Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File:                     3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier:          47dbhR+jjjshRLcKlikukqEjvqAB2vB7NGX3DKnROyc=
Subject key identifier:   D2:0C:5F:FE:C2:F4:49:EF:C9:1B:41:4C:55:67:39:D1:48:89:7A:A3
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer:       /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial:       0194BD179813613917BA0B42F70B28F1EA4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number:          106D
Signing time:             Fri 31 Jan 2025 16:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:27 +0000
Files and hashes:         1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: 6OyO7k0ofb4PH3BKu6GmwdqqJM33dJ83tzuudQGzWng=)
                          2: yvHmtz-vd__QGyK6PoEkr_n-Dok.roa (hash: K4rgADfkHdT22x5s6vfWG3HXGINmJUAubhmd+BDk2vo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:98:13:61:39:17:ba:0b:42:f7:0b:28:f1:ea:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
        Validity
            Not Before: Jan 31 16:00:27 2025 GMT
            Not After : Feb  1 16:00:27 2025 GMT
        Subject: CN=d20c5ffec2f449efc91b414c556739d148897aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:fd:fa:dd:c5:80:1a:54:44:32:70:ba:c5:
                    31:3f:5e:27:fc:30:8f:ab:4b:26:d4:48:13:be:bc:
                    c3:04:33:5d:3a:88:12:55:b6:00:4d:c6:1c:33:d6:
                    15:6a:ba:c9:97:b0:42:75:68:32:70:be:6f:f2:d1:
                    27:7f:1d:f2:1f:fb:0c:c7:3d:03:c1:95:a2:75:00:
                    08:8c:67:cc:04:27:fb:f1:8b:bc:88:95:78:0d:8c:
                    7d:97:d1:97:af:32:8a:e4:1e:6d:62:df:e8:ee:ff:
                    8b:8d:41:98:42:5f:1e:d2:f2:f3:ae:df:67:18:6f:
                    72:dd:57:be:e4:7d:24:0e:0b:d1:90:07:db:67:2c:
                    2d:1c:19:7c:a1:2c:41:a6:4c:9b:92:4a:91:04:b6:
                    c7:8e:56:7d:1c:75:de:6f:9d:34:14:18:b7:5a:69:
                    70:7d:b8:5f:b3:c5:f0:d3:8b:2f:50:05:61:0c:c8:
                    b9:47:bf:d9:3d:8f:93:88:be:18:ad:16:6e:06:85:
                    5e:27:d0:e0:48:99:ab:00:eb:df:2e:4f:c1:79:b3:
                    fd:0a:c6:45:de:60:95:03:e0:a8:b4:34:a3:01:89:
                    ae:2f:74:e7:e3:6c:e7:f9:ff:88:ba:8d:b7:bd:6e:
                    10:76:c6:89:55:73:81:b5:0d:d7:4c:c5:8c:5a:ea:
                    dc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0C:5F:FE:C2:F4:49:EF:C9:1B:41:4C:55:67:39:D1:48:89:7A:A3
            X509v3 Authority Key Identifier:
                keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0e:60:87:d2:85:a9:33:88:a8:18:aa:b0:18:fb:35:35:7b:
         a3:d0:80:2d:7e:9e:8b:8e:ca:f1:80:8c:1e:c5:5f:7a:d3:3f:
         c3:d2:8a:ef:42:39:f7:80:f6:63:3b:c2:52:86:2d:f6:93:83:
         e5:e6:e0:31:72:48:1b:8b:ce:15:5d:ed:b5:d3:ec:4e:86:5c:
         bd:c9:5a:f8:9c:11:e3:10:fa:15:fc:87:92:50:3f:40:73:9b:
         3f:59:e8:1d:1a:a8:a2:a9:38:74:50:8e:39:55:35:a3:48:0e:
         23:b4:fb:12:0b:c0:76:48:45:a9:00:ce:54:f9:c2:2e:c0:5e:
         b1:86:6f:5e:0a:d7:30:91:1c:43:91:12:bf:4c:0a:60:a2:b8:
         01:90:72:99:78:70:08:24:cf:bf:14:92:de:41:71:e3:03:28:
         6a:50:57:3c:6d:ee:d1:91:9a:0b:62:87:b6:e9:0e:fa:b5:ff:
         a4:c0:65:45:41:7f:78:8b:d2:5c:a5:d0:c7:c6:93:cb:ac:b0:
         af:fb:5f:11:44:72:51:cc:2c:9b:be:f0:2c:8b:2c:c4:9e:75:
         6e:e3:d8:24:49:2b:ff:39:42:d0:ae:5e:d8:88:57:11:ad:35:
         b9:c6:dd:2b:71:51:57:6e:48:b0:1f:c3:2d:68:47:64:ab:b2:
         ca:af:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:33 2025 by rpki-client