Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
File:                     mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json)
Hash identifier:          xhgUlDvkZJC6ooki8NzAC9L7GVGGXZxNuYZx4eaIIqs=
Subject key identifier:   5B:60:DE:AC:26:F2:66:6B:19:1F:AD:2C:0E:76:7C:BB:1C:87:76:79
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Certificate issuer:       /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial:       0194BC3BCC877F8C581706C93F97D4A66271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
Manifest number:          1449
Signing time:             Fri 31 Jan 2025 12:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:22 +0000
Files and hashes:         1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=)
                          2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=)
                          3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=)
                          4: P82-6fcmXy1vqdLrwWWqytTl0TM.roa (hash: z01aDruR3yMRSRzpiGY2CGLWYQwuEAMQJV+YU0LBGGA=)
                          5: QZnvDoS-RiFOBfwEri-Vi3VzE08.roa (hash: pq0uuNF29P04b/JIWH4m5rjDJmcdVf2o36EBp7l6HfM=)
                          6: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=)
                          7: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=)
                          8: bbmenZqkY_bNQyceoK-fLvwWxdc.roa (hash: 5/uuA7PsJ4CyNOajTBR0J1Bkylsmq9V39AJtX9hFgFU=)
                          9: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=)
                          10: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: r8FB7NqByCouVtFEVJYdpETmfL3CUSAXGKdWktXEwcw=)
                          11: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:cc:87:7f:8c:58:17:06:c9:3f:97:d4:a6:62:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
        Validity
            Not Before: Jan 31 12:00:22 2025 GMT
            Not After : Feb  1 12:00:22 2025 GMT
        Subject: CN=5b60deac26f2666b191fad2c0e767cbb1c877679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:76:45:ab:35:43:ae:02:26:57:59:4f:9b:
                    bb:4b:2e:c0:01:1c:ff:be:f9:65:8f:28:1e:46:85:
                    75:d3:3b:ec:90:34:aa:e0:5b:ca:25:7a:e5:69:68:
                    92:19:3b:9a:0f:71:6d:8a:e1:ac:e9:52:ab:7b:e4:
                    bb:ae:07:c8:ef:aa:af:f4:c5:3c:fd:55:49:33:c5:
                    ff:75:12:17:c3:43:9f:9c:cd:36:f2:67:6e:c7:10:
                    46:8e:fe:9b:13:bd:3f:0f:6e:fe:e4:0c:c3:1e:6a:
                    66:7f:b9:40:d1:2c:4e:ea:4f:7a:53:b6:d7:87:b3:
                    2f:04:5c:7b:d0:25:8c:a8:38:24:54:1d:2b:7b:07:
                    df:c0:49:24:01:0e:84:d3:bf:c8:03:c5:a6:29:09:
                    2a:2b:13:e6:2b:85:68:b1:7a:6d:7f:ab:9a:21:d9:
                    ab:5d:6b:1a:08:ba:5b:f4:06:86:f8:12:22:de:5f:
                    0d:14:4e:2f:3b:37:7a:7a:d9:59:7d:33:ca:55:cf:
                    bf:fc:25:f2:e7:27:22:b5:ce:98:6f:24:cd:de:2a:
                    a5:43:8b:58:88:4c:b0:23:d1:aa:dd:7d:71:ac:12:
                    24:64:5f:09:ff:7f:dd:ca:24:83:37:21:80:e1:10:
                    9f:89:43:29:3c:bf:23:1c:d2:ab:52:e6:0b:e0:38:
                    3b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:60:DE:AC:26:F2:66:6B:19:1F:AD:2C:0E:76:7C:BB:1C:87:76:79
            X509v3 Authority Key Identifier:
                keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:44:cb:cd:e7:8e:ff:1b:05:fe:4c:41:49:cb:67:04:d9:97:
         2f:d5:13:37:7f:25:55:6f:1e:44:42:73:6a:16:2d:f5:1c:e2:
         f1:ce:50:f5:df:a2:67:e9:a3:e0:25:12:64:6d:72:3b:22:44:
         db:10:6b:9d:19:25:cd:0e:ec:c6:3c:9d:c0:24:d8:c7:41:3b:
         36:df:fa:9b:74:8b:8d:2b:63:ef:0c:bc:38:8c:71:29:8e:d3:
         d4:07:03:b4:56:c3:bc:5d:dd:81:53:ae:50:be:0e:cc:d1:50:
         1d:20:96:ca:7a:2d:1d:17:f2:37:9e:35:b5:17:b2:b2:79:e9:
         90:86:c6:db:a3:ff:69:1f:fb:39:dd:f3:2c:15:41:df:4a:c4:
         e6:13:81:bb:3d:86:8a:d4:46:76:34:2e:cb:6f:d3:32:05:c1:
         90:59:b1:f4:7d:43:e2:ee:5a:29:ac:3a:19:43:55:4c:d5:f3:
         16:4e:5d:32:b4:40:6a:35:36:e4:f4:0a:ae:51:48:a4:a0:58:
         d6:e4:c2:9e:75:f0:4e:38:d3:46:e1:21:65:93:43:a4:dd:4f:
         2f:1f:84:9a:39:a6:25:13:c7:97:55:81:cf:40:b7:fe:20:ca:
         c7:ad:29:b9:99:63:7f:58:a8:3c:93:2d:9d:6b:e1:e2:69:7b:
         32:9c:94:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:39 2025 by rpki-client