Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File:                     P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier:          aPlmOnzlQp1SsNunD4RcA2nRvbKrH4GRhm8b3QNoznY=
Subject key identifier:   AD:CC:37:A0:15:44:ED:7E:50:F9:C9:BF:CA:75:CE:5B:F9:62:F8:50
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer:       /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial:       0194BCE0EA2F4A347C504B331BEDA34E26F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number:          1040
Signing time:             Fri 31 Jan 2025 15:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:44 +0000
Files and hashes:         1: 1-SAfEHIPvpIzjeCy5Q8AoZxny3k.roa (hash: B/T0TK6WDLMTtz5a/Y6n6GO2yVmrFuy+pcNqZ8mftfA=)
                          2: KaQg1luFqQeXclQWU31ivATaEMk.roa (hash: bbZb4Op2H462Hn18DoohrEF0+UuFJwTPdqnyeROhfe8=)
                          3: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: FUPqNdYp0oQOpjqtp+LMleBrFJyD0872atWSbaghPC8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:ea:2f:4a:34:7c:50:4b:33:1b:ed:a3:4e:26:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
        Validity
            Not Before: Jan 31 15:00:44 2025 GMT
            Not After : Feb  1 15:00:44 2025 GMT
        Subject: CN=adcc37a01544ed7e50f9c9bfca75ce5bf962f850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f7:c8:9d:74:9a:61:9f:dd:35:cf:4b:77:c9:
                    d6:f7:99:e8:e2:76:05:72:3d:a4:a3:d0:ea:b5:6e:
                    58:28:95:da:fd:59:2f:fe:b8:97:dc:e0:c7:f9:50:
                    af:ee:c7:9d:ff:fd:0f:c8:43:f5:b4:d7:e4:c8:89:
                    ab:75:3a:65:36:9f:e1:61:e4:7b:59:28:e2:a1:0e:
                    4b:b5:c2:4a:92:8a:92:75:37:2d:bb:0f:a3:fe:bb:
                    8c:cb:a2:74:c2:1b:8a:e4:04:a7:e7:a1:d9:0c:9d:
                    4e:ac:1c:c9:01:d5:4f:92:6d:72:aa:15:1f:22:18:
                    70:b4:08:8e:e4:f3:3a:78:41:0c:95:f2:f9:48:8e:
                    da:64:2b:c2:4f:98:b5:d4:19:2f:6e:15:8f:9f:1b:
                    b9:a5:de:05:86:42:bc:b7:ae:c2:f7:d9:31:e6:98:
                    76:bc:7b:c4:2a:71:ff:c9:37:b7:90:31:1a:f4:58:
                    52:fc:25:51:f1:d3:78:72:cf:79:1e:e5:12:44:72:
                    60:2e:30:37:3e:a6:0d:3a:03:c7:e0:ee:fa:03:8c:
                    88:71:74:8d:dc:1c:b3:81:53:0a:d2:3a:6f:13:cb:
                    95:1c:62:0f:34:12:c8:98:38:6e:d3:3b:b9:55:0d:
                    e1:c9:8e:f9:cb:b9:fa:27:39:db:ea:af:1c:d4:5c:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CC:37:A0:15:44:ED:7E:50:F9:C9:BF:CA:75:CE:5B:F9:62:F8:50
            X509v3 Authority Key Identifier:
                keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:87:57:b5:71:52:12:f7:90:a2:45:74:ab:69:ee:73:a3:fd:
         10:6f:a6:ff:94:ef:a9:ce:28:64:67:3f:2d:12:5a:fa:e9:3f:
         45:ef:ca:6b:91:e9:0d:54:ea:30:8f:6c:f7:55:15:87:df:f4:
         c7:36:db:64:8a:7a:dd:f1:83:5b:be:0d:d9:b4:81:e0:ee:2b:
         8c:09:46:23:98:2e:23:df:14:4d:c7:c9:bc:1d:8c:0f:26:ac:
         8d:07:86:a5:a9:9e:08:73:72:d2:93:b2:d4:49:32:42:2d:a4:
         b5:76:70:54:61:f8:16:08:28:ae:22:da:45:2c:cc:9d:f0:4e:
         59:c8:ea:22:b0:b8:6f:f8:0c:c2:7c:3d:a6:2b:34:9c:07:2a:
         6e:e3:34:ff:02:75:0d:42:c4:79:11:f3:27:c1:d4:59:8d:ec:
         ae:b3:1b:33:cd:f4:e1:ca:46:b2:68:1d:fc:7a:93:34:b2:b9:
         5d:c1:17:0b:db:e1:e5:5d:bd:04:0d:5d:0f:53:b5:f2:30:ca:
         77:c8:c7:bd:06:85:43:df:0e:cc:83:88:a7:b9:ee:46:57:9f:
         1e:b8:d2:35:56:7a:a8:57:89:eb:05:17:31:6c:26:b3:3c:26:
         ab:67:a5:d0:66:09:0e:38:b0:1e:a8:a2:20:90:8b:a5:ad:c8:
         12:82:a9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:57 2025 by rpki-client