Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
File:                     fE1IJUsiup1SREgNc0E0brz1wPc.mft (raw, json)
Hash identifier:          umi5b7JYcQoeVYrW1Tvu36YyrBzBV8L3MOBawBq86Cw=
Subject key identifier:   F6:29:07:F4:36:86:C6:5C:84:2A:90:71:A1:95:EF:84:27:61:2D:F3
Authority key identifier: 7C:4D:48:25:4B:22:BA:9D:52:44:48:0D:73:41:34:6E:BC:F5:C0:F7
Certificate issuer:       /CN=7c4d48254b22ba9d5244480d7341346ebcf5c0f7
Certificate serial:       0194BD17B1F1379FB11B44E08FF060C9DE19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft
Manifest number:          023A
Signing time:             Fri 31 Jan 2025 16:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:34 +0000
Files and hashes:         1: fE1IJUsiup1SREgNc0E0brz1wPc.crl (hash: uovBKGPAlqqxEAtT1BZspLnkW/ucuoMbNZJ3mCuvDNk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:b1:f1:37:9f:b1:1b:44:e0:8f:f0:60:c9:de:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4d48254b22ba9d5244480d7341346ebcf5c0f7
        Validity
            Not Before: Jan 31 16:00:34 2025 GMT
            Not After : Feb  1 16:00:34 2025 GMT
        Subject: CN=f62907f43686c65c842a9071a195ef8427612df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:0e:b4:b0:7b:c2:d0:3e:28:d1:a0:49:e6:
                    c0:33:74:ef:55:b4:44:0b:e3:d4:63:b9:c1:3f:50:
                    ba:ba:a6:df:10:62:e8:e4:2d:3f:8f:51:1e:d5:c0:
                    7a:a3:50:cd:d3:6e:b0:ca:41:7f:4d:26:86:30:00:
                    ca:28:06:9b:97:39:f1:54:76:9b:7d:a1:79:a7:29:
                    de:ff:7f:8a:a1:0d:83:15:bd:41:0b:7a:f9:50:51:
                    32:26:01:bc:6b:04:e7:3d:c4:fd:cf:be:50:27:a9:
                    b7:e9:16:84:5f:9b:1b:49:d7:ae:83:1f:86:45:62:
                    a4:50:8d:73:5a:ab:87:67:d9:94:3a:ca:be:64:6b:
                    e3:d8:20:14:c2:fc:0a:b5:37:7c:8e:54:60:a7:2e:
                    8f:43:2a:4c:86:a1:41:fb:79:27:c7:3f:6e:f8:39:
                    43:3a:f3:54:d0:9a:1b:38:51:12:80:3e:a4:86:3e:
                    ee:05:cb:50:fc:00:93:c3:ee:cc:f3:15:2b:0b:92:
                    6c:db:0a:69:ff:7b:38:26:dc:5d:80:eb:63:81:bc:
                    f4:46:de:bd:2e:99:b8:17:9f:f1:b2:0b:c6:f3:39:
                    3f:96:11:7c:2c:30:67:4a:c1:57:d4:99:24:df:fc:
                    dd:ac:a9:85:07:12:bc:f9:dc:e3:15:a1:10:88:1e:
                    4b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:29:07:F4:36:86:C6:5C:84:2A:90:71:A1:95:EF:84:27:61:2D:F3
            X509v3 Authority Key Identifier:
                keyid:7C:4D:48:25:4B:22:BA:9D:52:44:48:0D:73:41:34:6E:BC:F5:C0:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE1IJUsiup1SREgNc0E0brz1wPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e11cf8-cae0-4cc3-bea0-4c8b5dabdac4/1/fE1IJUsiup1SREgNc0E0brz1wPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b8:b1:75:9c:4b:82:6c:7d:e9:5a:a0:1c:49:fd:8a:2d:c6:
         4b:0c:74:dc:11:b5:af:39:ea:63:85:fc:69:0a:33:61:d0:8c:
         bb:40:f4:84:be:37:a7:11:d9:c9:b5:53:2f:fb:fc:ff:3a:a1:
         80:8d:8b:3a:a4:45:8f:9f:ab:dd:da:15:6a:04:33:df:9f:cd:
         ef:c4:75:26:f9:84:7d:38:15:98:eb:85:5c:54:ec:8d:6f:ef:
         86:bb:a5:f0:73:67:98:fb:eb:4e:f8:fb:f8:55:4b:3c:74:40:
         9b:ca:1b:b7:f0:1c:b9:aa:19:0a:e4:1b:06:83:2e:d2:56:f9:
         e5:bf:ed:1e:74:32:89:0b:91:46:e8:15:09:2f:b0:38:3d:b9:
         54:ab:6e:36:dd:4c:41:23:51:d7:55:49:ba:ca:9b:d4:41:96:
         15:83:92:e8:f5:c5:aa:28:6c:9b:38:db:ed:aa:d1:c4:0f:cf:
         11:ba:39:d3:4b:87:33:02:9a:ce:66:0b:e6:92:4b:19:8f:a3:
         89:74:39:43:d5:bc:96:db:9d:d5:7d:83:f8:99:ed:b3:9e:a8:
         01:91:ac:7f:5d:de:f3:15:e1:db:62:7c:b9:23:20:ce:d2:53:
         7e:d3:4e:93:75:9f:8c:2f:e2:38:6e:65:ba:e6:14:7e:86:f4:
         d0:f3:34:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:16 2025 by rpki-client