Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
File:                     IE19hlKpn8F__y197MSeVWqg64A.mft (raw, json)
Hash identifier:          QLJvaqguOdyYG6OUm+iiLn7iz3pxpdVK33soz+YkM28=
Subject key identifier:   6E:7F:82:4F:EA:D7:D8:C1:8B:19:1F:A0:AB:C9:A4:2F:9D:38:BC:E0
Authority key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
Certificate issuer:       /CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Certificate serial:       0195E0EB8FD40758EB20EA52555A0E474BB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
Manifest number:          01C6
Signing time:             Sat 29 Mar 2025 08:01:28 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:28 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:28 +0000
Files and hashes:         1: IE19hlKpn8F__y197MSeVWqg64A.crl (hash: UUL196XP/sD34AKNyv2GFKFqT2/dBLgkcES38POv3Uo=)
                          2: qVpN4Y8KxLODwpDOgLN11KilqHg.roa (hash: 09hTebOsoFtxumaEhzqwE7uj7IeLGjUIKeNrykM3gp8=)
                          3: tdhuYGIdy-7BcAqbVeS6RaDWjiM.roa (hash: Sh6aeKnHHbg/58/2+xd9mufW5cUQ13QaLyf7FAUXcc8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:8f:d4:07:58:eb:20:ea:52:55:5a:0e:47:4b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
        Validity
            Not Before: Mar 29 08:01:28 2025 GMT
            Not After : Mar 30 08:01:28 2025 GMT
        Subject: CN=6e7f824fead7d8c18b191fa0abc9a42f9d38bce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:77:32:62:58:e1:0c:91:c0:ab:91:e2:52:
                    f2:9f:0b:9b:6d:77:30:39:bb:21:c4:35:ae:53:e0:
                    73:ac:55:7e:fd:f4:b9:0e:3b:da:15:bb:d2:7d:c8:
                    e2:13:5c:bb:a3:2d:44:30:c3:ad:d3:cc:b9:c0:3b:
                    af:99:03:e8:e0:ff:99:96:1d:e1:12:59:db:95:7c:
                    bb:4a:29:85:d1:30:73:80:02:47:0e:02:42:5f:a3:
                    05:09:4b:2d:b4:21:7b:5f:34:46:b0:b2:6e:c0:b2:
                    22:9c:d1:07:4d:32:95:e7:31:46:9e:80:96:14:aa:
                    4d:42:50:99:a8:de:c6:20:49:14:88:d3:5f:51:a3:
                    98:69:15:e1:23:2a:81:dc:be:54:d3:bf:27:25:87:
                    82:d1:86:3a:5e:12:c6:0e:b5:56:2b:c5:55:f2:2a:
                    eb:60:78:00:9d:c5:3e:65:b3:45:c4:21:73:aa:ca:
                    29:79:2e:1a:63:ff:bc:dc:a8:b5:b6:70:c2:03:a3:
                    2f:e4:37:24:4e:fd:de:c2:b7:98:e1:f1:e7:c7:0f:
                    53:31:55:53:b3:1b:38:77:c1:ce:be:f7:ff:ca:53:
                    4c:2c:3c:42:80:97:9f:7c:2a:80:ca:69:7f:de:57:
                    93:ab:d2:29:d4:61:12:6c:6d:62:ab:80:fc:51:06:
                    55:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7F:82:4F:EA:D7:D8:C1:8B:19:1F:A0:AB:C9:A4:2F:9D:38:BC:E0
            X509v3 Authority Key Identifier:
                keyid:20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e4:97:68:73:0d:2b:7f:11:21:5b:6b:92:df:83:9c:1d:a1:
         65:90:08:1e:6b:ec:cf:f0:34:de:aa:ec:71:83:76:3d:17:b5:
         2a:ff:46:d0:33:0c:e2:fd:d2:a6:74:f5:ba:3c:b0:e0:fb:c4:
         a1:3e:51:38:c6:3b:06:60:e2:08:ca:bd:9a:33:26:2f:fd:8b:
         cc:c3:38:c2:20:60:fa:cb:b3:85:71:88:b0:1c:e1:19:4e:28:
         88:8c:53:6c:7c:4c:6a:51:c9:a0:36:1d:db:90:5e:46:3d:fd:
         ca:7d:79:11:98:57:8e:41:ed:ab:8c:70:1a:d1:53:7e:b1:07:
         c5:4c:51:f1:48:55:74:5d:ab:07:b8:80:d7:64:ba:54:a0:18:
         f2:15:cf:90:c9:2b:92:75:fe:33:53:5d:b9:2a:18:e0:1c:71:
         24:97:0d:73:f0:17:a6:c8:94:60:a5:a6:a5:05:81:95:01:9d:
         a3:8f:69:11:82:53:42:18:1e:c4:6c:95:a2:f9:17:9e:6f:fa:
         4e:44:3f:27:74:b7:5e:1b:6b:ae:f7:33:e6:f0:53:f6:19:64:
         f3:79:06:f4:ab:6b:6b:76:15:a8:35:6c:99:cc:ef:53:7d:21:
         f9:11:a3:8d:b6:ae:e4:50:5e:b4:68:4e:a7:c4:72:33:38:89:
         08:ec:83:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:22 2025 by rpki-client