Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft
File:                     q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft (raw, json)
Hash identifier:          4CHdUXkWpWP5plF8QseLn3JkBeob5UOrvSiSmKN5sBs=
Subject key identifier:   AF:7D:E4:BA:41:4D:15:62:A3:AC:64:6E:E1:3A:4B:C1:8A:3A:6C:16
Authority key identifier: AB:E5:E2:EB:17:0E:0C:2A:B8:61:DB:30:8D:BB:CB:2A:5F:D5:F1:8D
Certificate issuer:       /CN=abe5e2eb170e0c2ab861db308dbbcb2a5fd5f18d
Certificate serial:       0194BCE0AAB36D9DC6B9E6970C1282EF94B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q-Xi6xcODCq4YdswjbvLKl_V8Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 15:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:27 +0000
Files and hashes:         1: q-Xi6xcODCq4YdswjbvLKl_V8Y0.crl (hash: JLI+zJS3wZZh0evvhUTOfl81DEtrLpapOwStxJz6INs=)
                          2: xChf9A_N8i1Y-nmN3otjqmSP2CQ.roa (hash: YXfBqL/9rFbgkHeHIfD9G67AJfbSThLniWF1vpJKMDA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:aa:b3:6d:9d:c6:b9:e6:97:0c:12:82:ef:94:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abe5e2eb170e0c2ab861db308dbbcb2a5fd5f18d
        Validity
            Not Before: Jan 31 15:00:27 2025 GMT
            Not After : Feb  1 15:00:27 2025 GMT
        Subject: CN=af7de4ba414d1562a3ac646ee13a4bc18a3a6c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:f7:55:22:4f:4d:f9:f5:4c:cd:58:1f:78:
                    7b:eb:0a:8c:42:57:68:12:f3:70:80:17:d0:91:24:
                    e0:76:c9:9b:7a:ae:6d:ef:56:b8:99:40:fc:3b:9f:
                    27:35:2a:47:3a:9d:4f:9a:7c:3a:c4:c4:da:be:dc:
                    de:39:fd:b5:e1:78:35:cb:05:2a:19:47:f2:cb:39:
                    72:66:68:61:80:6a:80:59:e3:df:46:99:13:f2:ab:
                    c2:83:6a:1c:b0:b3:b2:e5:f5:bc:77:43:4b:b5:99:
                    d3:1e:b1:db:d3:ed:47:11:d6:d3:94:9e:45:05:74:
                    ca:66:3f:ac:f0:bd:2d:ab:ec:f6:ec:de:98:c6:39:
                    6f:c6:94:42:53:6c:fa:c1:f7:0d:a0:3a:e5:6d:8a:
                    a8:18:3d:be:6a:cf:b1:a3:77:21:7f:58:35:53:ca:
                    04:67:da:5f:64:72:17:e4:eb:33:40:7d:cc:fb:d5:
                    28:ab:20:a7:f5:bf:c1:bc:fc:9e:7d:af:3a:e3:01:
                    b3:2d:85:ab:5e:8e:85:56:3d:9b:79:e2:e8:e9:82:
                    aa:c9:49:87:19:ba:1a:c1:76:7f:73:0a:f6:0d:65:
                    83:71:9d:80:f9:d7:de:9b:b5:1f:56:1d:df:75:3a:
                    9f:0c:8d:a4:08:7c:4b:7a:75:1a:d8:63:90:f0:44:
                    e9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7D:E4:BA:41:4D:15:62:A3:AC:64:6E:E1:3A:4B:C1:8A:3A:6C:16
            X509v3 Authority Key Identifier:
                keyid:AB:E5:E2:EB:17:0E:0C:2A:B8:61:DB:30:8D:BB:CB:2A:5F:D5:F1:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-Xi6xcODCq4YdswjbvLKl_V8Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:3f:df:32:40:1d:cc:2c:63:78:d9:b3:39:ab:19:e9:05:1e:
         fa:38:d1:19:a8:82:ff:e9:43:bd:9a:05:36:31:0b:7e:34:8c:
         9b:60:95:e0:b6:9a:6a:95:b1:07:26:47:9b:db:46:25:85:3c:
         2e:cc:c7:73:0f:da:3b:41:82:8b:7a:28:75:d3:f3:71:c4:e9:
         dd:d7:6d:87:9f:be:02:93:21:39:c2:c1:03:da:91:ce:16:8f:
         3a:8a:97:79:e1:71:7c:be:6e:a4:38:48:73:0a:ce:c6:c1:11:
         f1:0a:43:4c:bc:e6:e0:fa:b8:25:b3:da:a0:90:80:a4:36:1e:
         68:b4:e7:18:09:3b:b8:dc:6f:df:9f:31:a2:48:e7:ed:84:59:
         83:19:71:67:6a:fb:b2:01:79:c7:69:91:7f:4c:42:be:c8:90:
         e0:f8:5e:58:ef:c0:7c:4d:65:7e:30:80:40:d3:4b:1a:94:42:
         05:1c:30:09:59:58:35:6c:87:af:01:37:40:38:87:07:96:ea:
         5b:29:1c:53:4d:ff:17:fe:3a:b3:29:8f:bc:80:e1:4f:1c:59:
         93:b3:6f:ec:cb:b9:ea:6e:9f:2a:6e:8f:d8:7e:6f:f3:64:c3:
         8c:a1:43:69:54:c7:89:f2:ad:ec:2b:cb:bb:c1:f3:ff:33:59:
         c4:70:b4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:10 2025 by rpki-client