Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
File:                     6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json)
Hash identifier:          Wn3U7hQtQwc+S9C8vM+qSH1whPJrt6yd1LsX5HxXJ20=
Subject key identifier:   05:3D:C0:64:C6:B9:04:47:69:85:DB:82:68:10:7B:DD:8D:2F:59:B2
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Certificate issuer:       /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial:       0194BCA97858EFB9D57C1F5C2558719F824B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 14:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:10 +0000
Files and hashes:         1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: wuDj1YF52FixRxGX4TeZUgQfGlwOkittV1+Xlm9unWU=)
                          2: DFRvHnIOEohSALE7cr1DMFzARjs.roa (hash: cAP5xtyhQuK53sxOeCJOPJgNAhGARVo8d78ULbFvVa8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:78:58:ef:b9:d5:7c:1f:5c:25:58:71:9f:82:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
        Validity
            Not Before: Jan 31 14:00:10 2025 GMT
            Not After : Feb  1 14:00:10 2025 GMT
        Subject: CN=053dc064c6b904476985db8268107bdd8d2f59b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:b0:1e:6a:f1:99:47:3a:f7:92:22:ff:3a:
                    3e:fc:ab:9a:47:83:66:b9:b8:61:2a:78:95:77:95:
                    ff:c6:1a:7c:07:5e:53:0e:57:3b:09:80:9e:f0:62:
                    19:41:35:12:14:f9:3b:54:90:10:ff:61:0b:01:d0:
                    8a:6b:83:4e:af:7e:49:ff:c5:55:73:06:dd:d6:ca:
                    ba:91:32:95:12:35:85:c8:35:e4:2d:c9:d4:3c:ee:
                    8c:c3:2a:7e:8a:47:94:4d:20:97:aa:10:b6:8d:e5:
                    af:d6:a1:1e:af:b2:6a:db:fa:b4:bd:a7:f9:11:d4:
                    28:f9:f8:13:2b:03:6c:df:1a:b4:31:b1:d7:57:fc:
                    c7:11:98:9c:3c:a0:d8:b9:4c:67:a1:ba:d7:54:2a:
                    2c:b7:47:09:09:a7:d4:df:b6:9d:46:fe:fb:de:bd:
                    b8:5c:18:81:3b:82:ee:bb:c2:95:21:5b:c1:3b:c7:
                    9a:fb:bf:1f:2b:ef:5c:97:c9:b2:78:7b:8b:47:6f:
                    ab:57:77:fa:a6:75:34:83:1d:12:2d:03:4f:40:f2:
                    3e:be:44:e0:37:50:b1:42:a5:a1:0e:00:c9:c8:26:
                    fa:97:c3:48:6e:b9:c3:2c:1c:c7:23:c2:08:2e:ee:
                    fb:e0:42:09:c1:51:81:c7:82:8a:45:1c:91:7e:cd:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3D:C0:64:C6:B9:04:47:69:85:DB:82:68:10:7B:DD:8D:2F:59:B2
            X509v3 Authority Key Identifier:
                keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:fa:13:72:bc:15:75:ad:ab:9c:e6:cf:24:d0:75:b8:50:e5:
         d9:bb:ab:c0:a1:65:e2:4b:13:e3:e4:1f:23:2c:f8:b7:c6:67:
         f0:d5:cd:ff:04:9c:87:8f:16:c1:17:30:b8:ec:34:33:72:25:
         52:93:28:28:c0:7d:81:1c:80:b2:2f:8b:71:86:e8:93:2d:73:
         57:e2:12:f1:50:45:ef:90:3e:ee:fd:22:60:c2:6b:09:97:eb:
         7a:98:ce:20:9f:ec:a7:9a:f7:3c:d4:7f:6a:8a:80:64:f1:ee:
         b3:94:a5:e7:c2:36:dc:bc:2c:f4:24:2f:3e:35:af:61:bc:f9:
         ba:f6:d3:49:d7:ed:85:16:f1:24:04:56:a5:47:fd:f3:08:68:
         8a:f9:8c:48:ac:09:7d:c2:fe:c6:b5:38:16:9c:38:ca:ce:92:
         be:ae:cf:ab:36:d8:1f:4c:bb:32:78:62:28:0a:2a:b4:e2:c3:
         1c:02:e4:82:07:ad:27:4e:b6:98:be:fa:0e:e0:4e:2b:1c:82:
         95:55:dd:fb:12:5f:72:a9:c4:57:d0:8f:cd:ca:19:7a:b5:41:
         7c:12:50:5e:49:47:ca:aa:50:4d:68:91:f2:f2:cf:a6:17:5f:
         27:2c:ec:7f:31:e6:45:67:21:ac:47:00:10:c1:02:f4:f2:57:
         df:c9:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:40 2025 by rpki-client