Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
File:                     8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json)
Hash identifier:          n1iVsNzwTCdO7aWZ/GHr9mWerH7+fYn/LyFlXBJszy8=
Subject key identifier:   D5:76:60:28:11:B9:97:5A:24:F4:E9:F3:36:63:6B:11:74:9E:A7:EA
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Certificate issuer:       /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial:       0194BD4EA24BEF3107FA5661EA413EC77708
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
Manifest number:          13CE
Signing time:             Fri 31 Jan 2025 17:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:34 +0000
Files and hashes:         1: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: sZCAgZW60lEMzXNDHhek6NtpOYIm2tfhsypoP2Oq8m8=)
                          2: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=)
                          3: Vj7AFpLfLfr1svb9-cPSPJ7dIJI.roa (hash: qmKM7pZ6q+ZyF/QjQ3vO49pZuCQEcIpTC5t1WR2KDrE=)
                          4: ZuBhUitefUUP0SJhSRXAPeAwxOw.roa (hash: qEVenuiW+iJsfYBMgeJV9Cg8DHTHEflI/EQU5CS9mIQ=)
                          5: cRomj4ihFxxukUVwYfTvewWKqv4.roa (hash: 9uycV8xx9NnWRkTEWLH3116c5pfjdQScAn4zSpxuei0=)
                          6: qapdX9GHEa2o929_QuPaQDtsKOo.roa (hash: yXoeklRVR1pGxKI4F+grxEP1kght2DQV6MfbRtkPOyI=)
                          7: wl4AgRxN-dsEZVWVRwagB4p0FuM.roa (hash: D3k3ebSuA5lnvxMk1CjJz6RjXbgYa8hOXOr3a2fIOuU=)
                          8: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:a2:4b:ef:31:07:fa:56:61:ea:41:3e:c7:77:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
        Validity
            Not Before: Jan 31 17:00:34 2025 GMT
            Not After : Feb  1 17:00:34 2025 GMT
        Subject: CN=d576602811b9975a24f4e9f336636b11749ea7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:63:6b:a6:6b:f7:4c:c2:1f:1d:1d:3b:17:
                    3b:f9:e9:a9:1f:2d:78:a0:ee:7a:33:da:d3:c4:e7:
                    32:16:2c:ae:99:1f:94:93:31:72:5a:e2:6c:3c:c0:
                    67:bb:01:3d:49:6e:65:77:c3:dd:8c:2b:6f:93:0c:
                    f9:ac:d9:3f:38:5e:85:1c:ed:86:36:5e:f4:e0:68:
                    ad:35:61:60:03:df:a2:67:e3:76:64:c3:c2:03:73:
                    aa:a8:26:50:2d:64:f6:b2:10:5f:18:55:a1:b6:d1:
                    19:58:27:a7:b2:cf:81:0b:6a:93:66:18:cf:81:c5:
                    9f:11:ad:f0:bb:2e:16:ff:4f:c7:77:94:3c:14:fb:
                    3c:52:b7:3c:77:33:52:1e:e9:09:6b:98:ca:97:a0:
                    7e:de:52:e6:db:56:97:4f:83:c5:1e:08:5c:ba:06:
                    dd:9d:1d:2c:41:f9:7b:3c:1f:52:e7:61:6c:62:5b:
                    1a:82:22:e8:a9:36:61:3d:19:c9:f8:64:23:3c:dd:
                    af:d7:0b:8e:79:1e:b0:c5:8e:32:6e:05:de:fa:5e:
                    df:3e:a9:0a:02:5e:3d:74:90:55:4c:5e:88:4f:fa:
                    4e:e5:c5:87:7c:36:b0:04:27:7e:db:a5:82:be:8f:
                    a7:9c:6f:20:74:9c:20:08:da:c7:87:20:ce:59:0b:
                    04:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:76:60:28:11:B9:97:5A:24:F4:E9:F3:36:63:6B:11:74:9E:A7:EA
            X509v3 Authority Key Identifier:
                keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8f:ca:07:ba:b3:a6:91:9b:99:ed:30:e8:82:c9:cb:e2:90:
         62:00:18:37:95:cb:bc:74:c2:96:c1:63:4b:e3:70:64:04:a5:
         14:a0:35:15:88:99:f5:7e:fa:06:8a:8c:97:c5:1e:69:8a:97:
         c5:7e:03:61:b5:f6:3b:79:e4:26:be:b1:33:54:86:93:32:87:
         45:17:31:6d:fd:39:5d:12:07:0f:37:02:e9:fe:ff:11:c3:e4:
         2a:e3:39:d7:e3:93:2f:36:36:5c:34:ad:6c:55:98:b1:29:11:
         a8:0a:49:f6:6d:76:3e:5a:1f:ed:6b:51:2f:1b:89:44:58:87:
         6c:ba:f2:f7:0c:cb:b4:50:05:d7:5d:19:1a:72:87:a5:54:d7:
         10:cd:7f:57:5e:ab:51:17:a2:ff:d9:67:90:ae:2f:28:a3:37:
         ee:f6:e2:58:e8:e3:90:6b:1a:95:af:c7:fd:58:1b:12:0e:97:
         0a:ef:92:81:d6:26:be:25:45:bf:80:90:92:09:18:4f:02:21:
         5e:05:72:87:cd:9f:b3:5d:db:72:ed:ad:1c:30:80:5d:e0:3b:
         32:be:94:56:a7:fc:e8:9c:63:c3:5f:ae:06:ed:60:0f:1a:8c:
         52:9a:6b:c6:3d:48:14:af:94:bc:c8:bb:56:29:11:1e:45:c4:
         f2:ea:c7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:26 2025 by rpki-client