Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
File:                     t7wa3782Jkj8Y1wzMvODvLwB53Q.mft (raw, json)
Hash identifier:          GsQIbdacssk2kmNW/D6XKw8yvtgo0+K21mo/PRB2qP8=
Subject key identifier:   C4:20:67:14:EC:8A:66:BC:0C:15:53:29:D2:AF:77:AE:8A:E8:53:61
Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
Certificate issuer:       /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Certificate serial:       0194BD174B5D6ACC1762D72A76D430AD07C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 16:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:07 +0000
Files and hashes:         1: 696z34QMsC6_vR7KEfwUSvQdpWY.roa (hash: yNhDUKimDD5hTy/VhafEDO3vPLqIP7iVfa9gPXqtn9I=)
                          2: t7wa3782Jkj8Y1wzMvODvLwB53Q.crl (hash: Keqs8f/X1BkQcelas3HAQW59EIIhi/5F4k71NpfDZeM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:4b:5d:6a:cc:17:62:d7:2a:76:d4:30:ad:07:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
        Validity
            Not Before: Jan 31 16:00:07 2025 GMT
            Not After : Feb  1 16:00:07 2025 GMT
        Subject: CN=c4206714ec8a66bc0c155329d2af77ae8ae85361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:41:2d:3a:43:cc:60:86:05:60:50:e3:c1:
                    2a:49:0f:c2:18:7d:87:a6:95:c6:32:1c:d5:7b:33:
                    c9:1e:c6:b2:94:ab:16:ab:88:23:b1:fa:04:20:c0:
                    da:48:3f:d3:b4:ee:b7:65:de:39:62:7b:71:a6:ac:
                    43:fb:2b:a5:f8:94:ad:66:ba:d5:06:d5:c7:70:39:
                    4c:62:5b:88:95:85:17:ae:c7:e3:cb:28:98:18:ca:
                    99:0a:f6:e4:ee:71:0d:bc:e7:fc:7b:a7:07:80:b0:
                    33:01:08:60:b5:05:88:25:6d:50:21:33:fb:75:d0:
                    de:67:c8:fe:fd:e6:fc:c7:b3:0d:88:75:e5:02:19:
                    64:9f:3c:41:ce:da:ba:15:a2:1a:17:1c:8e:2f:12:
                    e8:98:79:79:8f:41:24:b8:dd:ce:2e:fb:c6:12:89:
                    f4:07:1d:83:36:c1:d4:f9:c5:86:03:76:19:08:b6:
                    61:ab:2b:d9:54:69:a2:5f:e7:1f:03:bb:25:2e:a4:
                    03:28:bf:24:33:65:21:6e:a6:35:94:9f:97:0f:b0:
                    cd:51:6b:4a:28:92:9b:cf:c5:fa:e5:c0:f0:88:94:
                    76:75:0b:5d:ad:a3:a3:27:fd:4e:b2:da:b3:9c:b5:
                    93:ee:f9:5d:39:cb:e3:f8:0e:4a:ab:60:f4:9c:bc:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:20:67:14:EC:8A:66:BC:0C:15:53:29:D2:AF:77:AE:8A:E8:53:61
            X509v3 Authority Key Identifier:
                keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:93:93:9c:94:70:d9:49:89:32:24:a7:fe:54:75:a3:88:2e:
         00:e4:92:f2:1a:ae:f5:16:75:4a:a3:74:43:5f:54:00:54:6d:
         9d:f1:68:ac:10:94:2c:24:30:f1:68:2d:91:31:70:10:74:c1:
         6c:59:ff:be:ef:9e:5d:3a:9e:67:06:45:d4:61:03:57:92:d5:
         b3:ca:9a:cb:f3:6f:bb:41:f2:ac:bc:62:41:b9:f6:bc:f6:4a:
         96:c5:0b:45:dd:7f:a6:f4:7d:c7:5b:29:4f:28:8d:eb:03:0f:
         69:68:d2:c5:ed:85:77:2e:92:54:a5:46:f1:82:69:a2:a3:13:
         28:90:c3:41:bd:42:a6:83:ef:32:f9:c7:54:26:e2:14:9b:aa:
         93:b3:d6:79:2e:52:fc:90:41:fa:91:1a:8f:78:1f:68:2d:38:
         e4:e3:04:79:97:f2:7b:93:02:1b:69:b6:38:f3:24:dc:1f:35:
         48:ac:2c:b3:01:74:93:21:69:03:51:05:ca:9d:97:4a:8f:8e:
         ce:8c:bf:8f:0b:28:e6:46:70:c2:12:6a:a0:4d:34:b3:e7:60:
         49:fd:ac:49:6d:aa:a0:7c:dc:10:48:a7:21:f5:81:25:03:10:
         10:f9:f1:f0:3c:79:3d:bc:cf:2f:c9:72:ad:aa:45:70:d3:c4:
         82:86:c0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:04 2025 by rpki-client