Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
File:                     S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft (raw, json)
Hash identifier:          bkCBbjQD0VBOOJDqbvRWsCr8hfLfpEDw+3tdGJKEo1M=
Subject key identifier:   5D:C3:21:33:F1:95:9E:5A:30:9E:DC:40:2C:D0:25:44:BA:ED:89:35
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Certificate issuer:       /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial:       0195E0EB20D62222B6C1C535E5F2497D4211
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
Manifest number:          027F
Signing time:             Sat 29 Mar 2025 08:01:00 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:00 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:00 +0000
Files and hashes:         1: 0_z69Mp8Uq-H2QPlCa0CLWX2coU.roa (hash: wm+6P/OKtHhF/O/CkulyZkvoYkTpsb5odPnFIekRy3I=)
                          2: 9RWsRpHe3o61FOM9kyJe7TohoII.roa (hash: 9rAJ1AvJc4c3sr5Elvm4i+mUUemyIJum4cOk0RIq+g4=)
                          3: D4PPtKoYzm6TEOaEItnlpLXHHvM.roa (hash: lDsciGTqjNOV2/WKbPe1B6UAqKR1IlIJEKOSyRbTxtQ=)
                          4: ROpheD2xVf5YC_wCp8PweJt5-TM.roa (hash: E8oSIDwaJfUB+9wbvMHrfT4bXIA/k1E3mp8aGKiBM2s=)
                          5: S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl (hash: wj12HJrm9u0RcGHrLWPZqq3MtZQwGopRspLr9om++jw=)
                          6: Z95M0xYaqG88vxFWVTNeS9sdPBs.roa (hash: OIWDRjggzYvatxQH+hE1CGU7lQDN+TA7u/ptNiOY8dQ=)
                          7: _Khf-n0vZfCAmh5Kz1BybwMWUtk.roa (hash: kt8gl4Nj76yRL5CdwZbXkVqwHK70gqMfG0Z0kpN+NYA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:20:d6:22:22:b6:c1:c5:35:e5:f2:49:7d:42:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
        Validity
            Not Before: Mar 29 08:01:00 2025 GMT
            Not After : Mar 30 08:01:00 2025 GMT
        Subject: CN=5dc32133f1959e5a309edc402cd02544baed8935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:84:16:cf:44:59:69:0f:84:df:4e:5f:29:37:
                    89:59:3c:48:47:2b:65:f2:27:a5:89:f1:ed:48:84:
                    e2:38:e4:39:d6:97:2b:8e:0a:13:80:c6:9b:f5:3a:
                    a0:63:26:da:b3:f9:0f:8f:9d:af:31:8e:f1:6a:64:
                    c7:b6:d0:35:0d:79:93:5a:dc:48:40:a1:76:a8:12:
                    2d:96:1e:21:4e:fe:cd:1f:95:0b:e5:0b:51:c3:ca:
                    0b:40:b2:b0:3b:74:43:9d:64:30:25:c5:3a:82:39:
                    b5:72:a4:54:5f:19:0c:51:e5:18:57:2e:79:23:65:
                    72:bd:f5:99:a9:ef:ba:39:c2:f1:f6:74:86:16:3d:
                    88:bd:4a:e8:dd:17:ad:dc:87:10:10:67:48:f3:70:
                    34:b1:15:0e:89:00:0e:74:34:f6:5f:90:49:81:42:
                    f8:00:f0:03:c0:4d:0d:40:15:86:d3:29:80:dd:bd:
                    02:ab:00:f8:75:6b:28:85:42:41:4f:57:44:e1:24:
                    75:21:8a:db:62:ec:d6:ce:b0:47:eb:31:d6:2e:4d:
                    50:06:69:39:c4:f8:76:ac:34:9a:3d:1f:f0:c9:59:
                    63:b8:b3:09:cd:b8:b6:47:91:dc:a1:eb:ae:c4:89:
                    46:4d:e8:b8:f2:27:ce:d9:2b:14:01:a0:66:80:f7:
                    56:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C3:21:33:F1:95:9E:5A:30:9E:DC:40:2C:D0:25:44:BA:ED:89:35
            X509v3 Authority Key Identifier:
                keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:96:c4:a6:b3:0f:bf:19:17:c3:22:26:4f:2c:54:75:43:8d:
         31:1f:1d:01:e2:6b:af:b1:e1:b5:e5:ca:cf:32:db:6a:d7:e4:
         1e:33:52:33:64:57:94:c1:af:3b:d4:4b:f0:e2:0a:aa:4e:24:
         c8:fc:35:f1:ae:41:f6:4a:8e:08:a4:93:bf:f4:9b:c5:8d:e5:
         c4:2b:6e:91:76:5b:04:e9:36:35:3b:4f:e3:e9:0c:ed:43:b5:
         42:b3:7b:47:f0:5c:36:64:85:4c:f5:ee:42:4a:1e:29:48:bf:
         26:37:ed:aa:24:09:52:ca:68:3f:31:34:d9:78:03:52:d7:2e:
         11:f6:06:55:7c:c4:ce:76:28:cc:3a:4a:1e:98:6a:a1:da:63:
         e9:71:ba:bf:a8:3d:3a:5a:ce:4e:0b:3f:45:07:01:69:07:ee:
         61:8b:d5:be:48:36:c5:56:7a:24:6f:eb:ba:a9:e0:01:83:fc:
         5e:e2:a9:e1:c9:75:f4:0d:2d:2f:3c:6a:49:57:20:58:c9:93:
         69:1a:34:78:7c:f8:3e:62:d4:1b:2e:8a:56:5e:bd:87:52:c0:
         b9:4a:32:e5:24:6c:7c:0d:ba:8d:4e:39:ac:36:3e:51:b1:df:
         2b:49:de:26:80:cb:7e:5b:4a:09:4e:e2:3f:13:46:08:75:f0:
         2a:27:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:51 2025 by rpki-client