Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
File:                     EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json)
Hash identifier:          vi9jQQCB3qI+zlqJK/u6D3zjSePoJwtHygmMqju/334=
Subject key identifier:   88:1B:EC:D4:63:9D:EC:F5:4D:FD:C8:F2:FF:3F:77:9C:02:13:2A:D1
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Certificate issuer:       /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial:       0194BC732D5F30392A6D4880DE69EABEB96B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 13:00:52 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:52 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:52 +0000
Files and hashes:         1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: Pz1r4XuLK77wt/vRrEELSm3GaxTgwb4+LKIryIHMk8k=)
                          2: zVD3SdCfQBJBOagWM5Ehfl1wO_c.roa (hash: qafSEr3TxyKSts1jwMxTvNR+mmxx5iKNpJETUbfFIKo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:2d:5f:30:39:2a:6d:48:80:de:69:ea:be:b9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
        Validity
            Not Before: Jan 31 13:00:52 2025 GMT
            Not After : Feb  1 13:00:52 2025 GMT
        Subject: CN=881becd4639decf54dfdc8f2ff3f779c02132ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:c2:29:82:04:5e:0a:25:b0:f6:c3:5f:20:
                    b1:7a:5f:f3:a7:fc:df:6c:20:90:56:0d:05:01:91:
                    ee:7a:1b:63:c0:14:2e:d8:02:24:0c:1a:ba:cc:28:
                    4c:4c:7e:40:b1:17:b8:95:cb:bd:d1:5a:22:2d:7f:
                    af:a1:55:59:69:e3:3a:aa:f7:d4:66:69:4f:be:15:
                    c8:33:09:16:b6:9d:cc:2b:98:15:58:54:ca:5f:b3:
                    f5:04:db:94:5d:b7:ad:23:de:79:b8:28:9c:87:68:
                    d8:37:fa:98:90:3c:32:4b:24:63:c3:db:b1:2f:d8:
                    1c:f9:ce:1e:de:4e:dd:cf:d4:db:e1:ba:53:79:03:
                    fa:6b:b1:19:19:64:05:ee:4c:16:d8:71:76:8d:78:
                    9e:5b:e7:23:53:ee:72:68:fb:7e:c7:ce:86:0c:8b:
                    9c:d9:e3:88:29:a3:79:54:92:2b:3f:a3:4d:3a:ed:
                    42:5b:57:ff:a9:63:ab:91:0d:26:93:9f:8a:12:37:
                    d9:04:5d:83:e5:e5:f9:76:7a:a8:04:19:e7:28:d7:
                    1f:9c:3b:6a:db:c5:f1:d9:dc:f5:41:2b:31:53:62:
                    d2:43:82:dc:34:2f:ad:c5:22:13:7e:a8:69:f5:97:
                    06:99:ca:ac:4d:4c:56:92:91:79:4b:cc:bc:ee:01:
                    ba:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1B:EC:D4:63:9D:EC:F5:4D:FD:C8:F2:FF:3F:77:9C:02:13:2A:D1
            X509v3 Authority Key Identifier:
                keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:fd:cb:39:8a:ee:ce:07:08:9a:9a:a9:6b:7e:a7:29:44:
         9a:a3:c0:b2:2f:4a:10:15:7c:5b:e1:23:a0:00:38:bd:64:6f:
         4a:42:09:46:88:49:9f:7a:51:78:d0:dd:3d:86:52:37:10:ca:
         fd:2a:bc:ab:5b:aa:73:0c:28:16:0e:f7:60:64:78:d7:59:57:
         29:82:af:92:5e:7c:e3:59:9d:1c:14:11:d8:21:69:d1:3a:06:
         40:7f:1a:28:62:81:f2:6c:16:90:61:d1:84:2f:16:25:b8:a1:
         04:ae:91:a4:e0:1e:5e:c5:d3:05:f0:c3:6f:a0:c2:2e:c7:07:
         e0:5e:0a:01:d6:41:c0:23:4d:8f:be:5b:61:a2:24:f6:4b:91:
         7a:9d:d3:c7:ec:c5:fe:32:bb:87:2c:a2:67:51:4e:e3:e5:48:
         93:b6:af:95:4f:92:83:24:08:24:44:9a:94:d1:bb:b5:df:45:
         30:a2:8a:ba:9e:91:8b:f2:e0:99:1c:47:be:98:42:d2:6b:f0:
         2a:3f:09:c2:0c:de:ce:ef:16:57:23:72:19:1a:ce:3c:4a:41:
         67:83:c1:fa:e5:e0:cc:e5:85:f7:5f:34:dc:e9:5a:62:8b:40:
         b8:47:8a:19:6b:50:5a:75:57:07:52:06:07:0f:ea:49:cd:1d:
         de:31:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:45:05 2025 by rpki-client