Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File:                     DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier:          1VlIkJzmD5IBSiZ5/mjW+w4Wvp1Ed4nQFkOWrr3kdNM=
Subject key identifier:   FB:08:69:1E:BF:39:65:EC:13:FE:E0:5B:7A:2D:53:0A:F5:21:46:10
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer:       /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial:       0194BCA9D1DC83D42F29BB10246050227087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number:          0245
Signing time:             Fri 31 Jan 2025 14:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:33 +0000
Files and hashes:         1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: 5rQ1nWLf5NLETBCbSp2g9AewiSti3a6YnNQ4bhJooBU=)
                          2: H09sImQpPd7oxswyyMfYCrHeDVg.roa (hash: F88ZTfKzhXNpAdlmJ7zmMSZP6dr7sViXeL2PLZiWpvA=)
                          3: Xy-GvzWZoQ4DZimCZXffSq7urSs.roa (hash: ueXh7ktY0jc26A3LbRVHrwaonrcTqoMtDjp0hV9hqJU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d1:dc:83:d4:2f:29:bb:10:24:60:50:22:70:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
        Validity
            Not Before: Jan 31 14:00:33 2025 GMT
            Not After : Feb  1 14:00:33 2025 GMT
        Subject: CN=fb08691ebf3965ec13fee05b7a2d530af5214610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:39:c0:2d:c9:dd:77:6a:28:4c:6f:ba:a3:
                    99:0a:cc:21:c2:74:97:87:1d:fb:e8:73:ca:2f:d8:
                    d1:17:3e:10:09:82:cf:5d:90:ec:4b:33:16:a9:16:
                    50:8d:9e:6b:bc:15:f5:46:af:f1:7e:32:b0:db:d5:
                    27:15:bf:aa:a0:12:7e:82:fa:a2:6e:77:63:4f:18:
                    7d:26:de:0c:1c:72:26:db:fc:cb:00:1f:f6:9e:8f:
                    b4:fb:e2:c5:e4:44:1c:06:da:e5:5c:d1:11:aa:ac:
                    bc:23:7d:2a:2e:1a:95:0b:70:92:fb:ae:8e:6a:6a:
                    23:62:6d:6b:00:72:89:44:16:3d:c6:e2:4d:cb:8f:
                    10:d4:5d:ef:0d:a3:43:88:0a:bc:4b:68:d9:8e:58:
                    40:a6:97:6c:fd:7e:7c:ce:b2:ac:02:9e:cc:38:ab:
                    ef:f2:9b:82:ce:78:ee:fc:0f:11:1e:e2:96:44:cc:
                    8f:a7:51:5e:67:c8:21:c8:79:df:d3:37:f8:47:63:
                    72:62:0e:29:6b:5b:cd:da:d8:84:b7:e1:7d:16:d1:
                    c8:68:08:2e:d5:ac:50:59:28:d1:22:b2:82:e2:dc:
                    67:64:53:17:64:5f:1f:ab:16:ee:ef:ab:f9:51:d4:
                    64:06:7f:b9:2f:63:31:a0:cc:0c:1c:af:5e:ce:01:
                    61:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:08:69:1E:BF:39:65:EC:13:FE:E0:5B:7A:2D:53:0A:F5:21:46:10
            X509v3 Authority Key Identifier:
                keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e7:d5:92:5c:8e:ee:c6:f6:ae:a2:01:e5:65:94:e5:b0:c0:
         10:70:f7:39:26:4b:9f:34:41:67:3f:0a:de:d8:aa:f9:44:ea:
         9d:8d:d0:7b:d6:49:6a:99:0b:6d:e6:dd:78:2a:47:4d:d6:36:
         d3:a8:b0:c0:2f:6a:a9:56:4c:92:6b:9a:fe:06:dd:ee:95:aa:
         e1:02:9d:cc:9a:b4:c0:6b:be:51:40:52:1b:ce:33:07:49:47:
         e4:82:e7:12:f3:1f:6f:34:8c:b3:01:0a:0a:74:2c:4a:6c:23:
         7b:79:35:f0:7f:37:55:6a:f8:86:f4:6d:71:12:47:7a:52:7b:
         cb:0d:e1:18:d0:57:58:22:26:25:6b:fb:95:05:c5:27:fa:15:
         1f:f6:53:0a:34:fe:75:1d:89:12:fc:c0:b0:56:49:cb:07:3f:
         4e:87:6f:ba:c6:00:26:98:1b:59:30:f4:e6:d4:43:a2:1a:37:
         41:7a:3a:07:13:23:74:0d:5d:33:81:ab:92:64:34:2d:50:d3:
         41:e6:47:8f:a6:d8:0a:2b:dd:e4:36:ae:42:dd:87:1a:8c:00:
         50:78:68:bf:c7:c2:f9:b4:bf:dc:b0:fc:de:d2:44:d9:d5:ce:
         c3:fc:37:e2:86:bf:83:79:35:86:f2:59:dc:9e:23:c6:3f:18:
         47:e7:99:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:09 2025 by rpki-client