Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
File:                     SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json)
Hash identifier:          2r9Sc4Hcg9PkEeW4zzBEivrpAOjbXVvkQ9efwmu5ll0=
Subject key identifier:   5C:6E:78:4C:98:41:3D:85:35:F9:6B:93:28:A4:CB:1B:80:B6:5D:18
Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
Certificate issuer:       /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Certificate serial:       0194BD4EBB9F120BA62A9B51927EEBA08D07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
Manifest number:          0DE6
Signing time:             Fri 31 Jan 2025 17:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:41 +0000
Files and hashes:         1: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: smDicIYv4PejGduGvdS7k1gewcIZQzukA7OTiGzUuZE=)
                          2: tmx5LjQV62XIOiTTxX3EbhTuW90.roa (hash: ONvGVTfcwoaLd5CXPlp64qPMMnmfgrXhtwa7DXeFCYE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:bb:9f:12:0b:a6:2a:9b:51:92:7e:eb:a0:8d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
        Validity
            Not Before: Jan 31 17:00:41 2025 GMT
            Not After : Feb  1 17:00:41 2025 GMT
        Subject: CN=5c6e784c98413d8535f96b9328a4cb1b80b65d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:f3:a1:9a:8c:02:fb:39:aa:f4:ae:8f:e3:
                    6b:87:c6:4d:d9:c4:a6:3c:7b:9f:11:c1:e5:ec:71:
                    0d:6c:2e:3a:ec:17:4b:ca:65:40:46:29:60:ce:ae:
                    01:a2:d8:cd:15:4a:8d:31:53:a3:6a:b6:ca:cc:50:
                    5e:2b:c1:43:09:55:24:9a:1a:68:ce:51:5b:bb:8a:
                    55:39:ad:f2:90:11:ed:6f:31:25:94:b2:9b:13:86:
                    95:70:c0:42:da:72:a6:1f:59:f6:98:d3:26:b1:49:
                    f2:84:50:2f:b6:c2:bb:e6:b9:01:93:fc:5e:ee:f2:
                    0c:d9:c0:aa:a0:b2:7a:51:67:64:d8:d4:3f:f5:e9:
                    70:0b:9c:9f:46:32:83:5d:b9:ac:69:f8:ea:ea:cf:
                    6b:30:9a:ef:c1:b1:09:af:28:a0:df:0d:9c:b1:94:
                    82:5b:6c:25:6a:d2:fa:17:4d:98:1e:3c:f8:c2:51:
                    7b:32:5f:1e:df:77:66:d6:5f:4c:77:17:4d:26:43:
                    0b:2c:38:2b:e2:bc:41:c0:00:4d:46:67:24:d9:f7:
                    b6:dc:f5:72:62:ea:a0:aa:5b:76:8f:88:1a:c0:94:
                    2d:0b:ff:dd:2f:96:0d:a8:6c:f8:a8:7a:c4:3d:a9:
                    68:7b:3d:f9:f4:bb:0d:79:95:2b:ba:ca:d3:00:fb:
                    6e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6E:78:4C:98:41:3D:85:35:F9:6B:93:28:A4:CB:1B:80:B6:5D:18
            X509v3 Authority Key Identifier:
                keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f5:40:0b:d5:d7:a8:12:a7:90:e2:69:a4:7a:df:3c:87:5d:
         32:e7:8e:42:92:b6:dc:30:3b:81:5c:63:c1:14:b7:90:a6:8e:
         d8:7e:39:69:67:48:50:03:6f:22:85:da:b7:bc:71:07:a1:6c:
         68:03:f1:1f:59:99:5e:e4:e5:98:95:ae:5e:13:73:a0:a1:9d:
         e0:b2:2b:61:83:a1:0a:6e:28:e4:e8:56:d7:b0:51:ae:4c:8d:
         21:56:e3:b8:a8:16:bf:7d:c0:dc:dd:ee:96:11:3b:93:c0:37:
         30:12:41:65:1d:90:5b:7d:54:82:35:fd:a2:8a:aa:ce:47:40:
         f9:c9:7e:f5:31:55:1a:3a:fb:b4:1f:ae:5e:6b:62:12:81:1a:
         19:af:77:eb:f7:26:f5:33:f6:31:71:5f:57:f6:fa:92:ea:0d:
         12:e0:6b:cd:7e:ea:a7:e2:d2:c6:82:b8:e8:85:89:8c:25:c1:
         9d:78:5d:c9:d8:5d:cb:87:ea:9a:55:7a:d5:d7:37:8c:02:d0:
         a7:05:ec:60:e4:ad:1f:b7:64:b4:2d:c9:08:64:eb:c5:f7:64:
         f0:b9:b6:58:ed:b4:7c:44:77:20:04:a2:c5:6b:df:75:41:da:
         ca:0e:a2:85:0d:d8:63:46:fd:38:34:98:a1:d5:d6:ad:c6:06:
         c1:9d:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:12:26 2025 by rpki-client