Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
File:                     V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft (raw, json)
Hash identifier:          9h/+L+3nbkJZF+u3viOOx9LAdRBKJ4uLPit8mGoJi6M=
Subject key identifier:   CF:58:05:74:C1:40:94:8D:8C:08:A8:63:B0:E7:B3:B0:19:4A:07:0A
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Certificate issuer:       /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial:       0194BD8589EE7EC16003AF664066D5DE2763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
Manifest number:          1273
Signing time:             Fri 31 Jan 2025 18:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:32 +0000
Files and hashes:         1: UZXaw9NBRAkE4GO4DgWv40vOCU8.roa (hash: HEP1k7kYKlUJdDFLP800Gto7Orwjw4zWY5tnNYDqwYE=)
                          2: V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl (hash: BkHnW88iTaWu+JUpOvk4q+LZhdEuqVECOiDdbCtT/+E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:89:ee:7e:c1:60:03:af:66:40:66:d5:de:27:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
        Validity
            Not Before: Jan 31 18:00:32 2025 GMT
            Not After : Feb  1 18:00:32 2025 GMT
        Subject: CN=cf580574c140948d8c08a863b0e7b3b0194a070a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:8b:54:fa:d7:5b:a2:1e:fa:5d:33:5c:d1:
                    d8:91:52:60:40:75:21:63:21:d2:8c:d7:6c:66:1d:
                    13:72:bf:87:1f:50:8c:ca:84:3a:a0:75:ed:84:aa:
                    47:2d:9f:e5:43:6b:42:a7:86:f4:79:35:5b:47:81:
                    12:66:4c:43:37:4e:4c:ba:46:da:38:84:58:85:7f:
                    9f:13:fb:1a:f0:1f:5e:b3:67:aa:23:64:ec:f6:f1:
                    d7:e1:57:3d:2f:79:69:51:6c:71:07:e4:11:5b:f5:
                    5a:45:57:1b:86:e7:ab:2e:20:4e:93:f4:d3:66:82:
                    60:2a:0d:98:53:4c:45:26:18:1a:7f:e9:d0:06:d0:
                    fb:34:92:1f:65:88:27:88:ad:9a:2d:3c:62:f0:ba:
                    52:4f:67:32:c9:d2:49:b0:23:05:42:c9:12:43:68:
                    c0:c2:66:89:b0:1b:7c:dc:a7:e4:23:90:5c:3f:c9:
                    68:94:2e:86:ea:6c:11:0d:48:01:b6:8c:89:30:81:
                    f1:2e:15:0e:be:e9:40:bd:7d:61:d7:87:66:39:85:
                    df:f6:5d:70:39:da:e9:8d:54:34:9d:75:52:bd:9f:
                    ea:25:6a:cd:13:f4:0b:73:29:83:4d:e9:07:6d:71:
                    3e:34:3e:d7:eb:e1:bf:f7:39:17:35:75:e5:a8:44:
                    3a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:58:05:74:C1:40:94:8D:8C:08:A8:63:B0:E7:B3:B0:19:4A:07:0A
            X509v3 Authority Key Identifier:
                keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:1b:71:6f:e1:35:34:db:1e:3d:52:84:7c:17:ec:8f:aa:08:
         f8:cf:d1:b8:ee:ce:95:53:d7:5f:85:f7:24:3d:f1:4d:c8:70:
         92:78:13:22:43:df:94:af:b0:9f:0c:fb:b5:95:8e:a3:2d:05:
         a4:7c:da:4c:c0:88:bb:79:51:b5:4b:ca:d2:77:aa:bc:df:48:
         1a:9a:5e:23:5f:6c:a4:60:82:1f:0b:46:59:e3:ab:f6:50:d7:
         b5:31:9e:52:a7:a7:5f:8e:19:a9:c0:b2:75:a8:f8:ac:2d:c0:
         ba:89:31:07:99:fe:ad:91:27:11:d2:fc:0c:20:55:cd:50:49:
         b4:08:3a:1f:29:cb:75:ee:2b:55:ec:ab:b1:f9:c2:ca:aa:6c:
         42:90:07:96:8e:c2:fb:2f:4e:ba:46:ad:66:75:91:53:8c:a9:
         29:28:65:d8:8f:e4:65:33:57:2d:06:7d:8b:7d:a4:12:39:ab:
         d3:7b:83:ab:8f:cd:14:7d:38:ff:dc:93:b9:6b:18:c9:36:a6:
         c0:81:f5:83:11:c0:c5:41:16:f0:ed:92:af:23:95:c9:31:91:
         5e:25:dd:03:dc:f0:27:d7:9a:1b:44:25:63:8c:9e:8b:93:4f:
         08:94:fc:b0:67:1c:e3:9b:1d:14:56:00:ca:30:80:8e:aa:ae:
         39:ac:02:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:08 2025 by rpki-client