Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
File:                     SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft (raw, json)
Hash identifier:          rn70LWbvGfqJoQAIua357wqLCPO/5vDBDWkvqwPjVu8=
Subject key identifier:   21:38:D3:17:45:5D:76:75:76:F8:C8:00:FB:C9:A1:CD:97:CA:AC:53
Authority key identifier: 4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D
Certificate issuer:       /CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
Certificate serial:       0194BC0500CD2881CEB6F39D2E698424BA22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
Manifest number:          057C
Signing time:             Fri 31 Jan 2025 11:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:31 +0000
Files and hashes:         1: SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl (hash: ptdeKpghFbrjJPiZ/D8crYLepvOmOq4A+9TZPW3/Qrg=)
                          2: Ss43uKVk12glj7GND1Q0DQOfOOI.roa (hash: afk/nkdp+pPj29GdfzUTdj7jJFKdBQ7g7Tl5QgpoC38=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:00:cd:28:81:ce:b6:f3:9d:2e:69:84:24:ba:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
        Validity
            Not Before: Jan 31 11:00:31 2025 GMT
            Not After : Feb  1 11:00:31 2025 GMT
        Subject: CN=2138d317455d767576f8c800fbc9a1cd97caac53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:7f:80:8c:1a:31:c4:43:61:c3:70:04:91:
                    3b:48:20:bd:1a:9b:73:6e:89:d6:38:61:bb:0d:6c:
                    2e:a4:81:85:4f:d9:b3:e1:fa:e6:0f:2a:26:62:e7:
                    4b:a0:bf:8a:1d:e6:a1:e7:9b:2c:47:2d:b3:74:35:
                    cd:38:49:d2:cc:69:a8:61:36:10:d7:20:b8:0d:97:
                    aa:3f:97:e5:2e:cc:a6:65:85:a3:54:60:43:c8:0f:
                    fc:1f:0e:a3:4d:29:8f:ab:06:10:4e:c4:87:31:67:
                    ae:87:c3:81:22:db:52:2d:22:f6:17:65:09:5c:15:
                    ef:85:a3:3e:fd:33:fc:fb:aa:6a:62:5d:7e:c9:68:
                    e5:cb:46:da:f0:56:ff:fd:0a:3b:d7:cf:d4:b7:ad:
                    c2:1d:c0:aa:e9:3c:78:49:e6:65:0e:e6:71:c3:30:
                    4e:a7:84:be:7f:65:27:5d:18:7e:bc:fd:16:6f:88:
                    0b:4c:7a:a7:6e:46:0a:34:8a:6e:1c:9d:f9:c4:9c:
                    37:74:cb:d7:5f:c5:ed:6c:aa:03:cb:89:b5:17:8b:
                    d9:27:32:9b:3e:62:e0:80:96:89:e2:6a:71:35:5d:
                    aa:fb:b5:fb:f7:2c:0a:97:fc:83:de:8f:22:50:46:
                    62:08:ed:4e:59:a3:d8:5e:02:5c:3d:1b:9d:b5:26:
                    a4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:38:D3:17:45:5D:76:75:76:F8:C8:00:FB:C9:A1:CD:97:CA:AC:53
            X509v3 Authority Key Identifier:
                keyid:4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:68:2d:89:9e:6b:83:bb:4a:bd:df:f6:42:4b:9d:a6:5b:bd:
         37:87:6d:a8:fd:12:8b:b5:53:14:61:02:9f:ae:bb:bb:a4:cd:
         fc:92:dc:6d:e7:c6:9d:50:46:d8:40:7b:4f:37:9b:bb:96:0c:
         c1:74:08:6c:f8:c3:56:4f:52:5e:b8:21:af:a9:5f:86:f1:c5:
         7d:b0:b3:d6:d3:bb:44:61:d2:c1:6e:e4:d7:30:f2:12:97:24:
         cf:4c:b6:c7:51:b3:cd:2f:51:0b:e4:93:a8:29:0d:58:52:f6:
         3d:2a:9e:03:9e:10:dc:8a:77:7a:83:30:4d:49:50:28:a7:34:
         ab:be:cc:f0:56:3f:90:df:11:59:a5:ee:5c:d2:08:57:41:42:
         1a:c4:02:57:c9:d9:d0:60:6d:52:fd:f9:4f:28:81:8f:55:98:
         85:32:df:b5:2d:80:28:b0:b0:c2:e3:cd:bd:b2:d3:32:9f:d0:
         a2:e7:40:67:2c:3f:b0:d5:6b:2b:cb:cd:b4:4b:2c:5c:0c:56:
         b7:a1:e5:c6:74:74:ac:b9:4e:dc:0f:7a:82:4e:37:39:55:d4:
         41:28:27:a7:c0:c3:31:d2:4c:86:03:b7:6d:d0:7b:64:cd:a2:
         2a:40:03:35:43:cc:f7:67:5a:67:4f:8e:78:95:ee:f7:01:25:
         2a:2f:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:40 2025 by rpki-client