Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File:                     7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier:          YSNCmGdBnWDsTfO6mjI1MpqtDtXibrz1oofVuPlMVlI=
Subject key identifier:   CA:36:5E:D0:28:EF:DD:E1:EE:92:1F:07:B5:41:06:DA:A2:AB:F3:11
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer:       /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial:       0194BD17780F3EAE372F3AF6A51B28D9649C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number:          118A
Signing time:             Fri 31 Jan 2025 16:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:19 +0000
Files and hashes:         1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: 0CTTKiwo9jE1EuLKSjJe3Jg2pVZ+0Onv8DDcl7TPLGI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:78:0f:3e:ae:37:2f:3a:f6:a5:1b:28:d9:64:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
        Validity
            Not Before: Jan 31 16:00:19 2025 GMT
            Not After : Feb  1 16:00:19 2025 GMT
        Subject: CN=ca365ed028efdde1ee921f07b54106daa2abf311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:11:a5:92:2b:93:3f:4a:d5:8b:60:e4:e8:
                    c1:2a:52:0a:f6:e1:f3:0e:59:da:76:6a:ec:c8:2c:
                    4c:54:1c:8b:f5:46:ae:98:d8:9a:b9:ac:61:9a:9d:
                    4f:f0:99:b6:bf:78:1c:32:3f:f0:d7:64:ce:05:de:
                    1f:a3:b8:61:1e:ac:e8:b2:af:a2:a2:89:c3:df:bf:
                    4c:0d:bb:82:f6:1e:38:8f:ed:81:83:4c:f7:ea:55:
                    b9:54:ed:12:3b:0a:9b:86:f4:d5:67:ba:4d:44:3c:
                    cb:c6:f9:83:01:45:76:42:33:52:a8:78:b9:4f:4f:
                    ae:37:eb:d8:9a:35:da:c3:54:e3:f9:11:68:52:93:
                    c6:d4:09:74:4a:c8:4b:8f:4f:9a:71:fd:ee:97:56:
                    c6:1a:7a:40:25:63:a7:0c:06:b9:0f:ab:85:44:f9:
                    e5:3e:80:de:8b:88:39:e5:a2:6f:36:09:6b:7c:c4:
                    bc:ae:4b:71:82:8a:84:5d:02:25:a3:ef:55:e2:67:
                    6a:c8:ae:0a:f5:70:05:c8:f4:ac:fa:6d:a8:cb:8d:
                    9f:8c:80:24:8c:33:92:4d:c4:5e:8c:4c:04:17:7d:
                    a0:31:96:81:ad:6c:0c:03:5c:1e:a3:a6:69:b9:d4:
                    dc:93:40:bd:62:73:ea:65:09:97:ac:d2:65:e7:12:
                    4c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:36:5E:D0:28:EF:DD:E1:EE:92:1F:07:B5:41:06:DA:A2:AB:F3:11
            X509v3 Authority Key Identifier:
                keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:90:0b:8e:e9:a3:5d:8f:14:31:d0:a1:e6:24:87:d5:fd:f5:
         cd:1d:f5:5b:5a:76:9b:14:e5:56:2c:ab:0a:4d:89:96:ce:d8:
         12:40:31:54:3a:81:10:80:d3:cd:26:69:62:46:3d:9c:d4:5c:
         02:01:2d:46:be:c5:b0:e3:64:11:f4:29:7e:7d:9e:e7:13:dd:
         40:1e:6a:35:58:ec:b0:09:3d:9d:59:4d:cf:ba:e2:ae:61:28:
         48:82:cb:37:ba:42:b3:4e:ba:b2:8b:3f:b4:c7:e2:fe:89:ee:
         88:a5:48:82:df:d4:43:44:0e:75:f5:ca:a9:ce:5f:73:85:ba:
         15:57:bd:3b:1e:05:8d:d8:45:e2:3a:a6:3b:8b:c6:45:f9:89:
         5d:a3:04:94:c2:9e:22:97:c2:23:60:42:54:d0:94:24:ef:04:
         eb:e5:53:64:d5:5d:f8:69:72:24:5a:ad:15:45:4d:c3:3f:7a:
         6d:c9:43:54:05:d3:0d:de:9a:2b:f8:1d:d0:a5:b8:42:b8:4d:
         a0:6e:6c:7e:94:12:fc:c8:03:f8:d6:09:fa:3a:3c:92:ce:2e:
         8b:d5:34:7e:67:6c:c3:92:a5:5b:9b:79:a7:b5:25:a9:6e:f1:
         3b:95:b5:ca:f0:9d:a7:da:1f:ab:0a:f6:39:68:ad:4b:5e:4f:
         1a:03:9d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:44:48 2025 by rpki-client