Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File:                     KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier:          hRiC4KlqPWyJJtmufcvW2yeiD9crl6nVyi4gIWo3zqk=
Subject key identifier:   6E:6A:22:DF:54:02:16:D7:44:BD:17:29:BE:99:64:D0:8B:ED:1F:DB
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer:       /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial:       0194BD1754E936808A07B935257110725BF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number:          0D17
Signing time:             Fri 31 Jan 2025 16:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:10 +0000
Files and hashes:         1: 9MozB7L4Set7tNqN83WEH4oSTdk.roa (hash: kJHNE/MlmNWFKujPeHu4+QOZo4UmV5tDMpJ/m8T23WE=)
                          2: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: MSX6R6H0tbMUCDXCy7G/+jLyHTp3kUwtDjL69pArykQ=)
                          3: uVYVNQRzsDPwMzraGWOMobAeRZU.roa (hash: LlKkw85Oa6CIOC62S9TZpd9ZLNUlHcAGh3rwRjg40H0=)
                          4: wXKkmEzVnT6wH-e4RUZ5ISziflM.roa (hash: 0ibg6oISPGaXyJMIkBYpRfjFyr2Dyc5Kyu9O/zaq9rU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:54:e9:36:80:8a:07:b9:35:25:71:10:72:5b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
        Validity
            Not Before: Jan 31 16:00:10 2025 GMT
            Not After : Feb  1 16:00:10 2025 GMT
        Subject: CN=6e6a22df540216d744bd1729be9964d08bed1fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:47:66:19:a6:81:9c:d2:e5:f5:3f:26:4e:fe:
                    04:8f:62:50:4e:fd:da:dc:04:cf:b2:34:a5:60:58:
                    e0:fa:b3:68:6f:70:97:d8:ca:ae:43:99:a9:5d:12:
                    81:67:74:70:8b:4f:a4:b4:9c:bf:88:bf:76:70:c6:
                    23:b4:5a:61:13:27:00:3c:1d:55:8e:6b:ee:f7:86:
                    e7:7d:a4:ee:c2:b5:28:54:65:3e:5e:81:4c:61:33:
                    04:5a:f5:fd:59:cc:99:e6:55:af:50:ea:b4:5f:7d:
                    53:ff:5d:25:77:7e:e0:68:25:f2:c0:dc:74:f6:c2:
                    7a:e7:b9:b5:86:09:de:6c:af:7c:f3:c3:58:d8:ff:
                    7c:39:1c:57:de:5b:95:89:9c:d6:5f:8e:e2:cb:7c:
                    a0:51:6d:26:83:6b:27:f2:45:7d:fd:f6:ef:0b:a8:
                    86:68:8d:f1:c0:ef:3a:bd:dd:17:93:b1:69:01:17:
                    c6:50:60:b3:29:ed:89:3e:a0:ba:e2:4e:05:ce:fe:
                    86:97:c3:36:67:c2:cc:c8:2b:f3:1d:89:bd:69:a2:
                    f4:f1:02:8e:67:d3:53:1b:16:2b:4f:94:fb:77:79:
                    7c:42:5b:8d:f7:97:85:cf:bd:89:4f:1d:8b:75:40:
                    7f:b5:17:49:aa:7c:5a:18:22:ea:34:91:75:2f:7d:
                    34:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6A:22:DF:54:02:16:D7:44:BD:17:29:BE:99:64:D0:8B:ED:1F:DB
            X509v3 Authority Key Identifier:
                keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c0:34:e7:03:b1:82:4c:3b:51:91:e9:25:40:7c:a2:27:26:
         39:d2:32:83:ab:09:27:7f:c7:9d:cb:52:85:35:b6:15:00:15:
         ae:0c:81:76:ce:99:af:8c:d7:84:1a:65:c8:bb:3f:e6:e0:91:
         21:c7:f7:77:40:73:aa:bf:c2:c2:b3:15:fb:57:38:dc:3a:02:
         7a:67:9d:6b:ae:5a:1b:cd:81:81:6d:ee:77:91:c7:90:c0:03:
         4b:41:4e:58:a0:34:46:cc:e5:6b:9f:9e:7e:3e:db:48:c3:0a:
         26:0c:1b:bc:69:10:5f:8d:64:bd:e2:21:1f:86:2e:b8:0b:a1:
         b7:02:2a:72:b8:f3:fe:d5:26:3d:8e:6d:b3:c7:fc:76:b2:11:
         97:30:f0:50:db:19:72:67:1c:d9:a7:25:67:00:5b:cb:8e:19:
         42:56:ca:44:9a:48:c3:c0:c4:0e:33:60:d7:9a:85:04:dd:9b:
         23:27:f0:06:97:55:89:92:47:66:13:50:0d:3d:6b:76:92:86:
         11:78:e2:79:d1:83:88:2a:03:3a:a1:19:cc:5b:2f:f8:37:e0:
         90:76:da:9d:65:7a:80:06:4a:aa:72:d6:58:61:57:16:33:f4:
         90:11:6d:2d:c3:83:19:fc:4c:4e:9d:b4:e3:09:93:aa:4f:de:
         01:90:61:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:05 2025 by rpki-client