Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
File:                     pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json)
Hash identifier:          LLzsw2Dbq5VK0PGG0Q3pyH2raIWYNLLxRa7q12gkxAg=
Subject key identifier:   79:16:75:CB:2E:1C:00:B8:5F:51:4A:76:23:C0:84:3F:E3:99:D7:A3
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Certificate issuer:       /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial:       0194BCE0BF0FDF6ECB165DF55815634B85B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
Manifest number:          059D
Signing time:             Fri 31 Jan 2025 15:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:33 +0000
Files and hashes:         1: FERbP680nVn9-OXBaT2aTWtd8aw.roa (hash: zQlyYeEOYC4qxko+i8oAsMpuMceTMqew9h1oxgQMJNU=)
                          2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: 7HAll2kGVoWVzQ0/XU1j0cMbZ66G60kXXBvUWGSE4I4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:bf:0f:df:6e:cb:16:5d:f5:58:15:63:4b:85:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
        Validity
            Not Before: Jan 31 15:00:33 2025 GMT
            Not After : Feb  1 15:00:33 2025 GMT
        Subject: CN=791675cb2e1c00b85f514a7623c0843fe399d7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9b:e5:ac:a1:b1:35:c3:d9:f7:a2:08:eb:24:
                    32:ae:2a:0d:bb:a2:2a:be:24:8c:6e:a8:c2:b4:26:
                    02:c6:8a:27:4f:52:bd:0f:4a:1a:f0:bf:30:1c:32:
                    ac:fb:fd:a5:f8:83:60:79:03:bd:98:a6:38:29:ff:
                    e4:30:db:65:a3:a6:cc:97:b6:c5:0c:03:eb:32:a2:
                    58:aa:53:ec:9c:fa:11:0c:b9:24:fe:c3:b4:50:4e:
                    82:dd:d0:24:57:70:b8:41:bd:98:c4:76:dd:82:54:
                    65:9a:66:d7:e8:34:55:3e:79:56:36:e6:1e:1c:65:
                    ac:d1:e4:16:10:85:ce:8d:ce:86:1a:df:36:d2:3b:
                    b1:bc:b8:00:37:02:61:1a:4a:13:80:4f:a4:b4:66:
                    e9:98:64:18:4b:60:0f:5d:30:b8:a2:22:d6:59:ff:
                    68:90:72:6a:dd:ee:34:7b:8d:7b:7f:b7:a7:dd:1f:
                    80:df:01:40:06:12:0c:94:5b:a9:31:5e:4a:11:6b:
                    e7:40:ab:44:a3:af:16:69:23:e0:f7:2e:ea:83:c0:
                    f7:c3:a6:d0:9e:d5:6b:68:44:af:07:dc:ec:09:9c:
                    5b:ff:78:5e:41:22:ca:26:93:1d:c9:22:05:88:20:
                    32:fa:76:18:08:ce:7f:7c:21:71:7c:72:6d:47:34:
                    b2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:16:75:CB:2E:1C:00:B8:5F:51:4A:76:23:C0:84:3F:E3:99:D7:A3
            X509v3 Authority Key Identifier:
                keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:3d:44:df:e6:7e:f5:29:71:7e:ec:e1:71:a0:c7:04:3e:2d:
         8a:04:96:15:1b:91:16:b3:6a:ec:48:ba:2e:0c:af:f2:51:68:
         c4:2e:eb:26:63:d2:4a:75:3b:8e:19:3a:66:a6:21:b0:46:da:
         0d:f5:b7:95:88:45:cd:17:ad:b6:55:ec:34:83:04:42:2f:39:
         c3:a2:50:15:f5:92:25:20:92:5f:55:02:8f:16:76:4f:cb:de:
         2b:e4:1a:d6:a8:ba:cd:9d:98:4e:1f:ce:67:55:23:8f:2d:55:
         46:af:83:73:1f:38:f1:e4:c3:5d:09:40:ea:87:a2:d0:88:6b:
         04:20:06:c2:9b:16:0e:a4:ea:c2:6a:21:be:66:39:87:48:6b:
         01:48:9b:0b:8f:7c:41:48:12:ac:7b:54:16:80:74:26:d9:11:
         4e:25:84:e9:72:b8:38:9e:18:8b:12:b5:be:0d:35:b5:b4:bd:
         c2:6b:c0:fa:50:08:9d:a7:44:dd:74:5a:69:73:3f:8f:63:ab:
         8d:1d:ea:80:db:e2:f1:7c:89:4f:89:a7:34:06:a5:d6:3e:13:
         1e:66:f4:f6:0b:62:a6:b2:63:c3:c9:9d:01:de:ca:c8:b3:70:
         59:94:df:1e:de:cd:37:3a:65:be:f6:07:27:ce:48:df:97:e1:
         bb:77:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:38 2025 by rpki-client