Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
File:                     5yaSa26JcM-E1rR1b6nFYhEgBTc.mft (raw, json)
Hash identifier:          IyjeQCyyYNIQAyDTYyllNp01hjSnauOPQCehRaCqRpg=
Subject key identifier:   51:B4:13:56:15:2F:B4:91:55:32:70:57:82:6F:30:00:FB:9A:F2:CC
Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
Certificate issuer:       /CN=e726926b6e8970cf84d6b4756fa9c56211200537
Certificate serial:       0194BBCEF7852DB8758FAF02D29A0E5E9E92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft
Manifest number:          0D29
Signing time:             Fri 31 Jan 2025 10:01:30 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:30 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:30 +0000
Files and hashes:         1: 5yaSa26JcM-E1rR1b6nFYhEgBTc.crl (hash: P1eBDPRyudb+w3WAVMhLLfhPTiraLAH0ECEftC8mQYU=)
                          2: MN9DXXfhSKbEIdYAeS63OJtTNTM.roa (hash: IbJiyeetvwoy/pj327xJTH6HMYNK/ZCgaJ8rwR+7loE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:f7:85:2d:b8:75:8f:af:02:d2:9a:0e:5e:9e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537
        Validity
            Not Before: Jan 31 10:01:30 2025 GMT
            Not After : Feb  1 10:01:30 2025 GMT
        Subject: CN=51b41356152fb49155327057826f3000fb9af2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:09:62:8c:c2:a7:0c:78:66:cf:1d:30:46:
                    18:6a:0c:e7:ea:bc:6b:5e:16:91:77:3c:8d:67:b5:
                    53:32:78:73:e5:f9:c7:9d:5a:fb:1b:3d:02:56:d3:
                    3d:fa:8d:a1:eb:73:31:3a:ca:f4:d0:de:54:a0:c1:
                    94:f3:f0:60:25:91:39:1d:3c:f0:12:fc:af:53:b6:
                    07:9c:ff:07:c6:51:12:59:c7:e9:06:17:6b:44:19:
                    f5:9b:7a:02:e0:09:b6:d7:32:c2:f3:c3:81:ca:85:
                    2d:55:f0:52:91:86:5e:7e:04:86:35:64:63:6e:a4:
                    69:7e:fa:87:53:45:25:f8:69:c6:4e:15:90:35:36:
                    52:f9:2c:6b:6c:79:a4:10:71:ad:c5:69:84:6c:b5:
                    1b:29:f2:a4:33:7a:d8:0b:26:df:5c:4d:45:82:88:
                    c5:ab:40:4c:c1:b1:f0:2d:35:59:16:61:22:d6:54:
                    5c:d0:62:fc:91:f4:df:24:7b:e2:bd:6c:eb:d8:da:
                    52:eb:68:44:65:14:2a:0b:31:77:e9:28:af:49:48:
                    c5:4c:43:3f:c9:ab:09:ff:8b:11:4e:16:42:d3:42:
                    10:5a:10:bd:05:de:5d:ec:ac:c2:89:c9:e0:76:09:
                    8b:7e:69:d5:09:66:38:f6:a1:bb:bf:80:36:d0:c1:
                    d6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B4:13:56:15:2F:B4:91:55:32:70:57:82:6F:30:00:FB:9A:F2:CC
            X509v3 Authority Key Identifier:
                keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:6c:32:52:ed:29:31:bc:a0:30:0b:f0:47:8f:5c:af:fe:57:
         b9:c1:95:4d:3e:18:20:3f:5b:7a:6b:cc:9e:11:2a:de:ce:8c:
         1f:00:e3:66:79:a7:fd:b5:e4:59:4a:5c:88:62:e4:dd:66:15:
         bd:3a:ac:16:e3:c2:53:0d:a9:3d:37:4f:bc:51:f4:f3:da:ee:
         e8:71:48:1b:c3:73:84:80:17:d3:cd:dc:82:02:01:75:5a:e0:
         da:c8:1c:84:fa:b9:1c:2f:98:6c:b1:90:a4:93:c2:f2:e8:fd:
         8a:24:1e:bd:bd:0a:fd:19:da:19:c6:de:2a:1b:78:5d:aa:43:
         9f:fb:de:c2:92:be:5f:2a:38:b7:5f:2c:09:06:aa:d0:c9:ff:
         c1:3c:98:2c:f8:4c:36:3b:c7:de:31:72:6b:84:f2:4f:4f:25:
         72:09:42:1e:93:9a:b7:ae:f1:20:77:e8:96:1a:0a:02:5a:b1:
         1e:fb:38:e0:97:05:2f:60:eb:74:47:81:79:f0:3d:7f:39:d1:
         e2:62:b7:78:73:0e:59:58:36:29:6b:1f:cf:21:98:7a:f5:26:
         30:c4:9c:f0:88:dc:3d:13:2b:9f:ef:a5:32:61:12:75:a7:fa:
         fe:31:7f:8b:95:4f:e8:50:bb:b3:fa:17:f2:2a:44:c7:8e:d2:
         30:54:eb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:23 2025 by rpki-client