Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
File:                     RPMwC82ETWB1L-Xfst4pmWbpuPY.mft (raw, json)
Hash identifier:          vLvoMsVzgvjhnBRWtho92/TPzLVkmZLyfxRZmtg+zD8=
Subject key identifier:   1E:E8:95:20:5A:5B:B3:F9:49:68:58:47:DE:E4:9A:F5:F6:E8:D9:28
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Certificate issuer:       /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial:       0194BD855509AABF2AE9C7381627E051E05F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
Manifest number:          0A15
Signing time:             Fri 31 Jan 2025 18:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:19 +0000
Files and hashes:         1: RPMwC82ETWB1L-Xfst4pmWbpuPY.crl (hash: M9mPvW3cF8NivwZUc2i0oJiKVmbqcBtcV5qF3DM+2sU=)
                          2: vqjdm1KiZFUuymq7gFNn9nu1xeI.roa (hash: n5Ik+8X2gw4ASROPfXrEyi/m0Dt0d0dYMw901zfQlQI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:55:09:aa:bf:2a:e9:c7:38:16:27:e0:51:e0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
        Validity
            Not Before: Jan 31 18:00:19 2025 GMT
            Not After : Feb  1 18:00:19 2025 GMT
        Subject: CN=1ee895205a5bb3f949685847dee49af5f6e8d928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:28:e8:8b:c6:c1:16:23:4b:31:e9:54:d2:a7:
                    53:1c:0c:7a:7d:e2:1a:2b:cd:25:94:c9:a2:6c:bb:
                    3e:4b:40:78:17:82:75:5c:ac:bb:8e:72:9a:15:9d:
                    87:3b:24:6a:45:52:dd:a5:be:7f:aa:9a:32:95:89:
                    15:60:47:34:e9:85:0c:c1:59:4a:91:c2:2f:08:d0:
                    c2:fc:e2:fd:5f:8a:95:b8:0f:e0:53:55:69:c9:b5:
                    55:1b:cb:0f:42:6a:fa:05:ad:8f:38:70:82:f7:92:
                    bb:20:7c:ac:87:e8:40:67:47:8f:77:aa:95:88:5c:
                    42:60:d2:f7:ee:e0:59:8f:dc:f3:08:39:41:fb:a6:
                    61:ca:67:00:4a:14:91:c5:79:b1:f6:80:2f:29:6f:
                    c9:13:8c:a7:65:d7:12:df:85:42:e1:65:2d:75:b2:
                    9b:11:9d:d9:df:ae:82:3a:5c:bb:17:b3:44:86:d2:
                    0f:f4:6f:8c:09:08:f8:18:22:f3:eb:f8:ec:0d:0d:
                    ed:cc:82:47:18:a0:0c:54:d2:d0:4d:f2:39:bc:7a:
                    5c:1b:b0:1f:5c:84:fa:50:e0:95:8d:db:1c:a4:19:
                    b1:4c:16:95:93:bd:cd:29:90:5c:f3:03:88:f9:31:
                    81:0c:88:cd:cc:de:0a:bb:08:fc:09:64:fa:34:78:
                    6c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E8:95:20:5A:5B:B3:F9:49:68:58:47:DE:E4:9A:F5:F6:E8:D9:28
            X509v3 Authority Key Identifier:
                keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:aa:2b:fb:7e:e8:78:83:f7:e9:a0:86:76:1b:83:70:01:3c:
         1d:c6:f5:66:8c:30:20:a0:d7:50:86:24:07:c0:42:f2:f1:2c:
         2f:3a:2f:e3:bf:8e:f9:ed:e6:2b:8f:cd:62:39:2e:1e:43:7c:
         0a:cc:96:8e:9b:07:c0:13:73:e4:b5:e2:45:5c:af:98:7a:89:
         9a:8b:37:99:a2:55:3f:b5:de:52:c5:bd:e7:a9:1a:ab:71:3b:
         c6:ec:9c:de:57:05:29:89:49:cd:26:84:8b:ad:16:ba:cb:84:
         12:cb:72:ad:f3:ba:ab:52:6f:2d:1d:43:15:a5:65:59:7c:ed:
         0f:ce:67:bf:a0:50:7f:d6:77:1a:7d:3d:8f:46:54:fb:15:85:
         4c:72:59:7b:b8:5f:31:de:48:df:27:ba:f9:f6:f9:58:62:3d:
         86:84:60:38:eb:9b:17:bb:cd:71:eb:76:44:2e:c2:e7:e7:31:
         a0:55:ff:5e:09:44:98:c0:eb:c0:7c:87:ca:bf:a4:0f:24:70:
         87:f9:5c:60:7d:9c:99:04:ab:14:aa:fb:8d:35:38:ad:ec:b3:
         3b:0d:13:5b:9e:81:e4:f6:df:5d:38:f7:54:aa:2e:39:60:7d:
         5e:49:1b:05:48:0c:81:e8:e1:60:4a:e7:08:a0:8d:d2:cd:b5:
         75:39:28:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:10 2025 by rpki-client