Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
File:                     M3EM-B0hd3qY09mZ3B5urgVffDw.mft (raw, json)
Hash identifier:          TeD+Hc48GwJsJxD/R692j4u4nYXxPYjlkHNqMV0EAT8=
Subject key identifier:   92:64:0C:3F:01:B7:9C:67:08:8F:30:50:B3:AB:AE:CB:15:39:EF:60
Authority key identifier: 33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C
Certificate issuer:       /CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
Certificate serial:       0194BBCE6E9E1D0E92299B5E17FA10E14702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 10:00:55 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:55 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:55 +0000
Files and hashes:         1: M3EM-B0hd3qY09mZ3B5urgVffDw.crl (hash: HnU2igkFh83jKHp5Uu10508hRS8qvJwx9ExgIXwMZCY=)
                          2: ya6fLqZqW9YiSMq0_70IzMeFSTc.roa (hash: xJjaUPhHWHICcif0SwgfpErfhFmKOtPZjx5JM2GQnhA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:6e:9e:1d:0e:92:29:9b:5e:17:fa:10:e1:47:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33710cf81d21777a98d3d999dc1e6eae055f7c3c
        Validity
            Not Before: Jan 31 10:00:55 2025 GMT
            Not After : Feb  1 10:00:55 2025 GMT
        Subject: CN=92640c3f01b79c67088f3050b3abaecb1539ef60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:29:27:7d:e7:89:36:11:f7:79:0d:16:d8:
                    e0:97:12:de:af:26:ad:12:fb:1e:39:9e:0f:3f:44:
                    9b:ee:95:2f:5c:0d:b9:c5:a1:72:ae:47:e0:5c:76:
                    28:ad:c9:31:61:37:bb:d0:1d:61:8a:0c:70:a6:90:
                    cb:7d:cc:12:12:98:b4:e1:e4:d6:1b:e0:29:56:13:
                    c4:34:ca:ef:33:b2:ac:c9:62:1a:49:ac:75:61:3e:
                    b4:44:9f:7c:ed:44:67:0d:68:2c:86:d1:a9:40:c8:
                    23:78:61:2b:5f:52:87:68:38:9b:80:45:22:4f:38:
                    9c:3d:ca:75:64:ff:39:9b:3b:6a:40:78:a1:e3:9e:
                    ad:ab:3c:c4:c7:90:50:c9:d9:1a:e4:99:a3:4e:a7:
                    80:58:36:8b:0a:11:1d:a6:8b:01:b0:cf:1d:88:bc:
                    17:9d:15:93:d5:fd:05:2e:60:68:de:e9:fe:aa:91:
                    43:2e:87:49:81:38:a1:5f:81:71:0b:07:6c:2e:3d:
                    10:7c:ac:70:e7:d5:9c:5b:18:2b:59:a2:6b:47:83:
                    0b:42:7f:30:b7:28:75:43:01:0c:b6:bd:77:5d:a5:
                    e0:45:76:8d:35:de:b6:e2:7b:91:f6:92:5a:1a:d3:
                    8d:d2:0f:3b:77:f3:6e:3a:61:3e:eb:d1:cb:0a:fb:
                    f3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:64:0C:3F:01:B7:9C:67:08:8F:30:50:B3:AB:AE:CB:15:39:EF:60
            X509v3 Authority Key Identifier:
                keyid:33:71:0C:F8:1D:21:77:7A:98:D3:D9:99:DC:1E:6E:AE:05:5F:7C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3EM-B0hd3qY09mZ3B5urgVffDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/396709-20e1-4f7d-963e-3b5e83f626e3/1/M3EM-B0hd3qY09mZ3B5urgVffDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:51:e7:3b:5c:0b:fc:ec:86:e9:ae:db:e7:1c:cf:5b:ee:ef:
         50:fc:ef:ef:d1:07:ef:75:70:a1:20:96:74:8a:32:24:0e:02:
         cf:40:6c:49:da:8a:af:bc:1a:dd:2e:37:99:db:1a:81:08:8b:
         7f:3f:51:c6:db:27:dd:9b:4f:51:aa:0c:0b:10:d5:bf:39:84:
         4f:35:54:3c:11:2f:68:54:ea:51:fa:a3:a9:6e:17:fd:ac:18:
         87:66:b3:70:f6:e1:9c:1e:3f:73:b2:b1:68:93:64:bf:3b:c9:
         2a:4b:e7:20:a3:09:21:11:c0:5a:1c:4e:9a:24:bc:a9:7e:14:
         38:ed:3d:81:02:c6:53:ce:16:2f:4c:ec:62:7c:07:3b:fe:13:
         a5:0f:40:2a:e7:69:10:4b:81:d3:18:c6:16:0e:66:9f:2d:52:
         3e:e7:ab:30:9f:e6:24:73:53:39:62:37:1a:34:c7:45:8b:3d:
         7a:eb:ed:85:dc:9c:dc:6e:63:a7:0b:d8:f1:73:84:3a:6a:01:
         ec:78:04:ee:f8:1f:a7:e7:17:07:e3:bf:e1:0a:08:d6:7f:60:
         0c:90:f7:4d:31:48:3a:32:eb:f1:1b:44:3f:5c:85:61:63:56:
         35:30:91:75:c3:be:45:fb:9f:61:45:07:5e:6c:e6:36:63:e7:
         1d:5a:be:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:18 2025 by rpki-client