Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
File:                     97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft (raw, json)
Hash identifier:          4iSJXJYlkTlZMIy3Cx3tuThJrpodZUJHiu7LU2Q4dQA=
Subject key identifier:   E5:32:BF:40:B1:07:A5:4E:C0:9F:31:FE:3E:68:BD:70:2A:FC:9D:7A
Authority key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77
Certificate issuer:       /CN=f7b069d33df1225a8b3643a01364f279df40d877
Certificate serial:       0194BCAA04EE69F0DDD71C4B4894D5CDDCFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft
Manifest number:          0120
Signing time:             Fri 31 Jan 2025 14:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:46 +0000
Files and hashes:         1: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl (hash: +Db4KmSdDNi3GZqjntjTMCZUnvQdfn3K8QAC8DByAJk=)
                          2: G8WBqm_n-G2Dq7rJrsvaHEWmDxE.roa (hash: IA50muj3Iqkw7YnSvxI1jyledliIC9BsrNcG2Szt4iM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:04:ee:69:f0:dd:d7:1c:4b:48:94:d5:cd:dc:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7b069d33df1225a8b3643a01364f279df40d877
        Validity
            Not Before: Jan 31 14:00:46 2025 GMT
            Not After : Feb  1 14:00:46 2025 GMT
        Subject: CN=e532bf40b107a54ec09f31fe3e68bd702afc9d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:70:20:0d:0f:cb:7f:c8:c8:d2:e6:68:57:e4:
                    a1:e4:23:5a:74:ef:3a:78:25:a8:cb:79:00:0c:72:
                    eb:1b:ae:f1:05:f0:5e:f1:25:a5:cb:4a:85:ca:98:
                    02:4f:f7:f3:52:99:35:ff:99:1a:23:c4:4b:79:49:
                    8b:d9:30:73:94:e0:7e:7c:e8:ce:3c:c2:2c:94:3b:
                    62:b2:29:54:6c:41:3f:d6:b3:18:d4:79:16:53:22:
                    88:7e:92:29:5c:12:7a:a2:c6:32:8a:72:53:17:43:
                    46:b8:00:29:c2:dd:9b:06:4a:94:78:7c:1e:cb:61:
                    6b:35:58:a1:46:79:89:1b:40:62:96:e1:8b:5a:b3:
                    1d:52:4e:28:ca:b6:b7:ef:29:fe:5c:bd:29:05:42:
                    9a:41:0c:80:dc:50:32:bf:60:de:2d:c2:b1:b0:79:
                    03:06:58:1c:76:6f:23:26:8f:8d:95:12:a4:f5:43:
                    03:3f:36:8f:17:9a:7b:27:24:ac:07:44:03:d4:41:
                    a9:44:79:ec:ab:0a:b8:85:e5:d2:21:86:c2:c3:df:
                    e3:08:74:0c:e9:87:b4:79:1a:82:d2:f2:ac:34:bc:
                    dd:2d:7c:49:b1:f8:79:32:c8:64:0e:8b:64:ad:ec:
                    cc:02:fc:99:bf:50:3c:44:af:3d:3d:a5:a0:41:95:
                    c5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:32:BF:40:B1:07:A5:4E:C0:9F:31:FE:3E:68:BD:70:2A:FC:9D:7A
            X509v3 Authority Key Identifier:
                keyid:F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d3:6b:65:a9:34:c0:3e:d7:34:1e:2d:09:d4:4b:d7:cf:3a:
         7e:f3:15:7e:40:9e:90:fa:96:80:5b:8e:ef:11:73:46:68:f3:
         0b:80:a0:73:0e:4d:a6:ad:35:44:ae:09:14:5c:c0:04:7c:87:
         3f:2c:95:68:30:10:29:c0:0b:4b:a8:c1:58:fb:15:8e:9f:7d:
         03:70:06:8a:4f:5b:b7:6e:2a:cd:04:3b:52:10:97:ba:bc:1d:
         66:92:c8:c5:d9:5d:1a:55:c0:5a:45:29:06:cf:11:89:b2:fd:
         bd:0b:86:e3:93:b6:14:b4:18:c6:57:56:fe:6d:1b:4b:00:66:
         fd:c0:4e:eb:58:f6:d4:5b:3b:37:30:ea:96:e3:c3:b2:6c:b9:
         d6:bb:60:69:8c:9e:da:a6:89:fe:df:10:db:20:1b:18:e3:bf:
         3a:05:97:1b:4d:25:b2:74:66:5d:2a:cd:d0:52:da:fd:be:c7:
         70:f4:ee:4c:22:a7:ed:5b:8a:21:d0:05:f8:27:c6:61:73:d2:
         93:9f:0c:92:b3:f4:85:48:51:9f:b7:41:cf:b5:8c:a2:08:9d:
         3d:4c:fb:e3:23:bb:bf:19:71:a2:d8:15:ac:6a:06:5e:f3:7c:
         36:6f:25:37:ab:30:80:74:67:1f:f7:ff:1f:a6:38:79:43:e6:
         dd:db:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:57:13 2025 by rpki-client