Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/4G39OIvWV5G4KA1GeLtu8HyfXXs.mft
File:                     4G39OIvWV5G4KA1GeLtu8HyfXXs.mft (raw, json)
Hash identifier:          Fx4oVqOHfs+9lDeDKq1ntWCZ8kwHgEvbbFgZrN/ERck=
Subject key identifier:   47:10:AF:3D:23:41:85:DA:96:51:23:F2:F4:31:16:85:C1:F2:A3:AB
Authority key identifier: E0:6D:FD:38:8B:D6:57:91:B8:28:0D:46:78:BB:6E:F0:7C:9F:5D:7B
Certificate issuer:       /CN=e06dfd388bd65791b8280d4678bb6ef07c9f5d7b
Certificate serial:       018796FEF4D3F65C627E824849048800C29C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4G39OIvWV5G4KA1GeLtu8HyfXXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/4G39OIvWV5G4KA1GeLtu8HyfXXs.mft
Manifest number:          CE
Signing time:             Wed 19 Apr 2023 00:51:43 +0000
Manifest this update:     Wed 19 Apr 2023 00:51:43 +0000
Manifest next update:     Thu 20 Apr 2023 00:51:43 +0000
Files and hashes:         1: 4G39OIvWV5G4KA1GeLtu8HyfXXs.crl (hash: JXZ/ZK/keAxlsIewwjlcCQyKIwOdgAoOEoSaSF1o+bE=)
                          2: XcXnRYsBR-Vosh1hRwoxpx_1KkM.roa (hash: v0NCPbYdfCZqbahjoTrIngEndEvs5SFaOD7c+r7gNS8=)
                          3: sRdbwM2FhT4KZFWByGVh6X9hlas.roa (hash: eFMqEnuzY87UNd7fTIk3WGYcFKadCzBIX6G/lJCzbhg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:96:fe:f4:d3:f6:5c:62:7e:82:48:49:04:88:00:c2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06dfd388bd65791b8280d4678bb6ef07c9f5d7b
        Validity
            Not Before: Apr 19 00:51:43 2023 GMT
            Not After : Apr 20 00:51:43 2023 GMT
        Subject: CN=4710af3d234185da965123f2f4311685c1f2a3ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7b:46:be:ec:ca:b0:91:17:e6:e5:c3:d9:9e:
                    2e:fe:e5:eb:70:a8:31:05:ef:a8:f7:56:8a:97:fd:
                    8f:47:ef:bf:7e:c8:e0:6b:d0:1b:1d:8c:25:4e:79:
                    c9:35:a9:41:c3:4c:bb:e1:5f:21:9d:33:b7:9e:04:
                    18:36:2b:b7:a2:4b:1e:78:79:45:1e:5d:82:0f:50:
                    17:4e:50:24:4d:92:e7:74:97:08:2b:8a:b1:c5:7c:
                    69:91:a4:54:af:ca:4f:d6:03:a7:ab:04:0a:9f:31:
                    b2:12:57:c1:89:d7:21:72:02:7a:a0:b7:c1:4c:fc:
                    b0:4e:3e:79:79:bd:58:9c:ba:71:35:95:d4:91:6b:
                    8e:aa:5c:86:11:2b:1a:f9:23:5f:89:0a:76:c6:53:
                    0c:0c:27:91:68:93:15:26:72:b9:c7:ab:cb:40:0e:
                    8c:22:5a:f8:61:86:52:19:a3:20:fc:55:35:8d:ba:
                    11:09:f3:f3:ee:c0:4b:f5:63:d9:fe:c3:8b:92:fe:
                    8f:91:04:84:6e:3b:ec:88:c8:df:78:a5:43:ab:78:
                    fb:79:3f:c7:f5:f4:63:3f:a7:a4:90:6d:5b:52:22:
                    89:5a:ee:d0:32:d0:a4:8f:29:8d:e5:05:6e:fc:2c:
                    c5:7c:ba:fe:45:43:fd:ef:3e:cb:1e:b7:d7:a5:f8:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:10:AF:3D:23:41:85:DA:96:51:23:F2:F4:31:16:85:C1:F2:A3:AB
            X509v3 Authority Key Identifier:
                keyid:E0:6D:FD:38:8B:D6:57:91:B8:28:0D:46:78:BB:6E:F0:7C:9F:5D:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4G39OIvWV5G4KA1GeLtu8HyfXXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/4G39OIvWV5G4KA1GeLtu8HyfXXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/4G39OIvWV5G4KA1GeLtu8HyfXXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0a:e6:87:e0:45:ba:8b:20:69:40:b4:ca:e1:c6:f6:2d:08:
         9d:8f:40:82:20:cb:2f:0f:7d:4a:10:27:cd:3f:66:e3:a0:72:
         28:d2:60:07:1a:c5:7c:e5:21:a5:32:39:b6:f8:c6:8c:13:7c:
         f5:1a:f5:80:85:a1:2d:a8:da:c2:d1:a4:02:df:b4:57:df:a2:
         1d:b3:eb:7c:ad:29:52:2a:b7:e7:95:f8:6b:af:a0:2a:a6:5d:
         a9:4f:cb:23:b2:47:da:ee:f3:41:4c:d6:a6:5b:a2:b5:a3:15:
         2c:74:69:7e:f0:eb:f1:8f:f5:b8:3f:29:d6:ca:b5:b9:b4:b4:
         5c:7d:b3:3d:6b:fc:1a:e8:1c:4b:3b:16:57:8f:b0:7c:85:10:
         e9:98:2b:ec:5f:0d:f0:e9:aa:37:2c:3a:c0:d8:73:81:75:a3:
         5d:fd:88:1c:c4:b8:70:c3:5c:2e:ab:ee:a0:91:f0:b5:e1:97:
         bc:b9:9c:37:20:fc:7d:03:9b:cc:e2:4d:5c:96:3b:f4:6e:af:
         36:54:a4:51:02:0b:47:43:c6:95:40:c6:8b:04:48:9a:8b:b6:
         d7:de:97:0c:f2:85:1d:61:da:37:13:3d:44:cf:a1:20:06:4f:
         14:1f:b6:05:c8:c8:b5:90:8b:0c:e5:4f:f5:6c:9c:7c:9b:48:
         f6:ad:15:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:33 2025 by rpki-client