Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
File:                     c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft (raw, json)
Hash identifier:          3VjRtjgG2NRC7ctRAzmuWj1faYDcaONzaG9U/uvCjSE=
Subject key identifier:   8F:EF:1C:A4:E8:4B:42:4A:9D:65:88:01:8B:28:F3:10:03:24:7D:60
Authority key identifier: 73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78
Certificate issuer:       /CN=739f3ebcd26792b913c1dcb9941996e998f16078
Certificate serial:       0194BD17DDE037CB66F49A16E762A1950707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 16:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:45 +0000
Files and hashes:         1: 8ZSiBVB9h2VqcjNcGsXVM5lUjmI.roa (hash: hKEwzTFWQZO4iHIgYWy7xoBKPXgQqTPB0mui/ew+61o=)
                          2: c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl (hash: nzfbcCDaBjTvDcFVHieD19PnOT746bBcHJq6FZc/Wdc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:dd:e0:37:cb:66:f4:9a:16:e7:62:a1:95:07:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=739f3ebcd26792b913c1dcb9941996e998f16078
        Validity
            Not Before: Jan 31 16:00:45 2025 GMT
            Not After : Feb  1 16:00:45 2025 GMT
        Subject: CN=8fef1ca4e84b424a9d6588018b28f31003247d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:e3:37:c2:1a:25:f8:e4:d8:e2:36:9c:d1:
                    12:e8:1f:c0:21:37:ae:65:4b:28:25:80:7d:0f:30:
                    99:f8:6c:15:7a:1a:97:ce:5c:27:a4:00:1c:e1:ef:
                    7d:cd:97:a5:f1:81:3f:8c:bd:9a:43:a6:53:ae:ad:
                    eb:52:8b:1d:35:3a:97:6e:1a:64:cb:94:9e:0b:50:
                    8d:d5:73:9c:11:b7:60:46:8e:1d:ed:c4:63:4c:b9:
                    5d:45:b7:ce:16:14:55:a5:66:30:2f:8a:ee:45:be:
                    29:ed:2e:ac:5a:74:eb:43:de:30:26:e3:2c:e5:12:
                    55:b5:5a:ab:8e:fd:82:19:b7:eb:fd:59:b4:29:8a:
                    e1:25:fa:c3:71:7a:06:52:a8:c5:17:c8:0d:c2:e9:
                    90:f8:6d:fc:83:9a:0b:eb:fc:18:2c:e1:69:0c:3d:
                    03:94:9b:67:66:b6:f2:e7:98:c8:25:79:5c:ba:22:
                    88:cc:c4:48:ed:16:b8:3c:8d:48:69:ac:bf:09:38:
                    2e:a6:f1:63:a6:49:a7:74:0f:be:1f:14:0d:fb:ba:
                    c5:fd:a5:73:b5:aa:6e:21:38:82:b7:ff:82:08:2c:
                    e6:94:87:6c:0d:1e:0f:eb:91:fa:fb:3d:37:43:8f:
                    8c:97:e7:12:63:dc:1b:25:3d:4f:06:aa:bd:c1:32:
                    c5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EF:1C:A4:E8:4B:42:4A:9D:65:88:01:8B:28:F3:10:03:24:7D:60
            X509v3 Authority Key Identifier:
                keyid:73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ef:1d:19:99:f9:5c:40:22:eb:8c:83:6d:41:1d:d4:ab:f9:
         58:95:9c:4e:2a:cc:17:a0:04:a6:45:66:c6:55:65:1c:f6:f8:
         81:b6:ef:75:36:a0:10:cc:c5:6a:4d:c5:b3:ce:44:75:e3:1c:
         8b:a3:35:7f:7a:45:4f:09:7c:23:97:bc:d9:52:ab:dc:e2:31:
         f6:e1:32:b2:25:1d:7e:c1:5c:4d:6d:d9:4f:9a:36:ed:45:34:
         c8:11:b3:ac:3e:0c:19:90:73:28:6b:9c:91:98:a8:9a:ec:01:
         f4:16:95:3d:70:40:25:62:f7:c0:72:52:d7:08:77:4b:77:81:
         09:5a:bd:11:d2:4c:b9:69:89:56:06:22:6b:52:6c:e3:52:31:
         23:3d:bd:2b:54:7f:f2:46:2b:b2:8c:4f:69:98:1e:ca:3a:9e:
         f8:3d:98:b5:4a:b7:c8:06:2c:c0:94:f8:68:3c:15:0c:81:a6:
         06:ad:c1:46:6c:dc:79:bc:0a:e6:d3:a6:5e:a5:bd:d5:c7:f4:
         27:2b:0c:55:22:26:2b:23:90:dc:9c:42:8c:96:51:68:e9:f7:
         60:bf:a9:5b:88:68:a1:f5:50:4c:92:f4:a4:52:8b:8e:27:0b:
         2d:91:b5:4d:00:48:84:d1:8f:b0:4e:84:18:17:c6:b1:81:09:
         ba:98:71:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:51:47 2025 by rpki-client