Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
File:                     4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft (raw, json)
Hash identifier:          u3Ai8li0p2FDAnSCEDVZz5Bmg0n47j7xMcW3ItpQDHA=
Subject key identifier:   24:76:94:61:87:B0:2F:FB:12:0D:30:AC:9B:C3:6D:44:D8:CD:1D:A4
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Certificate issuer:       /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial:       0194BCA9DE9EE2FCE6A5F9F76D4E288C05EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
Manifest number:          0A50
Signing time:             Fri 31 Jan 2025 14:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:36 +0000
Files and hashes:         1: 4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl (hash: OFMZNe2/fXNyXjHDnwcgMjR0bI0JIBRYJDStOoVEOx0=)
                          2: CCavKhP7AEj7Vk_SGWe1jvcCRyg.roa (hash: ErCh+iOQog12EmBkEQOKm5CnYVqmDx85/Bq5syDjRtk=)
                          3: _UE4NiO0pfWfFFAbb7iwrwRdv6s.roa (hash: Nt6mUmB/b8Tz/UtmdUFBFCY+JhXJPjG/PVld3xk2bu0=)
                          4: hNzhsJdSXiT8XXk4l8WcnUMry00.roa (hash: y9TrG3MRhc+YaHxz1FlPh4FWDR2QP4R98mul7cPcOWM=)
                          5: sJD4QxX177UEmI36HO3Czbd6lZo.roa (hash: eB1LP6A5y8Zxb2lEo5Jx2JKKRWjFRnxR3igeTvfMlBE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:de:9e:e2:fc:e6:a5:f9:f7:6d:4e:28:8c:05:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
        Validity
            Not Before: Jan 31 14:00:36 2025 GMT
            Not After : Feb  1 14:00:36 2025 GMT
        Subject: CN=2476946187b02ffb120d30ac9bc36d44d8cd1da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:61:c3:95:a8:46:d2:ad:7c:f1:ae:65:0a:5a:
                    ca:14:6c:3a:f8:ea:9b:75:10:90:37:dd:97:78:79:
                    d0:0e:71:ac:59:27:5b:bd:64:5f:f6:a8:d0:de:50:
                    f0:85:8c:1b:76:ec:52:20:63:70:3b:9f:66:fb:68:
                    be:32:ff:06:e6:ce:79:b2:9a:bd:5e:c3:3e:f9:92:
                    5c:ec:a7:e1:ca:64:f2:9d:0e:7d:be:96:62:d6:2e:
                    e9:13:6d:a7:29:e3:99:ea:96:77:a4:da:6b:21:ac:
                    bd:f5:8f:7a:e6:fd:c2:8a:38:a8:3c:29:63:14:f0:
                    59:7e:eb:dd:12:73:aa:2f:8a:31:18:48:29:84:2e:
                    66:d3:9b:ce:7c:4f:c8:0e:16:e7:9c:23:a6:fd:09:
                    78:51:8a:ae:c7:86:f0:e6:48:51:6c:ad:1c:b4:11:
                    f8:05:7a:dd:9a:9f:9b:9d:76:5e:4b:5c:43:aa:8d:
                    27:34:ac:7e:9c:6b:cf:50:65:36:22:a9:4b:5f:61:
                    34:4c:dc:d7:76:8a:1e:de:d0:8f:68:d3:c2:52:c8:
                    50:72:13:5e:c6:61:90:c5:05:2d:8c:2e:95:67:bd:
                    04:c4:e3:c6:4a:e4:d9:88:53:c9:de:85:e8:d2:44:
                    66:9f:2b:82:eb:1a:7f:f2:f9:85:2a:61:22:0a:73:
                    e2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:76:94:61:87:B0:2F:FB:12:0D:30:AC:9B:C3:6D:44:D8:CD:1D:A4
            X509v3 Authority Key Identifier:
                keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:2d:3c:57:89:46:cd:83:7d:37:18:8c:8a:e0:0c:ae:b9:48:
         bc:5a:a7:df:6b:27:63:9f:cf:78:79:54:36:10:13:86:00:24:
         e0:eb:b3:d4:9b:ac:16:af:12:5a:4a:2c:b0:57:a8:a3:b3:ee:
         7e:d0:ab:cb:36:83:24:29:4e:4f:02:64:21:5f:6b:75:43:d7:
         c1:3e:d8:70:0a:01:4c:67:9b:ce:bd:0a:42:93:67:51:71:76:
         15:96:52:5c:a3:9a:ce:2d:e1:11:18:88:ce:0c:33:3c:98:4e:
         d5:53:f5:34:5b:64:e2:9f:64:e0:23:b1:29:3a:ac:5d:02:aa:
         51:3d:b1:42:0a:78:1c:04:fa:84:4c:31:c3:55:47:2f:35:ff:
         b2:da:db:c1:c0:ae:c7:73:01:eb:92:70:42:f5:c3:b7:99:ae:
         02:7e:2d:31:b1:e9:1d:64:b3:b7:78:09:7c:97:ea:07:1f:18:
         5a:53:27:00:84:91:74:74:8f:f1:24:41:c3:0b:76:34:ea:f4:
         de:d6:93:aa:81:86:38:4f:be:5d:9a:ba:7b:a1:3b:6c:48:fe:
         d8:5c:d6:87:e5:77:5e:71:1d:72:6c:5c:ed:ed:ed:2e:d6:e0:
         2e:b4:42:bb:e6:6d:e7:7d:11:a8:33:5c:54:bb:15:3e:72:ea:
         5c:e8:ab:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:57 2025 by rpki-client