Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
File:                     ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json)
Hash identifier:          TXSqBH/bW7AiELcTDbcmcrS0CjYqLCOaFXr+B4cS93E=
Subject key identifier:   1C:FC:FC:6D:D8:2B:99:80:E8:DB:F7:14:32:41:7A:93:46:0B:55:78
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Certificate issuer:       /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial:       0194BCE0E7B6D12C40BAD9B34EAFC19173E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
Manifest number:          02CD
Signing time:             Fri 31 Jan 2025 15:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:43 +0000
Files and hashes:         1: GanlBJdb2pr7VV04ogaTHUPUlUg.roa (hash: Vbl6ZyOGtSJws1SpPK0y8iRHBk5yj2N+r0ihm4gCy0w=)
                          2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: v1SNsQblp94mIzcBcyqWaVl4itWuLA8z5hBgJdoO1jU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:e7:b6:d1:2c:40:ba:d9:b3:4e:af:c1:91:73:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
        Validity
            Not Before: Jan 31 15:00:43 2025 GMT
            Not After : Feb  1 15:00:43 2025 GMT
        Subject: CN=1cfcfc6dd82b9980e8dbf71432417a93460b5578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:90:ad:44:3b:8a:5e:99:b9:78:be:23:4d:3a:
                    33:61:78:f3:2c:5a:29:2a:c3:0b:0c:ee:ef:36:25:
                    89:96:0d:b9:57:e1:17:f0:47:ca:a7:61:d7:72:b5:
                    4a:48:ba:4d:90:3a:4f:f9:17:76:93:ed:3e:c2:07:
                    6e:ec:27:d6:12:ea:78:70:43:1c:b7:82:62:fd:19:
                    17:b9:08:36:e1:eb:df:9a:ae:e7:50:40:c8:34:54:
                    f5:24:d3:9e:80:ae:6d:8d:7e:05:14:1a:a3:5b:53:
                    16:5d:20:10:96:99:69:c1:8e:bb:d9:07:e2:59:0c:
                    c1:a6:56:51:fa:9b:88:5a:fb:71:e8:22:5c:2a:de:
                    1f:fa:e8:fe:c2:25:cd:55:0f:37:2e:1f:7e:cc:a1:
                    c4:9b:62:09:86:f5:1c:dd:f1:e2:2f:74:4a:fd:8d:
                    4c:5d:8a:4f:dd:10:95:88:db:b8:5e:4d:1a:b4:3b:
                    26:b3:ad:95:62:6d:cd:ed:37:93:59:5a:f9:34:a6:
                    d6:e8:e3:f9:42:10:11:f4:b8:d8:26:39:e2:6e:6c:
                    f2:57:06:82:a3:02:ee:40:3b:b5:a1:6a:33:82:e0:
                    ab:d0:bb:90:eb:61:b2:ac:fa:22:14:76:2b:0b:0a:
                    5a:67:05:29:35:a1:af:fc:1d:85:91:1b:1b:7c:19:
                    39:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FC:FC:6D:D8:2B:99:80:E8:DB:F7:14:32:41:7A:93:46:0B:55:78
            X509v3 Authority Key Identifier:
                keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a3:6f:8d:e1:79:f3:2b:7c:8e:1b:96:e0:6a:77:ae:f4:d8:
         48:7d:ee:41:e7:ac:f7:5c:f0:29:02:28:7e:74:af:93:82:a9:
         db:f4:f4:d5:24:54:2f:ec:c1:bb:57:0b:2a:97:b0:41:b0:87:
         43:2f:09:04:c4:32:9d:49:1f:2b:b8:81:c5:89:bf:bb:44:cb:
         3e:e6:a1:03:38:59:9d:44:4c:eb:d0:b6:b0:73:28:d4:cb:56:
         f4:29:06:87:44:c0:92:42:2e:d0:ac:10:fe:77:0a:fb:c1:30:
         cd:85:8c:18:3d:09:f8:2e:69:92:b3:3b:22:75:5e:1e:d0:2c:
         a1:44:e5:df:7f:2f:4e:40:77:24:f4:1f:fc:8e:7e:c6:d3:b0:
         8e:18:8b:8f:9a:ba:8e:44:78:be:0e:18:0c:91:87:85:c1:b7:
         ef:bd:55:82:a2:59:57:e4:cb:17:0c:e3:99:46:3f:67:0d:57:
         2e:2b:ab:2e:7d:30:aa:76:fc:7d:9e:f1:0e:fa:27:37:b4:f7:
         48:d2:44:47:b5:68:d1:ae:2a:99:45:44:77:4d:66:ea:24:24:
         54:49:48:05:00:80:a9:99:fd:9d:1c:ee:63:f0:95:c0:ad:e2:
         c0:e1:52:6a:e5:16:13:42:c6:19:1c:47:80:e4:b9:6c:cb:0d:
         f5:5c:e7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:17:55 2025 by rpki-client