Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File:                     8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier:          u5k+aL9AJaoctfcfNjwgp8FlwwJ3J5hsUuPAO5FU++c=
Subject key identifier:   C6:A8:3F:6F:F7:D8:BA:7D:62:E8:5F:E4:A4:DC:00:96:9F:42:D8:98
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer:       /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial:       0194BCA973B9BA9E5CFC9479D439C6BB0F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number:          0286
Signing time:             Fri 31 Jan 2025 14:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:09 +0000
Files and hashes:         1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: VY0E7DzbCjLHqhK9QxV3H9+sk0OWhn/Nm9ZiAwDJZtE=)
                          2: i40en23OGg_DEWIRxhMGmgEox1s.roa (hash: iWUkdAfgE1mLIKUO/1DuqvBR2l5IncPfNwSFVOKSJKY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:73:b9:ba:9e:5c:fc:94:79:d4:39:c6:bb:0f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
        Validity
            Not Before: Jan 31 14:00:09 2025 GMT
            Not After : Feb  1 14:00:09 2025 GMT
        Subject: CN=c6a83f6ff7d8ba7d62e85fe4a4dc00969f42d898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:11:8b:44:d0:f9:88:2b:6b:9d:7c:ea:b9:
                    cb:08:71:c9:07:d3:17:72:86:07:7c:97:e5:da:b3:
                    c0:39:d0:cc:de:49:d0:29:bc:39:47:cd:63:70:e2:
                    63:99:b7:2f:ef:38:78:77:76:dc:2b:54:07:23:99:
                    b0:87:e2:a1:09:e2:d3:72:77:64:54:17:e1:23:b0:
                    d2:75:79:69:b8:5e:f6:33:a1:d6:a4:ba:ad:57:b0:
                    fe:44:b0:bd:0a:3f:c0:84:2f:06:59:12:62:7d:45:
                    5f:80:b0:1f:a8:ee:10:3e:e3:72:5a:3a:61:43:0d:
                    04:2c:48:f7:9d:5f:45:f7:e6:d8:f6:e0:0d:7c:06:
                    27:a8:a8:7b:2e:92:75:49:7a:e8:b1:19:6d:21:2c:
                    eb:2f:5f:1b:4e:06:e5:51:0e:6c:f8:d7:31:ba:fb:
                    80:32:2e:a8:23:3d:fe:b6:e6:93:b0:5a:cd:3d:f9:
                    fb:a2:2d:af:9c:82:f4:ab:9c:3d:49:55:3c:2f:fb:
                    81:78:bf:bb:f9:6b:ff:55:e4:36:54:f1:95:74:b6:
                    98:3d:ed:d3:78:ea:54:9e:31:b9:37:e9:51:b3:80:
                    b2:02:b6:51:c0:5a:0a:bf:24:34:86:43:52:a6:74:
                    ac:69:58:93:a6:6e:b1:b5:00:29:be:a5:c7:90:d6:
                    94:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A8:3F:6F:F7:D8:BA:7D:62:E8:5F:E4:A4:DC:00:96:9F:42:D8:98
            X509v3 Authority Key Identifier:
                keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:63:1f:d6:54:8e:ae:60:3a:64:b6:65:ea:c6:bc:8b:47:bf:
         fc:f8:94:a5:07:ef:e1:ee:b8:47:db:4f:07:bf:87:68:7f:30:
         3d:5b:c8:e5:4c:b5:59:7f:4a:a6:88:c5:8f:f6:0d:22:81:8e:
         33:93:a4:89:3e:3e:6c:12:a5:6f:0f:8c:98:b8:a0:08:4a:99:
         a2:d8:81:98:33:14:e7:d4:e0:22:7b:1c:23:ae:10:2d:48:98:
         83:9d:07:ae:90:57:ab:b9:c7:ba:f3:65:13:46:cd:d9:e7:f6:
         6f:e3:ed:de:85:f6:cf:0d:99:34:60:c2:53:c0:42:e0:20:aa:
         97:74:b0:4d:62:9b:22:ad:46:6d:aa:5b:17:70:38:26:0e:2d:
         e2:fa:db:fa:13:79:39:60:b7:65:a3:c4:44:fc:32:de:6b:f4:
         cd:49:30:1e:5a:b2:b4:e3:fc:30:fc:8f:42:c6:ea:70:9d:8a:
         65:c4:91:ce:dc:b3:ef:d8:a1:44:ac:12:10:e2:cf:04:15:67:
         1e:de:d5:ca:96:88:ab:62:aa:6d:c9:a8:ac:c7:5f:04:5d:be:
         26:41:d4:17:93:2f:ac:c4:e6:26:12:80:ce:41:b4:fb:0f:d7:
         2d:95:01:97:c3:10:ae:f4:2b:d2:5c:68:68:ad:29:06:65:b3:
         e5:96:79:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:44 2025 by rpki-client