Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
File:                     9U47eX9Lo36_cYmkwU8FINfPMNc.mft (raw, json)
Hash identifier:          5A4sFHc1xLTPQ/iiDq73NnOCP8Z8XohJOiNlces2Bqc=
Subject key identifier:   82:CF:F8:52:FF:80:57:DE:14:26:73:F3:09:91:BC:3B:9C:56:25:AC
Authority key identifier: F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7
Certificate issuer:       /CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
Certificate serial:       0194BC72DA9AD15A2186594F49CE5C4287E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft
Manifest number:          0143
Signing time:             Fri 31 Jan 2025 13:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:31 +0000
Files and hashes:         1: 9U47eX9Lo36_cYmkwU8FINfPMNc.crl (hash: NsFNPujnRNb+nOYtyrCl+qcDlL+psvPhGYBV4J7DMDQ=)
                          2: UmpOhRez3moOZWrjBKIN45JkCE8.roa (hash: rPkye9amYErKpRGECf5NJc6OYwjs4QcPoervOMLXjak=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:da:9a:d1:5a:21:86:59:4f:49:ce:5c:42:87:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7
        Validity
            Not Before: Jan 31 13:00:31 2025 GMT
            Not After : Feb  1 13:00:31 2025 GMT
        Subject: CN=82cff852ff8057de142673f30991bc3b9c5625ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8e:c1:3b:3f:97:a3:c9:06:bb:41:80:3b:5f:
                    d8:1b:20:9d:9c:6d:a7:00:ae:ba:7c:3f:0e:3c:d7:
                    26:fc:b5:44:80:c6:35:64:e5:e2:2c:9a:11:19:5d:
                    6e:fc:cc:2c:b0:e8:25:ee:03:9c:a8:68:77:2e:7c:
                    60:40:67:3f:36:84:eb:ef:71:75:8d:43:90:61:97:
                    12:0e:d4:b1:b5:6a:ca:6d:5c:17:90:1c:09:10:8f:
                    0f:32:0f:af:72:04:6b:e8:0d:1d:df:b8:c3:91:ad:
                    3c:f5:47:c0:f8:5b:45:c3:23:69:57:79:27:b7:6c:
                    d9:c8:35:70:5d:7d:dc:e6:c0:a6:2a:b5:d2:8b:03:
                    16:af:79:a0:73:47:90:2d:98:dd:e3:12:57:72:fb:
                    cf:a7:92:7b:2c:8f:22:76:aa:e5:57:2a:6f:1a:f8:
                    b2:88:af:50:c9:d7:90:1d:e9:f7:2d:48:ef:8e:5a:
                    6e:5d:73:ec:b6:7c:ee:ea:79:6b:32:ec:49:e8:19:
                    71:85:7a:eb:3c:8b:1d:92:10:92:0f:0a:da:3d:d5:
                    6c:55:1d:32:9a:5b:f3:53:28:a0:a4:8d:96:06:08:
                    ca:17:ad:dd:5e:1f:ae:ea:4c:ba:d8:ba:9c:95:ae:
                    ef:9b:14:0a:7a:f2:9e:47:74:9b:ba:d1:3a:e4:82:
                    c8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CF:F8:52:FF:80:57:DE:14:26:73:F3:09:91:BC:3B:9C:56:25:AC
            X509v3 Authority Key Identifier:
                keyid:F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fa:d7:51:0d:40:94:73:6b:33:e8:57:41:58:da:61:59:c4:
         ba:44:c0:3f:7e:7c:d3:b5:e3:6c:be:85:9d:df:b4:4b:59:dc:
         cc:81:c0:e5:1e:9f:df:55:38:54:06:59:99:f9:6a:d3:f8:a9:
         38:04:60:b9:22:af:4f:48:93:f9:3c:db:a3:fe:ea:9a:f5:0e:
         8d:e6:14:c6:e2:30:0a:99:c2:93:79:b3:93:f2:13:67:4e:e6:
         70:bc:31:7d:9f:cd:4c:2b:6d:07:fc:8d:ad:83:68:44:99:a9:
         f2:5e:4e:04:28:d3:a6:57:4d:59:e2:b1:49:2b:42:1f:38:da:
         38:72:02:2d:a1:9c:ed:c1:fb:60:86:14:09:47:5a:a6:b9:74:
         6d:6e:ad:67:27:e3:88:fe:08:80:54:69:c8:6f:cd:d5:39:cd:
         7b:1c:5d:57:d9:8d:1e:9d:da:44:8b:27:c6:64:2a:f7:33:34:
         3e:a7:7a:92:3c:84:aa:9b:f5:12:2c:67:70:c4:52:d7:fb:37:
         28:44:c1:a6:d9:a4:60:fa:1a:4f:b9:4b:7a:8a:95:aa:61:e2:
         d8:d0:44:2c:07:f1:91:9a:d8:eb:30:10:3f:fb:58:91:6f:8e:
         3a:76:ba:ae:ae:6e:f9:ea:db:1b:ea:ef:a6:6d:b2:ac:74:42:
         9e:f2:1f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:37 2025 by rpki-client