Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File:                     DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier:          VF+FV7Z8kZoMNldDwbaz0JG00ZzB6kdbfb2bWS8gilM=
Subject key identifier:   97:E2:F7:34:52:80:D8:85:41:EA:6F:EC:7A:3E:F2:EE:CC:C5:EF:85
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer:       /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial:       0194BCAA4EA532342FFE3529E8EE003FA576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 14:01:05 +0000
Manifest this update:     Fri 31 Jan 2025 14:01:05 +0000
Manifest next update:     Sat 01 Feb 2025 14:01:05 +0000
Files and hashes:         1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: 077TGCFsUD4+Pjon5wI0hHO2eFxLoyNFdWFduFh62Qg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:4e:a5:32:34:2f:fe:35:29:e8:ee:00:3f:a5:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
        Validity
            Not Before: Jan 31 14:01:05 2025 GMT
            Not After : Feb  1 14:01:05 2025 GMT
        Subject: CN=97e2f7345280d88541ea6fec7a3ef2eeccc5ef85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:03:48:63:da:99:ad:fa:b4:ad:76:ff:b5:
                    58:0c:74:10:98:06:c1:a6:97:a1:24:28:bf:6d:5d:
                    87:52:c1:c9:bf:20:c9:8c:4f:2e:21:4d:19:ea:5b:
                    3c:df:e1:53:e3:4d:16:a6:9e:cb:b9:95:7d:1e:2b:
                    eb:5d:e9:55:44:42:8c:24:03:49:33:c2:52:b2:25:
                    c2:ef:6b:75:d7:1a:1f:c6:80:6b:e0:e8:8f:fd:de:
                    0a:08:b2:e6:d7:19:85:93:70:02:c4:a8:4e:8d:b7:
                    72:cf:a3:d5:0d:ae:9f:09:85:1e:2d:8d:52:20:b3:
                    92:ae:29:c0:f9:55:a0:11:8e:7b:ef:95:52:7e:d4:
                    56:cc:d2:5a:4d:0d:6f:15:68:1a:1f:e9:6d:eb:a9:
                    69:7f:d1:a1:e3:77:a2:c3:03:11:5f:d9:67:a2:5c:
                    49:7d:c5:f1:fd:a8:3a:98:06:ce:80:02:a8:78:00:
                    ed:68:c9:b0:2b:f3:3d:8f:57:72:85:74:b7:fe:ca:
                    b6:b7:c8:96:09:d3:42:f8:b4:93:16:43:3c:6d:50:
                    f8:c3:eb:a9:4d:06:f4:32:53:e0:43:2a:95:72:5a:
                    8e:c8:ac:d8:0c:cc:2b:dd:f9:36:0f:2a:39:8d:16:
                    69:f9:7c:17:e9:57:91:48:48:65:27:15:3e:a6:bc:
                    e2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E2:F7:34:52:80:D8:85:41:EA:6F:EC:7A:3E:F2:EE:CC:C5:EF:85
            X509v3 Authority Key Identifier:
                keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:75:0a:2a:69:cc:a3:35:38:8e:80:87:ad:01:86:ad:c1:19:
         05:ed:fe:23:9b:b4:26:3b:21:6d:2c:42:28:77:e8:bf:3f:c6:
         e4:95:33:cc:c8:18:2c:db:56:56:25:35:ae:6b:16:ce:2e:24:
         1c:96:85:09:8d:5c:51:29:88:f9:4f:a0:33:f8:31:c4:eb:cd:
         64:34:44:d3:5a:87:f9:71:a1:6f:a0:59:62:77:07:3d:a9:7b:
         b2:a7:1c:48:8c:83:f0:a0:53:45:27:26:10:49:66:20:76:d6:
         33:e7:78:7a:b8:c3:01:8d:42:94:44:14:50:ce:38:2e:63:6f:
         de:9d:f5:fa:2a:26:fc:7c:18:da:ed:d5:4a:2f:d7:cb:d3:37:
         bf:94:b1:52:42:f7:01:34:0c:2d:bb:02:d4:73:dc:db:6d:4c:
         2d:57:ad:3a:3f:37:ac:1f:a2:1c:4e:ee:34:fc:2f:25:f0:d7:
         87:00:f9:82:c5:42:27:65:8b:06:9d:a9:06:0e:86:ec:85:50:
         01:3d:37:20:52:4b:a4:16:c5:25:8e:ad:43:8b:eb:12:b0:04:
         82:7c:86:a4:d9:50:1b:ba:36:e6:49:6a:f0:8e:2a:22:92:b5:
         0a:46:5a:d6:30:1a:90:f5:b0:5c:58:a3:38:fb:71:8d:ca:a7:
         c4:69:c8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:21 2025 by rpki-client