Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3bde7e-619a-484f-9d6a-49a2542f639e/1/H7SyOkTfxa5WnnTPuw8D6Se1YeI.mft
File:                     H7SyOkTfxa5WnnTPuw8D6Se1YeI.mft (raw, json)
Hash identifier:          3jeOSQNyZ+gpcGZdhBfLYzf78dTPR7dZrMR00aCLjJQ=
Subject key identifier:   FC:57:12:1F:95:54:2A:48:F2:29:CD:ED:80:DD:2A:50:2F:7B:B5:7A
Authority key identifier: 1F:B4:B2:3A:44:DF:C5:AE:56:9E:74:CF:BB:0F:03:E9:27:B5:61:E2
Certificate issuer:       /CN=1fb4b23a44dfc5ae569e74cfbb0f03e927b561e2
Certificate serial:       0194BBCE3AFD8CEFC43B19DBF1BAF8DA1DD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H7SyOkTfxa5WnnTPuw8D6Se1YeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3bde7e-619a-484f-9d6a-49a2542f639e/1/H7SyOkTfxa5WnnTPuw8D6Se1YeI.mft
Manifest number:          0B9F
Signing time:             Fri 31 Jan 2025 10:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:42 +0000
Files and hashes:         1: H7SyOkTfxa5WnnTPuw8D6Se1YeI.crl (hash: vZ2awU0kToUMzRTO2ZeiCAk0Pf49kadsDTfLPhUvQfI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:3a:fd:8c:ef:c4:3b:19:db:f1:ba:f8:da:1d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb4b23a44dfc5ae569e74cfbb0f03e927b561e2
        Validity
            Not Before: Jan 31 10:00:42 2025 GMT
            Not After : Feb  1 10:00:42 2025 GMT
        Subject: CN=fc57121f95542a48f229cded80dd2a502f7bb57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:fc:12:0b:66:e5:7b:32:97:ad:24:79:43:
                    74:47:72:8d:05:f5:7e:6e:e9:e3:5e:6f:ef:6f:c3:
                    88:32:86:6c:ad:b9:7c:61:ad:56:18:8e:c1:07:71:
                    38:41:93:35:8a:1d:8f:57:00:8f:77:e2:14:2b:94:
                    55:2b:36:b1:84:c9:14:82:91:e2:ee:43:a4:27:06:
                    64:35:0c:05:17:cb:f4:35:1b:41:03:36:df:37:5f:
                    17:e8:7b:9f:60:8b:87:5c:ca:40:1e:c9:00:a5:c5:
                    5c:b9:80:87:e5:01:08:63:78:d1:fe:57:8d:f5:41:
                    2e:f2:38:d8:00:e2:4f:ab:5e:2d:44:d0:b3:31:2f:
                    2d:2c:27:a4:20:e3:2f:f7:29:68:cf:4b:a1:1c:92:
                    8e:c2:34:41:33:c1:fc:a0:89:27:31:62:a7:48:fd:
                    30:00:c0:05:90:24:da:cd:56:97:f1:96:68:d7:16:
                    81:26:05:19:c6:ba:33:df:4b:41:25:7c:8d:35:7e:
                    da:41:4a:37:8d:1a:be:32:d3:f3:df:68:bb:b6:09:
                    30:c4:2b:06:8e:e3:bc:87:2a:40:5a:80:5e:57:6a:
                    24:e3:e3:1a:b9:5c:ef:c1:ad:71:ec:10:75:99:6d:
                    3c:47:39:b4:77:a2:bf:2c:7d:25:00:92:e9:52:e8:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:57:12:1F:95:54:2A:48:F2:29:CD:ED:80:DD:2A:50:2F:7B:B5:7A
            X509v3 Authority Key Identifier:
                keyid:1F:B4:B2:3A:44:DF:C5:AE:56:9E:74:CF:BB:0F:03:E9:27:B5:61:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7SyOkTfxa5WnnTPuw8D6Se1YeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3bde7e-619a-484f-9d6a-49a2542f639e/1/H7SyOkTfxa5WnnTPuw8D6Se1YeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3bde7e-619a-484f-9d6a-49a2542f639e/1/H7SyOkTfxa5WnnTPuw8D6Se1YeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:5d:9c:51:65:00:88:ad:b6:00:25:05:e9:f3:4f:d6:6b:a5:
         53:84:e5:dc:5c:f3:2b:e5:03:5f:55:33:2c:02:51:6a:ad:e7:
         a1:9a:7c:bd:2b:a1:10:6a:97:bf:6c:55:bf:6b:f2:1d:76:a6:
         97:41:2b:42:e7:bc:b8:28:24:4d:74:c4:d3:bc:a0:ab:bb:ac:
         69:4e:19:4d:fc:71:38:1a:a0:e3:af:7b:94:26:20:fb:47:37:
         dd:0f:a3:5c:4d:86:c3:59:6b:ac:90:a5:6d:05:f7:9c:f7:0a:
         95:7f:ef:16:55:0e:5c:b8:5a:e2:f2:4d:28:dc:df:20:5b:6d:
         2d:26:94:6d:4c:d4:aa:c4:df:09:bd:28:85:05:35:77:8d:4d:
         a0:98:72:8c:ec:3e:08:e9:32:c3:50:67:d6:8d:b1:b1:6a:d8:
         56:2d:19:78:b1:6c:de:a6:37:ce:eb:1c:fc:20:48:4e:3e:d4:
         81:3d:58:29:6e:88:78:19:c7:a2:a2:a3:a2:e6:8c:fb:5b:56:
         4b:5b:36:b4:26:7a:50:c9:cb:a0:a6:2c:17:3c:55:d5:33:ef:
         99:f2:1f:a7:2f:8a:7f:67:f8:e0:b6:ea:9a:d0:e0:09:7b:63:
         ab:7c:9d:ed:6a:e9:b6:b4:65:d0:1d:f0:e8:eb:6c:18:29:66:
         ea:eb:7b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:23 2025 by rpki-client