Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
File:                     GlN6DAozEJGzByU8bwfo-ChU5rA.mft (raw, json)
Hash identifier:          AysT6u4fbi7MAiVmmMNu9SaRblrV8Eb0qv6CyDLsQm4=
Subject key identifier:   F5:C2:E1:C3:7B:E1:68:3E:D3:41:89:9B:B5:99:4B:29:62:86:6D:8B
Authority key identifier: 1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
Certificate issuer:       /CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Certificate serial:       0194BC04E987513EB27B71CF8B2F6D326697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 11:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:25 +0000
Files and hashes:         1: 3LmcdlhkUozmC6fvBNvRqCvSzt0.roa (hash: Y7dEvx1WxwHh/kqiqr3Nj0OZHbvLg2W3/22cNvnOsh0=)
                          2: GlN6DAozEJGzByU8bwfo-ChU5rA.crl (hash: bC4w4nXTs6uf4c0t7Z8LCE6TwnsDcoF5ww5Mp2F3qvg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:e9:87:51:3e:b2:7b:71:cf:8b:2f:6d:32:66:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
        Validity
            Not Before: Jan 31 11:00:25 2025 GMT
            Not After : Feb  1 11:00:25 2025 GMT
        Subject: CN=f5c2e1c37be1683ed341899bb5994b2962866d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:33:a4:1d:f2:fb:5d:3a:da:7c:3c:30:60:
                    df:40:f1:3d:1a:22:6b:b1:02:4a:27:1b:34:2f:c4:
                    0b:86:73:8a:e6:d0:f0:57:08:44:e2:d2:8a:ac:09:
                    80:8a:1c:4b:33:d9:69:47:d5:b9:9d:4a:bb:f9:96:
                    ef:b3:bc:e0:80:94:e5:4a:d4:96:ef:7c:a1:7f:fd:
                    7a:0b:06:5b:65:b9:9e:28:1e:b5:45:e0:3c:84:b4:
                    42:5f:16:98:ae:bc:e1:be:85:75:c0:1e:e8:53:c3:
                    34:cb:44:ff:70:6d:71:0c:6c:35:02:cd:74:fd:b7:
                    dc:a0:f2:ce:46:af:2d:77:2c:99:8d:21:55:52:fa:
                    78:2a:63:38:b5:35:44:c7:04:74:6f:98:ae:4d:67:
                    b6:76:1b:ea:6c:25:29:49:d1:7d:3b:9e:09:14:88:
                    13:9d:33:f8:2b:4c:4f:98:51:de:97:67:05:f5:6f:
                    fd:48:d6:51:9d:a9:f4:ad:87:c3:f7:4c:93:05:48:
                    34:bb:eb:07:31:87:ee:22:66:a9:22:99:a9:b9:35:
                    5e:43:44:d0:00:39:41:04:a0:4c:38:20:b3:ea:82:
                    7a:f4:cf:c2:2e:2f:a9:14:68:54:77:d6:38:d8:fa:
                    34:41:8c:a1:11:49:3f:c3:61:1f:bb:a9:d2:d8:62:
                    79:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C2:E1:C3:7B:E1:68:3E:D3:41:89:9B:B5:99:4B:29:62:86:6D:8B
            X509v3 Authority Key Identifier:
                keyid:1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b2:27:5f:4a:0d:07:fe:24:67:35:2c:e4:d4:d3:d0:c7:d9:
         67:76:75:be:41:6a:25:78:8c:af:76:2b:c8:e3:c2:a5:40:65:
         44:fe:b4:56:dc:f5:98:32:4e:db:fe:f9:4d:04:2e:88:e9:75:
         cf:ce:a2:b8:f3:a5:d0:93:95:35:f3:6b:6a:06:67:6f:63:1c:
         45:e2:d8:76:32:ee:67:0e:25:e0:81:70:bf:72:15:8c:c7:44:
         78:19:51:67:eb:d3:6e:ee:7b:b3:4e:f7:19:ba:f3:a4:d4:b0:
         90:b1:9a:9c:b7:c8:77:cf:7b:b9:66:d7:ce:8e:1f:b7:0d:a9:
         83:7e:14:93:ea:25:7e:8b:3b:6b:ec:e8:a4:7b:77:30:b6:1e:
         32:d5:d6:75:f9:73:45:60:9b:7b:84:2d:f6:3a:f7:8a:f9:ea:
         2b:24:78:bd:c6:7d:48:36:d0:5e:d2:84:11:1b:d8:fa:30:99:
         4e:6f:eb:37:ce:ba:e5:01:b3:c0:65:f7:91:9d:37:40:4e:ad:
         50:bf:20:23:bb:77:64:0b:1d:6b:19:48:64:22:29:2e:f5:35:
         a3:f3:06:0a:6b:37:ed:27:14:68:64:dc:81:e2:ec:26:b5:2f:
         ad:f3:1e:36:5a:06:2b:53:7f:00:a9:34:bf:14:69:99:e1:36:
         57:0e:a7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:24 2025 by rpki-client