Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
File:                     Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft (raw, json)
Hash identifier:          bVrOo0o77Uie1p+2T/A78b54UxaMNtpa1ufCM+RBnro=
Subject key identifier:   61:E5:4F:1D:E5:B6:40:1D:9C:DC:98:5B:F5:C1:CD:DF:D3:76:E3:1D
Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
Certificate issuer:       /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Certificate serial:       0194BC3C21F39DBE15925344F6569E16A50A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 12:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:44 +0000
Files and hashes:         1: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl (hash: noPDfRa6uj30qdKBtcnnpxSa8/YQ0yvH10l2e8/9luw=)
                          2: bCRc9uQxEBTdq_mIpQMeeuXw3bI.roa (hash: UVWoEpSiUbWJCwz2N/6iz5YS+S24UWKlT6JFJC9rbJc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:21:f3:9d:be:15:92:53:44:f6:56:9e:16:a5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
        Validity
            Not Before: Jan 31 12:00:44 2025 GMT
            Not After : Feb  1 12:00:44 2025 GMT
        Subject: CN=61e54f1de5b6401d9cdc985bf5c1cddfd376e31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:96:d1:47:73:ce:0b:90:eb:05:4b:67:37:
                    de:33:6e:df:ed:5c:bc:2d:79:0e:62:86:fa:72:c7:
                    6a:5c:43:10:e0:ad:c9:f6:0c:fa:6e:db:19:fa:54:
                    0a:3d:a5:69:52:4e:04:d6:4f:57:b1:53:01:f3:88:
                    2b:ac:be:97:28:3e:1a:e8:7b:c9:da:a1:1a:2d:9b:
                    9a:02:b2:74:1c:e5:11:0e:46:d3:98:14:bc:d9:01:
                    6a:f4:68:17:81:bb:16:ae:31:a3:7a:9e:ce:4a:29:
                    4d:ef:42:ba:b3:34:01:94:7b:85:6b:e3:f4:f3:5b:
                    27:3e:d7:d9:ff:dd:ac:01:3d:53:df:8c:a1:ae:76:
                    d4:51:82:06:bb:c6:af:1a:25:34:74:fa:ed:42:ad:
                    54:a8:a4:88:bb:26:fa:35:4b:74:0f:89:1e:65:6d:
                    5f:b9:16:5c:f5:37:46:51:60:3d:66:41:c2:97:03:
                    c8:09:5a:ec:10:cc:dd:78:77:fa:20:37:0b:3d:b9:
                    62:41:07:2b:ed:42:b2:c3:d3:ef:f9:60:c1:d8:dd:
                    2a:10:c2:49:49:2f:cb:85:d7:00:2e:83:10:21:98:
                    67:bf:49:e3:23:9d:12:e7:b7:6a:99:e0:2e:27:d0:
                    8e:30:4d:b9:2d:dd:1c:09:29:b4:83:f9:ad:d1:96:
                    f3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E5:4F:1D:E5:B6:40:1D:9C:DC:98:5B:F5:C1:CD:DF:D3:76:E3:1D
            X509v3 Authority Key Identifier:
                keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:4f:df:85:67:06:c2:f8:db:2c:47:95:f2:75:a3:df:31:85:
         f0:96:ec:3d:f0:b7:1b:2b:b0:36:97:53:1e:f5:57:7b:3d:4c:
         24:1d:f0:05:08:ee:f4:33:76:fc:46:17:58:1f:3f:d2:61:78:
         b3:eb:c8:bb:12:33:d3:15:79:71:71:83:23:44:4e:40:6e:04:
         81:99:a5:49:c2:4d:22:30:ad:04:ce:da:ea:5e:83:87:4d:78:
         25:78:72:84:19:de:2a:ee:e6:e4:c3:84:33:e5:b4:7e:c6:5d:
         2f:fc:b9:23:41:8c:c5:49:04:4f:98:cf:a9:7a:a3:43:e1:ff:
         98:eb:9d:d0:9b:f5:72:58:53:c9:ed:54:20:fa:8b:be:22:16:
         55:95:51:63:d3:00:34:e8:69:fc:fc:2b:1f:2d:00:23:92:3c:
         97:0e:30:44:4d:ee:df:16:f1:b0:9f:c7:5a:13:f9:df:5d:1e:
         bf:90:3a:4e:22:79:25:33:34:a1:8e:76:41:f9:f6:56:69:bb:
         c5:91:71:9a:fb:ee:b4:78:43:e0:05:1d:07:89:02:93:74:99:
         be:c5:47:a2:92:df:f5:6c:ed:b2:9f:13:08:ef:4d:b0:12:fe:
         ed:2f:b3:85:f7:4b:7d:b4:6d:c0:47:85:81:90:5c:2b:ee:0b:
         eb:1e:2a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:13 2025 by rpki-client