Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
File:                     C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft (raw, json)
Hash identifier:          K2t0C7O8j6OCBM6ggPUm+1hves5jVLMl3cFAYy635XY=
Subject key identifier:   DE:2B:5C:F6:E5:BE:D0:B3:E3:1C:BF:84:5F:0A:57:85:90:85:09:C2
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Certificate issuer:       /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial:       0194BD174EB79489FFD22D9038AD03E062E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 16:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:08 +0000
Files and hashes:         1: C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl (hash: TS2D2XqY1Ks080uWMlRbDRROGORwJ5oKvziELweRZj4=)
                          2: zmy93HOVaR95SsJ_nMqWvP0tGkI.roa (hash: CpAhgA9BKzHDj13uVF86y4qqslsHctpwgNDLQY2WnPs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:4e:b7:94:89:ff:d2:2d:90:38:ad:03:e0:62:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
        Validity
            Not Before: Jan 31 16:00:08 2025 GMT
            Not After : Feb  1 16:00:08 2025 GMT
        Subject: CN=de2b5cf6e5bed0b3e31cbf845f0a5785908509c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:53:6c:16:ab:30:e4:68:7f:ae:58:04:52:ad:
                    c3:6a:2d:b6:63:76:00:5b:fc:f5:6d:68:04:8b:fc:
                    7c:a7:7a:5a:1e:dc:a1:f8:20:d4:a4:89:b9:92:e7:
                    86:93:93:e7:94:0d:0d:36:bf:04:c7:a7:ea:74:bc:
                    f9:f7:ce:c8:85:fd:1f:07:58:8f:a2:8c:58:73:ac:
                    ce:ef:42:64:63:d0:8d:44:0e:68:53:c0:fa:ad:c1:
                    f0:ed:a4:c0:81:a9:7a:09:7b:98:d0:fc:0a:26:55:
                    2e:96:3c:63:7d:63:23:87:bb:51:c3:19:32:3b:8a:
                    e7:d9:19:0f:11:d1:14:c5:b6:53:6e:9e:67:2b:87:
                    7b:e7:6b:d8:b9:3c:21:5f:03:16:54:14:d3:cc:3f:
                    6b:28:4f:8e:4d:63:98:4b:56:5b:4e:b9:e2:f8:6d:
                    4a:c5:73:b4:97:34:01:43:e7:cd:1d:1d:56:fa:ad:
                    3f:f4:70:08:06:d8:f2:68:79:82:54:b5:57:76:70:
                    0f:f8:9e:b4:35:7f:75:ee:f1:88:ef:a1:b9:0d:07:
                    f1:1a:56:70:b7:36:24:8d:20:ad:5c:5d:64:8d:86:
                    b6:ba:e6:ba:23:2c:05:ca:02:e5:6b:91:a9:12:bd:
                    ca:dd:3c:b1:07:61:f2:32:5a:4a:19:9b:a0:89:59:
                    d4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2B:5C:F6:E5:BE:D0:B3:E3:1C:BF:84:5F:0A:57:85:90:85:09:C2
            X509v3 Authority Key Identifier:
                keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:8c:93:62:a4:0b:57:dc:fa:b5:e3:cd:a9:4a:0d:12:30:03:
         a2:87:2f:4b:4b:2e:81:cb:98:2d:ba:72:79:c0:c3:c8:c1:99:
         f0:8c:aa:ce:7e:31:9c:3a:f8:ef:c4:19:ae:3d:c2:41:be:fb:
         34:89:d3:a4:05:33:46:45:c3:08:e8:d2:15:94:a2:7c:80:52:
         b3:bf:ff:19:58:92:5b:ba:d3:16:46:c6:ee:2c:7e:de:60:a2:
         87:76:74:ee:f0:e0:e0:78:be:b3:f6:cd:c1:ca:d9:d1:7a:21:
         c1:5b:62:2a:86:9d:59:dd:84:5c:04:e3:47:ce:18:70:79:94:
         54:f6:2d:58:fd:0a:11:24:61:81:90:06:5e:6a:1f:39:d0:f2:
         dd:34:66:b2:b2:9d:0c:8f:78:f6:05:da:3c:a6:6a:3f:7d:15:
         10:02:b7:be:b6:a1:2a:26:5f:6e:ea:91:7b:88:ad:0c:88:ac:
         fd:f5:a0:ea:6a:91:81:e1:d5:bb:84:96:24:69:ab:56:d7:c3:
         c5:8c:c4:61:da:02:79:4a:1c:fe:5a:2c:4f:6e:bf:0c:7a:33:
         90:fa:14:6e:99:aa:89:53:bd:d8:8b:17:cf:90:41:f1:df:38:
         9d:fb:cf:2f:45:1e:85:9a:27:69:01:86:5d:54:06:a2:22:77:
         4c:32:c6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:54:04 2025 by rpki-client