Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
File:                     JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft (raw, json)
Hash identifier:          P+UI8iDxunJ3ndmKPokLxE3KLwKZZxYYsvH6nTT5sus=
Subject key identifier:   54:18:66:43:6E:76:B4:28:66:4F:82:BE:20:11:1B:BE:C6:06:6D:5C
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Certificate issuer:       /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial:       0194BC3C32E4FC6DD0D268768327C1FC09E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 12:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:49 +0000
Files and hashes:         1: JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl (hash: k5Jczp1KnCIeXKNrMy0TJtEyMiSW/tg3MKvj2rIxL+U=)
                          2: OPRG5qVik0clg7wkwnl7SUN9jY0.roa (hash: ZN4J6ol4OC/X57nz18jc3tVUWSo2XvbIumwEP6WKJXU=)
                          3: pUkIJqBsM01F-i6Em2tr3Saf2sk.roa (hash: iY+eh+5NMCHozu8pjL4QFCTT1O1hYE+uhiNgfrNLxws=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:32:e4:fc:6d:d0:d2:68:76:83:27:c1:fc:09:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
        Validity
            Not Before: Jan 31 12:00:49 2025 GMT
            Not After : Feb  1 12:00:49 2025 GMT
        Subject: CN=541866436e76b428664f82be20111bbec6066d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:97:aa:47:a3:31:3e:15:b7:be:8f:fb:60:
                    41:78:4d:87:be:48:99:7d:f1:bf:2e:24:fe:de:8a:
                    13:e2:1b:ce:40:40:18:e5:85:ce:e7:7b:48:c2:32:
                    57:05:da:c8:46:bb:ba:5f:15:84:69:e4:2c:85:82:
                    71:a3:66:81:9e:36:7b:11:15:07:e8:f9:41:4c:46:
                    52:0a:af:83:53:42:1a:f5:3a:77:5f:e3:b2:02:c4:
                    74:d8:c4:75:a8:03:00:99:7e:e7:d8:d3:d9:fc:50:
                    46:6f:6c:02:4f:8f:88:09:af:d1:69:66:c8:25:dd:
                    50:9d:4e:cd:12:f4:50:d2:5b:fa:4e:3d:a7:ed:2a:
                    7e:d3:53:f2:7d:44:14:63:6a:e5:5c:1e:cb:5b:b2:
                    b1:9b:d2:40:a8:2e:a6:2c:f2:5d:ec:bf:19:66:3e:
                    d4:d6:08:b1:da:52:fc:f4:1c:e6:3c:cb:05:8e:f2:
                    d0:2d:93:a5:99:94:d2:50:a9:78:c7:3c:16:a8:4a:
                    80:7f:f5:ce:aa:11:69:41:a8:70:51:70:aa:ae:1c:
                    57:e9:20:c5:b2:86:ac:92:fd:8c:b1:56:7b:b7:df:
                    dc:30:a1:f6:e5:ec:06:5d:a2:dc:c9:1d:a8:7c:e7:
                    1b:5e:fd:69:fe:7d:07:25:13:f1:d0:e5:1e:d1:7f:
                    30:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:18:66:43:6E:76:B4:28:66:4F:82:BE:20:11:1B:BE:C6:06:6D:5C
            X509v3 Authority Key Identifier:
                keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a6:35:3a:14:8b:2d:c9:57:f1:8b:d1:77:f6:51:26:05:73:
         6f:b0:fa:b5:26:a3:45:77:fe:9c:9a:1a:58:9f:52:80:eb:0b:
         b4:87:b1:25:fc:05:6e:cf:53:3d:64:43:9c:0d:9d:2a:27:a4:
         54:a9:4d:8f:ee:28:57:73:80:5f:d6:9d:c6:8c:72:62:2f:7e:
         00:8e:15:f9:4a:05:32:98:aa:be:dd:60:d0:34:ae:fc:50:90:
         d9:15:12:d7:54:ae:80:2a:d0:40:74:4c:2d:90:b0:fa:01:a7:
         7c:40:65:08:9e:fa:c2:6e:f3:03:fe:a2:aa:a8:8e:2a:ff:ab:
         01:c4:fd:68:1e:00:39:88:87:4f:4b:1e:88:e4:3d:cc:1e:29:
         93:5f:35:2e:06:2d:5f:50:6c:b9:fc:55:66:fd:4b:9b:34:21:
         f3:b4:f7:ec:51:03:22:fb:1a:d3:13:ed:00:7b:26:ef:7e:5a:
         56:ad:19:f5:5e:84:ca:38:06:60:d1:d3:70:a6:b3:1d:b9:89:
         7c:0e:f3:d4:ec:f3:20:b2:70:d6:04:71:df:9e:c1:55:ec:bf:
         3f:56:5d:f9:b3:62:4a:bc:c0:08:9e:12:2f:99:08:b2:69:08:
         80:7d:94:be:ba:3c:55:ff:c8:81:86:a1:5a:1d:9b:be:39:c7:
         4f:e4:cc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:11 2025 by rpki-client