Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
File:                     xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft (raw, json)
Hash identifier:          5rRIO3H25dtJ2F5OpYoUfHUSgXWaJcuDiC9s+q0ZOnY=
Subject key identifier:   7D:03:D5:26:38:FB:D2:D9:94:7C:28:B5:2B:7D:6C:68:07:A8:27:EA
Authority key identifier: C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
Certificate issuer:       /CN=c4402c55758faee473938f8067a889ad5e271261
Certificate serial:       0194BCE0B86230E9323E9F60FA9AE6579313
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
Manifest number:          13FB
Signing time:             Fri 31 Jan 2025 15:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:31 +0000
Files and hashes:         1: E8OPd8A6_dgzaBqnWV201n06rXs.roa (hash: hcTcW3JT+mi3CMuGaWLI1AgOOEgBHBo13pVy947r0uY=)
                          2: XY1Eges0ofwvvFCGnxnMTZuzqq0.roa (hash: 4lDMbdxSfWLvbOB4pHjSTKQ4KFN1x9vtL2R0MqxD430=)
                          3: xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl (hash: W5XdBiyDt5tbrCxP4/ByOX50AtUCPBQDcey0TDyJq4c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:b8:62:30:e9:32:3e:9f:60:fa:9a:e6:57:93:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4402c55758faee473938f8067a889ad5e271261
        Validity
            Not Before: Jan 31 15:00:31 2025 GMT
            Not After : Feb  1 15:00:31 2025 GMT
        Subject: CN=7d03d52638fbd2d9947c28b52b7d6c6807a827ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c6:11:e5:52:f9:bc:db:55:04:4d:10:d6:5a:
                    ba:b3:7d:85:cd:82:cd:5d:f7:f4:52:83:9e:c5:77:
                    ad:02:7f:1d:ac:55:4f:4d:2d:a8:2b:c1:24:99:ce:
                    b8:07:17:42:f4:a6:15:95:05:90:96:73:fb:2d:fc:
                    0d:91:b3:59:21:01:22:6d:37:e4:14:65:49:5c:dc:
                    2e:3e:21:b3:fa:39:5a:ca:fa:50:55:d5:41:2d:18:
                    1d:fb:27:19:b7:49:42:e5:8e:c5:fc:15:13:b6:d2:
                    2b:44:25:3b:26:0a:01:68:c0:d5:f9:34:c8:36:59:
                    e3:8d:a0:24:16:f6:31:84:4c:65:2d:db:62:68:73:
                    99:8b:64:28:dd:a4:b2:5f:41:0a:0f:07:f2:fd:2c:
                    6f:18:ae:19:b4:4f:39:72:b1:d6:ee:80:34:d2:7c:
                    f2:36:c0:81:76:67:43:05:74:2c:c5:16:e8:73:02:
                    3d:0f:26:df:e2:2d:78:9a:1f:82:d2:51:eb:66:9f:
                    80:5a:b9:b1:35:48:ef:f6:23:4a:06:82:c3:7c:71:
                    79:2d:73:9a:55:18:ea:c6:f5:ee:0c:5c:90:f1:73:
                    ee:d7:a7:9f:1a:72:e6:38:d9:d7:11:7f:91:89:f5:
                    c1:1a:42:d3:fc:ca:6f:ab:91:47:95:81:d1:18:33:
                    52:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:03:D5:26:38:FB:D2:D9:94:7C:28:B5:2B:7D:6C:68:07:A8:27:EA
            X509v3 Authority Key Identifier:
                keyid:C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c2:30:88:50:0b:9e:86:39:c2:c4:91:21:e0:7c:0f:44:41:
         a0:85:1d:19:19:6d:e8:7e:4a:58:e4:fe:db:f2:28:9d:8e:a4:
         4c:3a:36:25:6b:a2:0c:4d:63:b5:bf:53:29:36:8e:c3:bd:aa:
         25:ad:9e:53:ff:b0:6d:11:40:6b:27:7d:80:c4:fd:b6:28:01:
         aa:82:c5:4d:a3:19:fd:c8:f4:21:9b:0e:51:e3:8c:d5:04:ab:
         e4:65:27:3f:37:e5:17:08:6c:45:f9:ec:f1:69:93:59:7f:e1:
         95:cc:e1:3e:98:87:34:39:7a:f8:07:e9:c1:34:b3:96:d0:d3:
         a9:cb:01:5e:16:d6:aa:c1:de:ac:ed:af:8f:a2:64:7e:ee:ee:
         91:8e:9b:bc:c9:ac:e9:78:bb:05:06:92:80:72:72:5a:a5:3f:
         a2:9a:c4:20:e4:55:25:5e:83:c4:73:74:7a:42:e2:a8:66:ce:
         9c:53:21:1e:83:33:a6:53:31:de:ab:39:c6:b8:ba:c0:dd:b5:
         cb:08:65:47:02:ff:7b:a1:ce:d4:a9:c2:78:3d:39:93:23:de:
         64:76:23:2b:77:2b:5c:2c:3b:22:5d:67:69:6d:d4:3e:7c:22:
         a4:4f:75:87:8b:77:b3:ca:a4:8e:18:22:c1:ea:83:c4:fa:fd:
         bc:9b:36:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:30 2025 by rpki-client