Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
File:                     JiNBtDPh-Py3ljItL9kmQJOW560.mft (raw, json)
Hash identifier:          Y98gYh9yB2kXn7PrPB4vYJ06oyevY4y6QfQgfXO2Tzg=
Subject key identifier:   D0:EE:95:40:F8:A6:96:46:EF:36:23:15:F3:C5:77:7A:49:C0:7D:2F
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Certificate issuer:       /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial:       0194BC72C985E362002A5DC96229934C4401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft
Manifest number:          0DBD
Signing time:             Fri 31 Jan 2025 13:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:26 +0000
Files and hashes:         1: JiNBtDPh-Py3ljItL9kmQJOW560.crl (hash: qKkoMXvM1tzEhOUVyR8y2vD0MRve2y0YtgGp+VCRsFE=)
                          2: OG_A4kIfGMsNQjuMmYxD7_p2pL4.roa (hash: Xfk2o4ht2zMg9IMU5TSnOEAuY38Y9WCQbPUHWVQ3Uic=)
                          3: kAKuIYXg1bp7KYEaGGpYw_p_ZEA.roa (hash: rN2Ict4bzybwIS6kDp0XozP6rV4PW6e1BfkoB7rQg6U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:c9:85:e3:62:00:2a:5d:c9:62:29:93:4c:44:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
        Validity
            Not Before: Jan 31 13:00:26 2025 GMT
            Not After : Feb  1 13:00:26 2025 GMT
        Subject: CN=d0ee9540f8a69646ef362315f3c5777a49c07d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:d2:a3:2d:11:de:5d:0e:9e:6e:a1:8d:98:
                    c3:81:c0:dd:95:0d:8a:df:c8:2b:6a:a0:d9:82:6c:
                    69:ff:eb:bc:03:cb:1c:fa:ba:92:bc:10:e8:84:85:
                    97:d1:9c:06:c3:2b:8e:04:d4:06:ae:ae:3e:3d:c0:
                    27:f5:76:32:b9:4d:8f:81:25:f6:c7:1a:3a:61:e3:
                    e0:59:a9:fa:fd:01:7a:00:1c:7e:37:70:2b:7d:68:
                    71:1f:ba:2d:24:b7:04:ec:8d:07:02:47:08:b4:da:
                    18:cd:c5:cd:0b:26:28:89:78:0a:95:5a:9d:01:70:
                    92:fb:58:7b:9d:45:7a:bd:22:52:48:8d:1f:3f:5b:
                    7d:16:5c:d6:cd:96:2a:ee:db:da:63:23:fb:1f:ea:
                    20:0f:10:b6:3e:91:1c:dd:93:f0:ab:36:67:fc:2a:
                    1c:40:a1:01:27:05:03:6c:79:43:1b:1c:2f:ca:e8:
                    b9:84:4d:93:9c:05:44:c9:0f:b7:e9:65:1d:da:ad:
                    b4:e6:48:85:f5:ac:7f:50:ab:c5:d1:17:43:6d:3f:
                    85:35:98:0c:56:43:f9:e1:b3:9e:76:06:6b:d7:38:
                    04:54:42:0a:05:32:ea:6b:95:3a:f1:a0:5b:39:01:
                    18:37:52:54:9c:08:be:0f:57:04:08:7a:3b:fb:7b:
                    cb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EE:95:40:F8:A6:96:46:EF:36:23:15:F3:C5:77:7A:49:C0:7D:2F
            X509v3 Authority Key Identifier:
                keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:77:34:61:ba:9b:ec:6a:2d:63:0a:43:c1:af:7b:c9:6a:07:
         4f:e6:04:8b:49:5a:ee:5a:55:ed:6b:9b:1a:70:da:af:a0:a8:
         88:b0:ea:5d:3b:a3:4e:66:d0:db:d1:3a:8e:85:f8:7f:79:8b:
         1b:19:06:e2:18:cf:a4:f0:d3:40:3e:b6:ef:05:89:48:77:cc:
         7c:a9:1e:bf:e2:eb:14:17:02:2c:6a:73:19:44:f0:70:08:98:
         7b:35:28:73:be:4d:aa:13:fc:bd:19:c8:87:04:5e:84:71:58:
         3f:d1:cc:d6:e3:90:a0:22:c3:66:bc:6d:8f:85:3c:a3:fe:f5:
         fa:02:f2:62:bb:18:f5:dc:4c:8e:f7:94:80:7f:28:ef:fe:4b:
         97:46:17:7c:d5:d9:73:40:1c:d6:aa:fd:43:91:c3:c4:19:8b:
         32:4b:e4:96:75:0e:16:51:58:4b:ea:3e:9b:82:df:75:55:0e:
         6c:4e:72:bf:79:27:b4:fe:f5:ef:6f:6f:76:db:a7:31:82:d6:
         c0:c2:4a:6f:18:8c:7f:41:52:13:16:ef:a5:74:74:32:bf:2c:
         78:33:5e:c8:1b:8b:86:16:e3:03:f1:db:f2:b8:39:13:f3:fd:
         42:eb:63:84:0a:11:35:7c:c8:80:fe:04:c7:b2:8e:04:e8:e1:
         e1:87:57:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:03 2025 by rpki-client