Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File:                     _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier:          eFRztr2o7A3986vURC2uX9NJyAr08xQiacvhxaPLkJs=
Subject key identifier:   EE:7A:DE:55:5B:CC:63:1F:79:A1:D5:DE:E8:FA:98:06:E9:9D:38:F0
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer:       /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial:       0194BBCDBC7188245D729AB591DF97B06A14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 10:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:09 +0000
Files and hashes:         1: 2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa (hash: gyN6UkhIgLwcwZrGZA7Bh/uxosleTdxZNErSNAXGOno=)
                          2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: 4i+btnE9bDoqtc9Yn5HSFQWzGK2ZdjkesTB9JdsaCFQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:bc:71:88:24:5d:72:9a:b5:91:df:97:b0:6a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
        Validity
            Not Before: Jan 31 10:00:09 2025 GMT
            Not After : Feb  1 10:00:09 2025 GMT
        Subject: CN=ee7ade555bcc631f79a1d5dee8fa9806e99d38f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:c0:e3:d9:25:a2:08:29:6f:93:bb:cd:26:
                    6e:e4:94:0d:a6:eb:b7:67:a2:99:e5:f4:44:8a:df:
                    90:ff:04:15:7b:02:fe:b5:ec:fc:92:ce:fe:1f:bb:
                    b5:de:d2:be:cd:51:bb:ad:bd:47:be:2a:a6:b1:5b:
                    2c:82:f1:05:9c:cd:7d:3e:a1:69:ee:b1:ae:c1:28:
                    45:33:c4:42:80:fe:56:f3:a6:b5:bf:3f:c4:4b:1d:
                    27:01:c0:5a:6d:91:ea:88:f9:df:39:c4:79:26:29:
                    cc:1c:48:a7:1e:f6:43:88:9c:1a:de:76:06:f1:ac:
                    5d:5e:09:d1:3e:72:7c:3e:8c:5e:dd:9b:3d:09:46:
                    e9:13:b1:e6:d9:6f:ce:bb:9d:5d:dc:f4:2e:ff:ae:
                    08:16:82:5b:7c:04:38:6b:77:86:de:8f:9a:a8:2a:
                    7c:0e:f8:df:d8:54:7d:45:dc:82:ea:cd:15:2c:0d:
                    bd:7b:a2:f5:75:c9:da:ad:36:0d:a2:6f:34:e3:fe:
                    33:2a:30:ad:4c:b5:1a:8a:cb:21:99:6e:87:b9:f9:
                    44:46:73:6e:54:bd:eb:e2:8b:68:49:ce:96:e7:e7:
                    41:57:60:59:e4:45:b3:56:1a:1a:57:48:c9:ea:f1:
                    e4:04:01:27:3b:cf:ac:0c:dd:3b:a6:7f:66:9b:94:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7A:DE:55:5B:CC:63:1F:79:A1:D5:DE:E8:FA:98:06:E9:9D:38:F0
            X509v3 Authority Key Identifier:
                keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:15:3c:cc:e1:48:61:79:43:e8:2a:21:d6:b7:bd:84:ba:ba:
         f0:a6:c7:ef:3c:b3:9f:7f:e5:10:c4:74:9c:39:e8:91:dd:b4:
         62:83:66:79:f5:00:cd:2d:cb:dd:e0:16:17:30:de:c1:10:c8:
         c1:06:55:a1:57:02:0e:1f:c6:1d:82:87:63:4f:f2:f6:79:4e:
         8c:99:a8:f4:3a:bb:65:a1:7a:63:24:86:5e:e5:98:ee:8d:d0:
         89:f9:53:6c:4a:27:f9:a1:73:74:8f:c1:9c:bf:61:91:12:b1:
         f9:15:ca:4b:74:13:f4:3e:53:63:fd:74:eb:ca:a4:bd:9d:cb:
         32:40:19:a1:9b:35:0c:e6:73:4d:78:bd:7a:f5:0b:5a:e0:dc:
         cf:10:9f:71:a4:af:0d:29:88:12:bb:53:63:11:f6:da:c7:76:
         07:ee:64:23:b8:b8:7c:52:ea:65:86:fd:ed:5c:58:24:16:01:
         6b:29:7e:28:f9:d3:89:44:2d:81:f8:f6:0c:aa:e8:57:c1:b5:
         a1:c1:47:55:73:e5:60:b4:41:e7:16:51:88:0e:54:6e:f8:2b:
         d5:38:15:e2:1c:7f:8d:d7:04:8b:71:26:6b:56:20:e3:a2:6d:
         5f:bf:7c:45:d1:1a:aa:f6:b5:3e:06:f7:41:9e:5d:ff:db:70:
         b0:a5:21:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:31:54 2025 by rpki-client