Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
File:                     j6zLrHFHe5QOXNQQPj7uYdthWRU.mft (raw, json)
Hash identifier:          zb3/sjlMmVZcjIUlu4nf6IAypJG1lSUseQyyBLtjdyQ=
Subject key identifier:   B4:13:7A:5F:29:D5:21:2C:06:05:2E:CB:89:2E:00:6C:3B:36:CB:91
Authority key identifier: 8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
Certificate issuer:       /CN=8faccbac71477b940e5cd4103e3eee61db615915
Certificate serial:       0194BC72A520CFC52B749CFDB8AE223D1891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
Manifest number:          024C
Signing time:             Fri 31 Jan 2025 13:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:17 +0000
Files and hashes:         1: EKSKrQ1FbAZmq1KtPIW7Uy3IctY.roa (hash: QeMTexv2bHp61zdnXh2g6I+MqFr8HxGSohB7DT8On60=)
                          2: a44sy3HYySYYWzX1Xc0gD8ljcUU.roa (hash: mG+H6uo6FVVDTMv9HhWuPrvRA4BkbeYs8ovYondFREA=)
                          3: j6zLrHFHe5QOXNQQPj7uYdthWRU.crl (hash: HQO3dCOTBWnCJdEF4dZqa2jBl6lHk3p5iES1wOIzl7g=)
                          4: t_igGhLq7IzbkQZnR3SxFZTI3tA.roa (hash: 6dLogSW/OhD3Yu1E3Y4ZKNcTx1tRF0Y/a9V0hhFyQW0=)
                          5: wFmITchCOTh-4_pkSKxt-DBDXmI.roa (hash: 0czxK7spC8QNTMDj8fqbhsYijXl48ZLs3CZRQQWgFNg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:a5:20:cf:c5:2b:74:9c:fd:b8:ae:22:3d:18:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8faccbac71477b940e5cd4103e3eee61db615915
        Validity
            Not Before: Jan 31 13:00:17 2025 GMT
            Not After : Feb  1 13:00:17 2025 GMT
        Subject: CN=b4137a5f29d5212c06052ecb892e006c3b36cb91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ae:f4:b0:64:50:97:14:e0:d6:f4:69:c9:86:
                    07:38:18:f5:f6:a7:29:e5:e4:82:33:fb:f5:d5:9f:
                    04:7c:f2:3f:6f:44:b3:c9:0b:68:24:84:02:79:65:
                    a9:90:13:78:21:95:3b:ed:91:f3:17:3c:19:75:99:
                    a4:b1:c2:b7:15:5d:5b:49:7d:76:a2:5c:27:b3:04:
                    88:c7:b5:b6:9a:64:cf:ff:8c:69:86:c0:a5:24:14:
                    e6:31:1e:94:04:0b:ae:98:a8:1a:a7:f9:aa:10:c8:
                    76:e1:f1:f1:36:2b:71:86:4f:cf:15:1f:f6:b2:34:
                    2f:2a:cb:17:c0:21:51:2e:d6:f1:72:e6:9c:d1:25:
                    44:7f:4c:e2:cf:b4:f5:d3:ff:c2:6c:e6:61:c6:6b:
                    0e:0a:32:64:66:7f:65:28:27:e2:85:94:58:41:cb:
                    2a:46:e8:31:ea:09:c4:62:27:18:dd:7f:d7:a8:ca:
                    e6:1e:22:8a:dd:d6:b7:d1:b2:c1:42:63:ba:fb:e3:
                    4e:38:0d:3c:4e:76:22:17:8a:c0:a5:1c:98:f0:77:
                    89:e9:e8:6e:f4:4e:96:e6:18:c3:c2:73:b2:51:0f:
                    20:7c:6e:99:a9:2b:19:1a:f3:c5:62:3b:35:99:50:
                    15:3f:21:d9:c9:ae:cc:24:6e:14:ab:9d:48:40:d3:
                    a2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:13:7A:5F:29:D5:21:2C:06:05:2E:CB:89:2E:00:6C:3B:36:CB:91
            X509v3 Authority Key Identifier:
                keyid:8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c6:12:89:a6:bc:1c:b6:64:72:fe:b8:a4:e6:6a:3e:57:75:
         e8:e4:57:00:dc:50:5f:ba:56:04:d9:09:02:db:3e:d1:01:90:
         3d:4e:c4:b6:89:71:bc:4a:16:d9:28:ef:10:bc:ae:50:42:98:
         3f:28:9a:9b:00:f8:2a:fe:6a:5f:ae:3d:48:34:93:a0:42:30:
         0b:ba:c5:c4:00:db:16:ef:18:b4:5d:84:c5:b2:33:51:a6:9a:
         30:c3:65:00:7a:c1:ff:c7:43:ce:2c:d9:2e:00:40:d9:e8:a3:
         a0:da:fe:74:f8:b6:d2:18:20:a7:9d:5a:e4:96:af:78:40:43:
         38:93:5d:84:3b:f5:3b:13:e5:bc:b5:f7:80:24:2f:2a:68:e5:
         54:af:72:11:01:eb:a2:c6:b5:ec:df:9b:7e:b3:20:b4:b6:31:
         e6:1b:f4:4f:cf:83:f2:7b:8e:86:67:82:e5:47:01:0e:55:95:
         9e:cd:e7:05:9f:76:52:19:bb:02:c2:67:8b:41:b2:4e:75:f4:
         c5:66:69:18:37:1f:bf:e8:19:f5:db:9a:35:ae:b5:ce:93:59:
         68:13:dc:1a:16:1e:68:2a:2b:49:1d:e7:a4:cf:8a:90:a9:58:
         0d:ee:68:55:9b:a8:e3:f3:5b:f3:52:0a:16:9b:3a:65:03:6e:
         4b:25:61:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:30:32 2025 by rpki-client