Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
File:                     st8cE314lMzbp2jOuXHE099Z_pY.mft (raw, json)
Hash identifier:          ZF8UAZTvx+EmNNIFZ7ghT2WSbDpm3hmyQElnMVtEPzY=
Subject key identifier:   56:64:1F:15:FF:AF:5D:5E:47:D6:86:9C:31:72:FC:1F:46:42:81:A7
Authority key identifier: B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
Certificate issuer:       /CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Certificate serial:       0194BCE07659E7A9586E52D48D685F1FB9F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 15:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:14 +0000
Files and hashes:         1: st8cE314lMzbp2jOuXHE099Z_pY.crl (hash: N0Pmz7jgvPyHfDtZp2WEjOaujabSdCVz93/hDduxhdc=)
                          2: utentqqy5GUX6xjOO70Zx55fsK0.roa (hash: Z4JeWyzB0L9+u00qmx46AQ9h8ajUGAFCIAhK67ja97c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:76:59:e7:a9:58:6e:52:d4:8d:68:5f:1f:b9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
        Validity
            Not Before: Jan 31 15:00:14 2025 GMT
            Not After : Feb  1 15:00:14 2025 GMT
        Subject: CN=56641f15ffaf5d5e47d6869c3172fc1f464281a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:30:1e:27:f1:3f:06:c8:90:a3:ae:3e:be:
                    2a:73:5a:8c:7b:17:67:f9:95:da:3d:26:29:01:02:
                    3a:c8:26:9d:7f:64:7d:3a:dd:ea:f6:9a:30:12:aa:
                    92:0f:86:84:8d:a3:cc:95:e4:91:80:8b:3d:b1:15:
                    16:65:0b:a2:bb:9e:d1:d0:c7:74:1a:3c:78:2d:c7:
                    d4:ca:2e:8c:a1:1b:1d:1b:2a:ed:5c:d4:85:29:31:
                    7e:9a:c1:76:81:2f:72:1c:ea:52:ad:6a:6e:97:f3:
                    78:85:b8:90:2a:45:b1:86:bc:15:59:60:d4:0c:5d:
                    e9:6b:b2:cb:41:a1:74:55:4b:5b:29:a9:0b:f1:24:
                    2a:3c:05:e2:34:ad:de:97:8c:cd:28:4a:9b:f3:b2:
                    77:2e:68:80:81:5f:6e:54:94:0a:78:37:fa:b3:a2:
                    2a:56:df:ea:e3:78:67:97:0a:d0:e3:e8:23:2e:bf:
                    2a:05:7f:3f:0d:d5:23:cd:9a:bc:60:c2:b3:29:cd:
                    ef:5c:9d:3c:5c:52:7d:25:ba:41:1e:68:cc:b3:d6:
                    7c:68:94:6a:43:c6:25:11:b1:61:ad:ba:d9:49:86:
                    cb:59:48:dd:59:d5:67:6d:9a:9d:b6:77:cd:69:24:
                    d5:3c:18:82:32:52:e0:21:ef:fc:43:05:bd:7b:55:
                    80:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:64:1F:15:FF:AF:5D:5E:47:D6:86:9C:31:72:FC:1F:46:42:81:A7
            X509v3 Authority Key Identifier:
                keyid:B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:24:6f:ce:d7:a2:77:f9:14:63:ab:5e:61:07:46:16:e4:42:
         16:12:af:3d:2a:3e:ad:f5:10:e2:96:b0:82:ea:c0:e3:36:88:
         32:cc:89:ca:2e:8a:cb:40:1d:f7:9f:00:da:36:76:df:53:a7:
         09:ce:11:d0:27:45:14:aa:92:0a:31:32:5b:42:d5:72:c3:f4:
         2e:3e:84:c2:ff:f3:ca:69:43:07:81:db:b2:f6:3f:24:c3:98:
         67:27:19:93:d9:52:ca:b5:63:a5:cd:ed:3d:05:3a:e4:55:f8:
         44:0c:15:f7:91:a3:b7:3f:66:d4:88:72:2c:d9:ad:50:ff:95:
         2a:63:56:50:d7:02:ad:02:6b:fd:33:33:5c:1d:7f:f6:ac:75:
         d1:2c:af:fe:34:23:0a:6e:37:1f:4c:17:06:49:57:22:19:aa:
         e8:17:1a:c6:e9:7e:0d:41:3d:a7:cd:44:2e:26:e0:d9:e3:fd:
         9e:0a:5b:2c:50:fe:ca:c4:68:c4:db:51:8b:2b:b1:79:2e:87:
         47:75:a9:49:a7:22:22:46:f0:a9:f6:f5:b3:4a:cf:64:8e:e6:
         c9:68:49:19:9f:62:08:0c:7a:65:b6:09:43:ad:bc:40:7e:ce:
         2d:d1:af:a4:0b:00:83:8d:0a:3e:66:2a:be:d7:51:c5:b3:f3:
         57:a6:5b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:39 2025 by rpki-client