Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File:                     8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier:          j6N/DF6QjVMbm9b4CzcbMUgFyPmt4FdLv1Kp3kHgk6A=
Subject key identifier:   6D:C3:FF:B1:67:18:27:2F:21:FC:A5:A6:1B:04:EE:B9:FF:2E:4D:1C
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer:       /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial:       0194BD17FC763F60F3A00A639C1018A26DEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number:          0EAC
Signing time:             Fri 31 Jan 2025 16:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:53 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:53 +0000
Files and hashes:         1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: PnGOwmNWMuYBD/wkS6bNeb7Fcz6A6Pn3YFA52CFGhQI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:fc:76:3f:60:f3:a0:0a:63:9c:10:18:a2:6d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
        Validity
            Not Before: Jan 31 16:00:53 2025 GMT
            Not After : Feb  1 16:00:53 2025 GMT
        Subject: CN=6dc3ffb16718272f21fca5a61b04eeb9ff2e4d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:76:75:06:d9:3b:2f:61:c2:6d:a4:46:c8:
                    2e:a1:ce:09:04:56:03:a2:11:ac:a6:ef:70:44:c6:
                    12:fb:7b:33:e7:fe:0d:eb:5c:87:f3:bd:fd:ee:60:
                    d5:2b:02:8a:78:14:6b:b5:19:21:48:3d:4e:0c:d7:
                    8e:60:a0:69:b5:67:1f:47:b9:8e:18:eb:65:be:75:
                    07:1b:fa:38:98:80:3d:7f:6f:a7:a7:35:e9:01:e3:
                    55:5a:d4:47:a9:9f:e7:cb:c9:e5:f3:ff:3c:ae:6a:
                    21:d8:59:c4:d2:a4:2a:1a:b1:ec:d4:f2:19:55:5d:
                    b5:f1:c0:99:90:f9:0b:40:d1:51:61:bc:35:6f:f6:
                    17:0d:f9:94:62:f0:ea:26:4c:d5:74:0b:63:3e:13:
                    79:23:a6:86:64:f4:43:f6:f0:16:b3:1c:09:b0:00:
                    ad:c1:96:d9:4f:37:ce:85:fd:bf:53:ea:7c:10:eb:
                    58:91:b9:f5:c3:1f:03:b2:38:92:95:40:bc:f7:77:
                    0b:8e:db:3c:8f:9b:a2:d5:e7:1e:54:34:89:16:60:
                    e4:ea:73:92:94:33:87:7f:b6:87:26:0f:4b:5b:8b:
                    8e:c9:14:21:66:3f:03:93:bf:d9:61:c5:f7:f3:d2:
                    48:42:e3:af:b1:84:6e:01:a5:db:b2:ff:db:1c:f6:
                    88:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C3:FF:B1:67:18:27:2F:21:FC:A5:A6:1B:04:EE:B9:FF:2E:4D:1C
            X509v3 Authority Key Identifier:
                keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:94:c6:49:b6:55:f9:16:79:20:2b:3f:c8:5f:ef:c4:7e:7c:
         3c:16:b5:65:ec:3d:3f:8e:9a:8d:6f:9a:50:ec:e1:a1:bd:5d:
         9e:9e:e6:25:75:1a:da:a1:60:d9:70:25:fa:34:de:0a:3e:9e:
         0b:0f:54:37:c8:5a:a3:36:3f:9a:64:c3:b1:d8:b7:a7:e6:42:
         98:25:ee:35:8e:b6:2b:f6:ab:00:cf:8c:a1:3e:fb:07:af:f0:
         f7:d6:1a:24:f8:6f:44:78:d1:25:17:8f:62:5e:ea:63:f6:65:
         81:74:9b:f7:da:ea:a2:41:c3:32:69:40:8d:b0:47:11:18:91:
         3e:10:f3:6c:00:86:7f:ce:54:a2:c2:ca:e0:b2:43:15:1c:36:
         7f:6c:82:98:e3:f2:51:ed:47:73:4c:e1:1a:b5:23:d2:8b:be:
         0a:2f:61:e5:b9:28:4b:14:c9:a1:f0:2e:04:ea:ec:51:d1:95:
         6f:ec:94:30:90:43:a9:3d:79:c8:02:0b:e0:dd:ca:05:ee:96:
         4c:7a:f2:8b:86:99:79:2c:a0:88:79:2b:eb:67:ee:03:07:af:
         ab:8c:50:30:d1:c8:c4:97:51:a9:55:cb:76:3e:fc:fa:d9:14:
         3a:5c:f9:5c:d9:74:8f:21:f6:78:b7:b4:04:45:e0:1c:ba:93:
         92:bd:27:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:21 2025 by rpki-client