Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
File:                     ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json)
Hash identifier:          klM9w0eMw72yJKkdQQkVIT9S4IbBYoAx0U+Um7G2/N4=
Subject key identifier:   01:BD:0C:8B:FE:64:F7:6B:EF:AF:84:40:78:03:D2:CA:9C:41:EE:07
Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
Certificate issuer:       /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Certificate serial:       0194BCAA572B13F90BF3AB9170D230442AA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
Manifest number:          1348
Signing time:             Fri 31 Jan 2025 14:01:07 +0000
Manifest this update:     Fri 31 Jan 2025 14:01:07 +0000
Manifest next update:     Sat 01 Feb 2025 14:01:07 +0000
Files and hashes:         1: 9sc_Z6wsh2xqSgSi_D7ZTYMetBM.roa (hash: ysO7qNEauUD+3RJnhREGXDUT/3d77gpAizI5YbhTLSM=)
                          2: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: iGEB3c+w5dWm8p3AJ0cwfHoAOpHmUARJXCe6QZQo2qY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:57:2b:13:f9:0b:f3:ab:91:70:d2:30:44:2a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
        Validity
            Not Before: Jan 31 14:01:07 2025 GMT
            Not After : Feb  1 14:01:07 2025 GMT
        Subject: CN=01bd0c8bfe64f76befaf84407803d2ca9c41ee07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bd:46:20:08:74:94:5a:5a:02:0f:65:1d:42:
                    98:bf:a5:46:15:09:69:86:91:aa:16:e0:34:24:9c:
                    e4:6c:ee:ed:81:af:51:f0:1b:1e:83:aa:e4:b6:76:
                    dd:73:c5:92:51:cb:4f:7f:c9:59:b9:40:90:95:f6:
                    f5:8c:fc:a8:92:3c:db:69:c5:dc:70:b4:6a:16:9c:
                    86:e2:c6:ca:c7:75:62:41:5f:53:f8:67:89:9b:c6:
                    7a:d4:7d:e3:e8:4e:4d:c3:d8:81:7d:6e:ed:57:3e:
                    42:29:94:10:89:be:17:20:88:04:64:9c:e7:b6:f6:
                    06:d6:ab:25:3e:64:ec:99:a1:ea:3c:d5:b6:3b:92:
                    39:2b:bf:3a:db:c9:a0:01:18:ed:f1:52:43:a1:99:
                    2e:ad:d4:ad:14:e0:78:42:2f:b3:85:a3:fb:4b:ae:
                    ee:3d:f3:5d:2d:ec:b3:e8:7b:29:a5:06:ba:88:53:
                    f8:ee:07:4c:d7:31:2e:5d:71:63:5c:af:df:df:dc:
                    1f:41:7d:22:04:a9:66:9e:c0:6b:8a:3d:f9:45:83:
                    62:bf:7e:b1:d7:78:f1:28:1d:12:d7:26:45:9c:70:
                    f6:44:fa:34:05:15:75:33:d3:56:3b:30:46:ca:d7:
                    80:1e:45:28:1d:f8:49:51:a6:0c:31:77:b9:d1:ac:
                    92:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BD:0C:8B:FE:64:F7:6B:EF:AF:84:40:78:03:D2:CA:9C:41:EE:07
            X509v3 Authority Key Identifier:
                keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:49:93:38:b3:47:38:1d:dc:8b:02:c5:ac:5e:7f:06:01:4a:
         36:e7:66:7d:34:f6:88:52:9e:56:72:8c:81:ae:89:58:b4:42:
         78:54:50:79:92:df:52:fe:52:af:6b:e6:8b:75:87:61:19:7c:
         66:34:9a:b6:84:7c:c4:79:df:82:e4:48:06:8f:fb:a9:9d:91:
         20:f3:86:29:aa:0e:8a:89:f2:04:b6:cb:ad:a9:56:ce:45:fc:
         79:d6:46:80:18:11:76:be:6c:2d:01:5d:80:79:06:63:73:18:
         f6:9b:c6:4a:eb:88:a6:93:7e:40:1b:c2:d5:56:53:24:60:d5:
         be:6a:19:39:48:5d:13:7f:31:64:49:f1:1b:bb:94:f6:04:bd:
         3c:fb:05:7d:6d:f8:1d:57:2f:6a:70:80:30:a4:10:76:1a:6c:
         02:34:74:8a:aa:d9:bb:db:2f:d9:95:29:ef:7a:35:1b:8e:7e:
         15:fb:b4:73:21:07:d9:db:3e:28:8d:82:79:25:76:af:b2:00:
         9d:5d:1f:96:f8:9d:12:f9:33:ba:6e:ac:33:58:16:7b:95:ec:
         91:8d:8c:ed:84:c0:e4:50:c5:3e:67:9b:32:d9:b4:58:ae:df:
         8e:ef:a6:26:27:94:67:d4:43:6b:c8:fe:74:69:c4:be:54:22:
         4f:7b:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:46:57 2025 by rpki-client