Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
File:                     EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft (raw, json)
Hash identifier:          PaS5sJOt2ap2pGYbSWJW/tx4ycjRZeb1pQ/EeEjq6cc=
Subject key identifier:   3A:B8:33:28:61:D3:AA:5F:AA:7F:CB:10:FD:57:BD:75:05:93:65:96
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Certificate issuer:       /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial:       0194BC04D29E9558688A1000608229ED9D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
Manifest number:          12D8
Signing time:             Fri 31 Jan 2025 11:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:20 +0000
Files and hashes:         1: 6U4DtVKSJ8L9Vj3yQXvoxkkCUNc.roa (hash: RkWbD6IkYQf5ouaNBu+1Wh62CRz3Kfq7PSTI07u68IY=)
                          2: E9TzElE0MUPD9RVNbR8kUyOFbMw.roa (hash: cmEKmxe0w/xOI/l4yMYS7eyTKMBnIEW6ka0FFqdcppg=)
                          3: EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl (hash: f5OUR/uQj0wcpvqS/p9zn1DizbgzPCIzpjsnfQnLAZw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:d2:9e:95:58:68:8a:10:00:60:82:29:ed:9d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
        Validity
            Not Before: Jan 31 11:00:20 2025 GMT
            Not After : Feb  1 11:00:20 2025 GMT
        Subject: CN=3ab8332861d3aa5faa7fcb10fd57bd7505936596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:3c:f8:06:11:e0:d6:3c:7f:24:3c:b0:c6:
                    44:c9:bb:b9:3d:23:c9:ef:bd:a8:2a:9f:f8:cb:0d:
                    49:57:09:0e:a0:0a:e3:a3:b7:5e:5e:28:33:78:7c:
                    83:ed:75:ff:3e:6a:84:c7:af:e2:92:68:bc:1b:94:
                    85:86:c8:21:52:8e:44:50:3c:85:49:b1:bc:f5:78:
                    73:23:a8:27:bf:17:c4:1f:ee:45:aa:53:6f:c7:bc:
                    e1:67:e9:8c:e0:66:93:4c:82:c3:a8:ed:35:0d:4d:
                    28:87:98:5c:10:03:76:62:6f:1a:51:26:01:83:2e:
                    c8:3c:59:ee:79:5f:a2:b8:24:3b:4a:0e:1a:ce:96:
                    14:45:c8:b1:81:7e:69:32:96:ff:c4:8f:90:99:26:
                    cd:34:87:0f:7f:7b:8f:b6:a3:3e:21:2b:d9:2c:e7:
                    5f:11:77:b8:f4:7f:d6:c3:0c:1e:81:ef:fb:4d:13:
                    9a:4a:8c:05:4f:24:d4:b3:80:25:4e:e7:38:c5:ff:
                    b7:e3:19:ef:87:b4:d3:71:d6:4b:63:38:15:00:e3:
                    5d:c3:54:e5:a5:05:5c:ba:47:ef:19:e6:0f:2c:8a:
                    fe:6f:ea:d0:2f:1f:34:59:cb:fe:ac:ea:12:58:e1:
                    73:88:3b:73:60:2a:59:4b:9b:27:f5:bc:49:1c:05:
                    5b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B8:33:28:61:D3:AA:5F:AA:7F:CB:10:FD:57:BD:75:05:93:65:96
            X509v3 Authority Key Identifier:
                keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:07:6a:2d:8c:d8:15:77:a2:66:c2:c7:e7:65:c0:6a:42:d8:
         f0:db:46:40:18:ee:e2:4f:09:c9:57:8b:04:2e:2e:d6:3d:e0:
         ed:7d:cd:54:f9:29:b1:5e:f9:9d:2f:ad:73:e2:22:93:4b:bb:
         b5:9e:c9:59:68:01:8c:34:7d:9a:37:01:87:cb:95:9b:ea:bb:
         e2:33:c2:29:3c:58:2b:7c:9a:2f:1d:ce:4d:aa:df:8d:60:21:
         ba:80:16:18:f6:78:ee:75:af:17:42:f1:7f:a5:b3:be:41:77:
         6b:db:be:a6:12:0c:3e:bc:37:6d:5d:6d:dd:5f:81:23:1d:76:
         b3:9e:ca:c4:1b:c0:8d:4b:a0:2c:6d:b4:e5:e9:cb:8e:4c:91:
         61:31:b7:33:69:36:49:ff:db:90:6d:4d:70:61:30:b8:46:43:
         47:a8:1a:e7:69:5b:7b:20:4a:7e:64:42:cf:75:5b:c2:e5:ec:
         1e:8b:ba:84:b3:b3:05:ad:8d:42:f4:06:75:e1:1e:e9:2c:54:
         ec:bf:7b:64:9c:de:81:d7:ae:cf:56:6f:0e:e2:82:65:01:1a:
         c4:a0:9d:15:c7:ba:5b:4e:0f:6d:9d:18:23:ff:b6:ee:99:73:
         e9:13:0d:e9:c6:a5:ad:a1:f8:f4:c3:3d:47:1c:99:4a:0f:36:
         88:d8:87:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:50 2025 by rpki-client