Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
File:                     6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json)
Hash identifier:          mrWkqPezCq7sztZPJ2EIg5dNJcxEVvzkfa3knxVrEhA=
Subject key identifier:   51:72:04:01:5B:21:40:17:5B:0F:B1:D8:C3:9F:1D:B8:E8:E1:27:95
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Certificate issuer:       /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial:       0194BCAA089A964E7F340E7A8A25C7AB71FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
Manifest number:          017D
Signing time:             Fri 31 Jan 2025 14:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:47 +0000
Files and hashes:         1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: d+/IWgB1n69tnYdvh6yhCMJLgAYLuKgGOJtZFqXnxbo=)
                          2: ht3KdHbaaKn0dUB9Eygpkn4YA9g.roa (hash: NIfc2tNf/lNxNw/7+fw+tsc47P3faBnMYY6r4SXpFYs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:08:9a:96:4e:7f:34:0e:7a:8a:25:c7:ab:71:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
        Validity
            Not Before: Jan 31 14:00:47 2025 GMT
            Not After : Feb  1 14:00:47 2025 GMT
        Subject: CN=517204015b2140175b0fb1d8c39f1db8e8e12795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:da:a1:2c:b6:74:6f:49:5c:4b:6a:31:7d:de:
                    36:7d:f5:23:6f:80:67:63:56:02:7a:64:94:8b:38:
                    76:d3:4c:b7:69:a1:e9:b7:fb:4b:21:fc:86:f9:4c:
                    9d:4a:37:90:3b:55:23:57:db:15:9a:91:1d:07:8f:
                    10:d2:ea:30:38:ea:ae:a4:58:27:bf:ba:3c:54:1d:
                    9b:86:cc:8a:e0:ba:15:a5:17:18:fb:38:4c:0f:e1:
                    d1:19:ff:a6:69:b9:44:f7:5b:96:1b:30:89:7c:bf:
                    39:df:75:ee:c5:7f:2c:b0:a2:7c:98:97:10:fb:c1:
                    24:f5:31:8e:2a:2a:6a:b4:41:f2:96:94:07:10:8f:
                    78:55:bd:64:75:ce:21:1f:ec:84:c6:1f:41:ef:69:
                    eb:cc:95:6a:50:ff:fd:33:06:85:c4:fb:c7:2d:af:
                    c4:91:48:8c:cf:f8:89:7a:8a:76:3d:c7:91:3c:2f:
                    53:56:24:a4:4d:b1:8c:fd:c8:7d:ab:41:e2:c8:a0:
                    98:70:3d:33:ae:86:a8:23:a8:7a:11:c1:52:4d:62:
                    a6:be:2d:3a:d1:a9:8a:75:38:71:35:f0:50:a7:67:
                    17:eb:74:4a:6d:f6:6d:05:b6:38:18:3b:dd:f8:e6:
                    54:30:e2:8b:27:e0:19:33:f3:26:66:8f:de:7e:73:
                    ae:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:72:04:01:5B:21:40:17:5B:0F:B1:D8:C3:9F:1D:B8:E8:E1:27:95
            X509v3 Authority Key Identifier:
                keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:1e:11:ed:3f:a3:c3:bf:aa:7a:20:26:f1:10:a8:57:01:47:
         f8:c6:41:1b:1a:14:ff:ec:d1:5b:52:e3:45:49:08:b7:ce:6c:
         a7:d3:52:58:e5:25:5a:15:02:01:01:c8:be:09:0f:42:6e:dd:
         14:a1:ff:78:4c:a7:4b:3a:61:cb:a1:60:90:8f:3a:50:79:26:
         1c:dd:2f:8a:21:bc:fb:8a:77:50:47:3e:dd:ec:ff:88:69:87:
         48:82:90:7f:69:cb:e5:74:56:b8:bd:09:da:7d:39:f0:8d:df:
         41:20:99:18:90:4e:24:fa:49:7f:c9:26:95:54:e5:36:47:25:
         5c:bf:9d:f1:56:20:f3:e4:91:5c:a9:4a:65:78:cd:cd:20:af:
         84:7a:34:61:bc:fc:cf:47:85:f4:a4:11:9f:1b:c5:7f:70:48:
         57:f5:cb:ac:44:0c:e9:63:e4:15:e1:e8:78:15:9b:35:48:ab:
         44:72:76:f0:39:16:49:f1:e6:ad:e0:66:be:71:fb:55:3c:0c:
         5d:61:b8:5f:fb:d4:1f:bc:2b:47:5b:a8:1a:06:fc:6e:38:0b:
         d8:d5:d1:14:d2:b4:7d:05:31:20:3d:cb:40:ad:20:9c:72:2c:
         1c:ea:8c:75:03:21:e4:4e:d3:51:92:9c:5e:22:23:ba:a6:b2:
         74:d6:4a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:33 2025 by rpki-client