Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
File:                     FW8E_FyodTFasLhUtkUGsJyZjpo.mft (raw, json)
Hash identifier:          dgnuY8URFhn1EUzoYEphAg9IlQywcW0LsfqacZZlpBg=
Subject key identifier:   91:AE:F7:27:04:F5:52:75:14:61:77:3B:8F:71:65:B0:05:40:CA:A3
Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
Certificate issuer:       /CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Certificate serial:       0194BD4E6621489C292F434EE333A2CB1F72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 17:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:19 +0000
Files and hashes:         1: 74FiFUUCcsV_j506QvqvuUKXA1c.roa (hash: apRm/FJ7fgKknAqYO8bdqiAphQJLpxJucgrm/glKMKk=)
                          2: FW8E_FyodTFasLhUtkUGsJyZjpo.crl (hash: 4vTfpdKZs9Go8rKO3j+qgjyxF9Pcn28WOdodk7AANvI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:66:21:48:9c:29:2f:43:4e:e3:33:a2:cb:1f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a
        Validity
            Not Before: Jan 31 17:00:19 2025 GMT
            Not After : Feb  1 17:00:19 2025 GMT
        Subject: CN=91aef72704f552751461773b8f7165b00540caa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:08:14:e9:16:da:fb:05:bc:23:86:ba:b7:
                    f5:a7:e4:18:f8:d5:c6:b9:a2:07:3e:a1:6c:8f:0e:
                    df:a4:cf:5d:77:c6:98:e2:42:e2:f0:58:3a:ae:24:
                    04:81:98:4a:32:cb:2f:63:11:b8:76:4a:bb:32:b4:
                    b0:2a:5d:56:06:60:24:83:60:02:0f:63:4f:52:eb:
                    fd:a2:a3:ee:54:cb:ec:a8:03:74:c9:f4:c9:4c:b5:
                    3e:ff:78:8a:b1:ce:ef:76:2d:96:77:e0:15:5a:ae:
                    ff:14:61:d5:8c:f0:9e:62:a7:b3:7e:34:91:03:ab:
                    41:8f:52:68:f4:64:47:d0:fc:1b:16:ff:ac:44:20:
                    3d:cd:42:e4:af:90:ca:80:3c:71:5e:7f:c8:d3:d7:
                    98:61:26:b1:2a:dc:17:82:9d:07:ff:14:e0:52:0b:
                    3d:74:04:8f:bd:4d:84:63:d4:11:67:b5:de:b7:1e:
                    25:2d:44:a0:d6:70:ca:64:c8:09:7d:fd:5f:55:93:
                    28:0b:b7:3c:37:5d:34:77:60:5e:89:34:fa:13:4e:
                    db:c2:fe:04:2a:a1:61:ee:a4:ab:2f:46:15:b5:95:
                    db:a8:0a:85:e3:7f:bf:65:af:a8:ef:5b:18:f1:b2:
                    f8:a1:8f:a7:d7:dd:a6:f7:e6:f2:c1:41:4e:69:88:
                    c6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AE:F7:27:04:F5:52:75:14:61:77:3B:8F:71:65:B0:05:40:CA:A3
            X509v3 Authority Key Identifier:
                keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:b2:f1:5c:96:21:7f:dc:10:3b:47:4c:c7:64:66:d5:c8:23:
         4a:96:20:a9:ce:2c:a5:cb:48:b5:55:96:42:33:cb:5c:d2:16:
         5e:91:e4:06:54:45:a1:54:ae:df:7f:5a:b6:08:83:f1:a1:a6:
         74:ea:2f:26:a5:b1:07:44:94:7d:7d:9d:e1:87:a5:91:35:f8:
         2b:66:01:b0:28:f0:bb:56:ce:95:c8:12:61:64:73:6d:fd:39:
         d4:f8:53:26:59:d2:6f:e4:78:3c:4d:e7:92:b5:5d:eb:b9:88:
         83:ea:5a:d6:ea:6a:31:e7:d0:35:53:91:a9:66:da:5c:3a:ca:
         09:9b:15:f8:83:06:c4:14:ac:50:8e:ad:a7:8e:64:d9:da:29:
         15:91:8e:32:23:d5:ff:2b:59:d7:9b:d2:04:aa:6e:b0:7c:8b:
         ea:99:28:dd:a9:2f:d5:3b:d7:af:4d:02:c9:96:98:c9:f3:11:
         2f:63:46:eb:4d:06:55:e6:a5:8c:a4:bd:9d:e5:6e:87:70:d5:
         00:d4:ad:33:8c:ab:9b:ae:44:94:21:8b:4d:f0:05:da:5e:f6:
         e7:59:b4:54:f4:1a:5a:66:5c:23:3e:60:64:93:c4:14:d3:d1:
         77:ce:2e:17:3b:7e:0d:ae:b1:0c:78:33:5b:a6:2b:93:4a:fb:
         5b:17:50:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:45:37 2025 by rpki-client