Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
File:                     jV7D1aSGjjUxImKnxqqRRDWJPNg.mft (raw, json)
Hash identifier:          HhL0unrCpRVM0jxC5DG4cnOqqIqRPJ5IW4spCUVp/AE=
Subject key identifier:   2F:3C:E6:04:8C:4B:A6:2A:01:5B:34:CF:4A:9F:1C:E4:C2:E8:E6:CE
Authority key identifier: 8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8
Certificate issuer:       /CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
Certificate serial:       0194BBCDBB4740119C16FABE88D2D5FB080C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
Manifest number:          070A
Signing time:             Fri 31 Jan 2025 10:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:09 +0000
Files and hashes:         1: jV7D1aSGjjUxImKnxqqRRDWJPNg.crl (hash: 2P+ZO8tsmlpPTaHWoNRf1D3dlqsuHhzlsnF7uDvrY+4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:bb:47:40:11:9c:16:fa:be:88:d2:d5:fb:08:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
        Validity
            Not Before: Jan 31 10:00:09 2025 GMT
            Not After : Feb  1 10:00:09 2025 GMT
        Subject: CN=2f3ce6048c4ba62a015b34cf4a9f1ce4c2e8e6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:38:14:03:13:16:7f:25:eb:83:38:71:58:
                    94:3e:f3:ba:eb:fb:64:11:53:a2:37:dc:94:79:5b:
                    c3:13:be:f4:f6:08:93:78:ac:05:b8:77:ca:1b:80:
                    4c:13:f5:18:fd:85:aa:e4:94:43:53:49:32:df:12:
                    fd:d8:df:96:4e:1f:c7:36:7e:de:5e:6c:02:a4:00:
                    89:e1:32:19:bf:e6:de:85:f9:3c:89:a5:b7:db:2f:
                    8b:78:ff:c4:fb:93:87:d7:09:d7:86:49:ed:61:c8:
                    44:9f:24:ca:79:4f:d9:52:b8:be:43:9d:c0:c9:1f:
                    cd:5a:a4:ce:0e:64:16:aa:a4:f7:44:2b:20:e5:77:
                    93:96:bf:54:b0:83:42:d4:f5:5c:05:e6:6b:8c:12:
                    f9:f7:e1:87:9e:46:ee:f2:e1:41:6f:aa:46:b3:63:
                    50:b0:ee:4c:de:6e:2d:59:0a:74:ff:1f:fe:4e:1d:
                    1e:63:4d:2d:91:18:1f:ad:37:40:e0:c2:fc:b2:2c:
                    38:bc:50:41:22:d3:e8:3e:5a:7c:28:d7:c1:ff:e8:
                    2d:3d:2a:ad:30:81:e6:99:2d:cc:d2:0e:7c:54:32:
                    bd:07:72:86:2b:4c:4d:e3:a8:86:9d:41:b3:31:84:
                    ff:3b:d1:cb:5a:4d:0f:2a:cb:7e:24:ce:b7:4b:86:
                    c1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3C:E6:04:8C:4B:A6:2A:01:5B:34:CF:4A:9F:1C:E4:C2:E8:E6:CE
            X509v3 Authority Key Identifier:
                keyid:8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:69:45:5f:df:00:9e:85:a0:b5:52:80:88:d4:d3:e7:0f:96:
         4d:e1:2f:e2:cc:a3:b7:dc:c7:36:99:30:bc:7b:ee:a1:51:94:
         af:b3:ca:67:19:f7:23:81:ff:30:33:c0:af:e3:27:00:da:c3:
         5b:21:44:5f:b5:7b:e5:a3:fa:e2:bf:f8:55:74:4d:56:d8:89:
         a1:39:8f:5b:53:5b:8a:83:58:f5:62:76:23:ab:51:91:a5:32:
         c1:33:c0:5d:bf:ed:37:0a:a8:92:94:a4:88:59:da:1e:84:07:
         19:67:c2:b6:31:20:61:f9:99:71:6a:3b:cd:44:a8:c2:b6:4f:
         89:09:21:67:97:e2:58:57:5f:12:44:15:8e:87:81:54:14:60:
         a3:04:2f:b1:34:e4:e2:5d:1b:d0:12:f2:26:f4:3a:14:d4:e1:
         e0:f5:6c:76:f2:a4:08:ae:40:90:32:68:d4:a0:72:93:76:54:
         60:45:b6:58:9d:2f:16:0b:15:8b:4e:e5:08:38:a8:64:a7:66:
         b8:0e:09:7b:34:bb:4f:a8:61:cf:a3:f3:0c:e5:69:0b:fa:8d:
         30:7e:f6:cf:9b:93:2b:36:ce:a0:cd:e9:ca:29:08:8f:72:42:
         26:9f:06:2b:b4:a0:a0:b9:65:21:05:db:2e:c9:c3:3a:17:66:
         3c:46:aa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:29 2025 by rpki-client