Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
File:                     s5xw9844MbjyzOidsUon3aoOmcI.mft (raw, json)
Hash identifier:          St/g6MmAUe/2HILqoPscBBCmuUL97NP6EHWyzeILLFA=
Subject key identifier:   3F:2A:3C:D5:93:D6:CF:A7:57:24:97:CD:94:17:CF:6E:85:5D:26:0C
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Certificate issuer:       /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial:       0194BCE09FD237D2878B53E6B1B2D030AD8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 15:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:25 +0000
Files and hashes:         1: LrWKN25r7tthSunY280tDynhnBc.roa (hash: ub2N6aH2MytmGSybvR7g8dPW4ivkCLOi0sBC/uuJMOY=)
                          2: PQmLIVoeSOIwIoKz3RvYJrpb2xM.roa (hash: hlojli+o3fpj5DjUXvEZS5bdJMfuplLhFYrIdheEs5Q=)
                          3: cIwYeOItEbowyL16Fsd6dW6MTNw.roa (hash: 51f1FdiiRo4Oc5gbYzr2w1gPQFtv0wp9QesOtcNGq5w=)
                          4: s5xw9844MbjyzOidsUon3aoOmcI.crl (hash: kkJ6weFc0Cb16BPAF1/gO5+y4kymDb5Xgbg/lsKxY0c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:9f:d2:37:d2:87:8b:53:e6:b1:b2:d0:30:ad:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
        Validity
            Not Before: Jan 31 15:00:25 2025 GMT
            Not After : Feb  1 15:00:25 2025 GMT
        Subject: CN=3f2a3cd593d6cfa7572497cd9417cf6e855d260c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:23:d9:5c:73:84:c7:b3:de:d2:60:48:09:
                    dc:b0:32:a0:c3:eb:31:cd:d7:c2:7b:50:4c:b3:55:
                    7e:6d:86:6b:d8:79:2c:09:4d:b9:60:07:98:5a:af:
                    7d:ea:27:6c:fd:98:5c:d9:c9:59:91:f4:74:be:52:
                    c8:67:18:3d:fe:28:d1:27:6f:e5:02:2a:20:e2:33:
                    80:b3:69:79:27:2d:63:d8:7d:c4:4b:99:de:1c:e0:
                    8f:af:b0:b3:a6:d9:46:7c:e4:02:94:45:e3:a2:3a:
                    32:6a:36:8f:60:47:ef:b5:91:bc:39:f9:c4:0f:fb:
                    d4:f9:1a:ed:a4:77:94:06:d2:10:9b:7f:63:a8:ad:
                    f7:f9:80:f7:d2:2d:3e:09:90:18:99:a2:34:f9:c5:
                    7d:60:c8:d8:df:46:e3:48:58:7a:c8:00:03:2a:bc:
                    ef:95:58:f3:d0:b1:28:52:a6:de:00:5b:d1:a6:f1:
                    49:ac:6e:8e:8b:a1:f1:07:34:b2:82:0c:84:cd:36:
                    f6:e3:22:f7:9c:80:8a:24:b3:0c:29:72:38:3d:72:
                    c9:b6:6f:7a:dc:eb:69:a4:89:92:b7:56:17:d3:ee:
                    73:89:39:a9:23:9a:ec:6b:a5:18:f4:b0:8d:aa:0b:
                    38:e6:1d:7e:2e:fd:e9:85:7a:df:d8:d4:74:46:f9:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2A:3C:D5:93:D6:CF:A7:57:24:97:CD:94:17:CF:6E:85:5D:26:0C
            X509v3 Authority Key Identifier:
                keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:87:c5:84:aa:9e:38:15:ab:5d:62:f5:69:96:57:6e:3a:27:
         f5:2c:b1:ca:e5:89:fd:ab:0e:2f:ea:29:cd:be:1c:05:81:55:
         e8:01:38:94:64:46:1e:e8:f6:f8:18:6c:fb:ac:17:5b:1f:ca:
         be:7a:cd:85:5b:75:cc:6b:aa:e9:98:06:0b:78:63:e4:ad:fc:
         6b:a7:54:5d:fe:fb:21:c0:e6:01:bc:ff:2a:f2:88:a6:bc:b2:
         29:42:28:b1:81:5b:e6:63:f9:18:d7:25:e0:e5:cf:be:06:08:
         9e:3d:26:06:b7:d8:bb:eb:f3:ee:d0:b6:4b:48:af:dd:c6:89:
         43:a5:78:fe:c0:b3:e0:ba:ce:b5:94:35:6f:76:d3:73:d1:4b:
         d2:a9:ea:17:fa:ab:7f:1f:11:96:a6:d2:e1:df:2f:f7:04:44:
         f2:8c:d5:b8:a9:24:3f:d0:12:1c:eb:57:24:c7:49:1a:42:92:
         d9:c3:f2:b9:0a:c9:b2:a8:48:11:a9:fd:ad:ed:ee:45:24:0b:
         df:4c:4a:c2:06:b5:74:01:1b:70:07:60:50:f5:7e:9b:fc:ba:
         f4:87:41:18:ff:56:33:30:33:df:c0:a9:5f:34:fe:6c:f8:67:
         44:8a:03:a8:ca:d6:35:41:5f:00:1e:23:6d:ae:b4:e5:10:60:
         62:de:1d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:03 2025 by rpki-client