71:6b:a5:f6:80:5a:a4:c8:e8:d3:71:5b:55:04:2c:
                    ce:22:ef:d0:ce:7a:65:16:65:f7:84:8b:3e:79:d7:
                    f7:bf:19:53:1c:f2:e4:92:e6:44:23:68:6a:4d:12:
                    39:b6:bf:02:8f:72:b2:a2:96:48:55:2d:4f:1f:50:
                    85:9e:0a:82:f2:41:e1:5b:a7:25:fe:9a:8b:61:a1:
                    1e:07:3f:8b:ba:2c:e2:b9:32:b8:59:c0:4b:07:94:
                    cb:46:de:3c:dc:e9:25:33:60:8b:ec:10:74:ef:61:
                    f4:96:95:9b:bc:ca:69:d8:ce:0a:9b:9f:26:ab:0c:
                    1c:c4:b4:15:7a:90:96:5f:d3:90:57:18:31:3c:2f:
                    e0:3f:1b:1b:d9:f2:dc:70:cb:d4:93:37:eb:e7:41:
                    2f:a3:63:1d:e9:8b:55:3e:00:8c:4b:0e:1b:94:54:
                    3c:6f:ef:b6:83:0a:0d:78:61:64:95:ec:7f:0a:da:
                    09:23:c7:46:b1:4c:63:87:04:3e:5b:ac:52:db:5b:
                    58:2c:ee:1e:ab:35:20:8f:91:81:e9:f1:48:f9:6e:
                    d1:63:aa:72:f0:07:4c:ca:c3:3b:1f:09:cd:91:4c:
                    e3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E6:DB:7B:61:B9:38:15:A8:6F:EA:9C:A0:16:63:69:A3:65:4B:29
            X509v3 Authority Key Identifier:
                keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:70:93:b8:07:be:93:c3:62:8a:13:03:9a:a4:3b:fa:b1:ca:
         c6:f8:94:5e:38:c3:21:94:77:12:79:33:18:3a:7b:ea:f2:28:
         fc:ce:13:a5:1c:7f:e3:22:9b:28:05:5d:e3:50:52:4e:8d:ff:
         cd:81:dd:2e:e2:ad:d8:a8:e7:92:e2:37:8b:ef:6c:2a:5c:64:
         14:73:36:e2:23:2d:01:72:09:cd:76:f3:23:49:38:18:ec:8c:
         c9:07:61:10:f5:b3:f8:57:ed:ba:8f:b0:83:77:ce:80:99:bf:
         21:c0:12:08:d1:6d:c6:45:fc:53:cf:f3:38:53:2c:f7:4a:af:
         a5:de:2b:a9:42:6b:69:f1:d9:00:a1:17:7b:26:8d:64:a0:cc:
         bd:69:d6:14:38:dc:84:33:18:34:60:03:b3:fa:87:89:0e:2a:
         fb:ab:96:c3:a5:0e:e6:e9:17:b8:f4:a2:d3:1f:76:44:98:d9:
         28:bc:46:8e:99:a2:6c:1e:ae:1f:68:bf:8a:e1:68:f1:ae:2d:
         ce:e6:b1:6d:28:b3:0c:7a:99:ac:92:e0:33:f4:8f:50:e0:10:
         ed:47:52:90:e8:2d:36:5f:a4:ba:48:93:4e:82:df:3e:96:79:
         79:e1:a9:43:f0:da:d6:64:15:47:53:2d:06:72:72:a7:dd:1b:
         17:d1:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:27 2025 by rpki-client