Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
File:                     Quv9iRe1jwaG2T60jeQh7AE3Csk.mft (raw, json)
Hash identifier:          psM5t7h0S93lha1xzqXuoc+asAFsttSCdoJA6I8KXJY=
Subject key identifier:   EE:F8:CC:3C:54:C5:59:2D:1E:6E:E5:16:2A:19:69:C6:A2:C2:A8:06
Authority key identifier: 42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
Certificate issuer:       /CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Certificate serial:       0194BC3C483E5C0DBBC44CA37B4A74C78619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 12:00:54 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:54 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:54 +0000
Files and hashes:         1: Dct1KnHlMjQEBf8FzrUaVj8hNPo.roa (hash: GFTblhcJpBtD5bZfbGwg+0xfnKk6qwYm9g5i1rXxbnw=)
                          2: Quv9iRe1jwaG2T60jeQh7AE3Csk.crl (hash: OxNrRpMxggmgVschJ6XkRRuR9qB2+iVlMxvAXUyzJJ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:48:3e:5c:0d:bb:c4:4c:a3:7b:4a:74:c7:86:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
        Validity
            Not Before: Jan 31 12:00:54 2025 GMT
            Not After : Feb  1 12:00:54 2025 GMT
        Subject: CN=eef8cc3c54c5592d1e6ee5162a1969c6a2c2a806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:21:08:07:d8:85:99:18:8a:b3:e3:87:0c:8a:
                    fa:0d:4e:d8:d3:44:3f:f8:cf:36:e5:37:75:0e:79:
                    3c:0e:e4:a7:d0:ca:09:67:78:56:04:ef:04:9d:d1:
                    3a:0e:4b:d8:b4:58:b8:c3:1e:5f:3c:bd:33:37:46:
                    d3:4f:60:9c:38:79:92:9a:3a:ec:e3:e4:dd:d4:0d:
                    ef:da:03:d8:57:24:bc:9b:8d:94:5e:d6:88:bc:12:
                    1e:5c:11:d1:1f:43:12:9d:bb:e6:63:73:f9:cb:da:
                    31:80:94:4d:b2:e9:d6:7f:7e:69:e2:8f:dd:72:a4:
                    4d:81:20:cc:86:70:49:31:ef:ea:c8:33:85:88:0a:
                    2b:99:bc:9e:95:e5:cc:ae:8d:af:f4:27:2d:f2:06:
                    97:b5:8a:a4:7e:d3:96:4f:32:67:3b:a8:24:fd:8f:
                    b6:e4:ea:e8:42:8a:f7:ee:a7:59:2f:18:7d:a4:69:
                    30:6b:7c:c9:b5:ff:72:70:87:2b:88:cb:40:84:09:
                    87:53:f0:58:2e:79:96:f9:d3:82:a3:c3:33:6d:9e:
                    75:33:22:d7:76:20:27:5c:e3:b1:3e:38:7f:a6:65:
                    c6:b1:29:9e:3b:02:3b:ee:40:ac:9c:69:77:7c:83:
                    e0:d7:53:ce:49:44:0c:ce:4e:3c:39:4a:d8:2a:91:
                    8a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F8:CC:3C:54:C5:59:2D:1E:6E:E5:16:2A:19:69:C6:A2:C2:A8:06
            X509v3 Authority Key Identifier:
                keyid:42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:24:fb:a9:d7:93:38:6e:9a:7a:ce:38:66:38:4e:a8:0c:4e:
         47:0c:76:51:6c:e2:75:de:e7:39:af:97:f4:36:17:51:5a:37:
         28:51:c0:72:ef:f7:f3:33:a6:3e:ef:9c:ef:5d:4c:5e:0a:d9:
         c0:ee:10:ef:40:b9:83:00:02:a1:64:9a:79:be:2e:3d:61:b8:
         48:52:75:f7:76:0a:b9:48:aa:bc:f3:f9:46:ee:a1:4a:45:c5:
         4e:55:10:95:9f:ef:74:ce:28:aa:8f:1b:86:51:bb:8e:f2:f3:
         fa:ef:68:50:e0:b5:f4:b2:3e:fd:f9:5a:64:3a:7a:c6:4c:ac:
         0b:58:17:68:f8:d1:24:3e:76:28:1f:56:fb:af:02:3a:29:37:
         45:27:d1:f2:00:1b:19:0c:fa:98:e2:98:cc:ed:ef:47:38:bf:
         83:37:91:55:c1:fe:cc:99:03:0a:37:5d:59:7e:10:d5:e8:9f:
         02:fc:a2:df:ca:e3:2f:03:3b:17:4d:a3:1e:ee:65:1f:0b:68:
         43:c3:d6:89:c8:fd:ea:f3:31:f1:51:61:28:10:17:fb:7f:74:
         1c:b3:29:d9:0b:6e:52:c4:6a:87:eb:5b:b9:aa:5c:e0:ba:c4:
         79:15:dd:46:45:5a:92:bb:07:73:b6:93:95:ec:6c:ca:bf:99:
         45:1f:87:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:03 2025 by rpki-client