Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
File:                     fPxZzhNuPpOobeVfBdSaWeFcu78.mft (raw, json)
Hash identifier:          aYzrolP32uz+2ayP97mQ1H8VvnAgpWwMqe29mQBy+kI=
Subject key identifier:   53:E8:DA:85:E5:9E:77:C3:B3:59:5F:7B:4F:B8:22:1E:5E:BD:39:D6
Authority key identifier: 7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF
Certificate issuer:       /CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf
Certificate serial:       0194BD17CACED22E135A8BCB476EA76BFB3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
Manifest number:          07C7
Signing time:             Fri 31 Jan 2025 16:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:40 +0000
Files and hashes:         1: fPxZzhNuPpOobeVfBdSaWeFcu78.crl (hash: 25EWfgUPp7mQKhTF7vGY8aCx0VYOdFFsbfUao3XegXU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:ca:ce:d2:2e:13:5a:8b:cb:47:6e:a7:6b:fb:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf
        Validity
            Not Before: Jan 31 16:00:40 2025 GMT
            Not After : Feb  1 16:00:40 2025 GMT
        Subject: CN=53e8da85e59e77c3b3595f7b4fb8221e5ebd39d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:0a:43:f2:40:a3:1b:47:7b:35:3d:2e:0f:
                    5d:ba:9d:b1:c2:df:2a:c7:59:3f:a4:3c:10:93:c4:
                    7d:0f:36:c9:a4:2e:34:c7:ae:79:a4:57:d6:8d:ee:
                    e9:0f:09:e2:54:6a:c2:e4:ab:c1:94:46:c7:47:18:
                    ac:0d:60:12:0e:0f:c9:df:ef:56:e4:da:1b:a4:8e:
                    ec:cf:b0:80:5d:03:47:7a:95:a1:a6:8a:4f:ef:ac:
                    65:c9:8b:24:a9:a6:11:9a:aa:08:64:6f:75:c4:99:
                    ff:a2:57:8e:54:06:78:8e:f7:42:2a:af:ba:97:00:
                    e6:c9:5b:bf:19:d9:33:88:99:c9:ae:47:bb:92:13:
                    1a:86:93:86:f1:a3:d2:53:f2:d7:85:0f:38:ac:3a:
                    35:2f:a4:f9:30:49:b4:9a:24:73:dc:0b:70:b1:95:
                    e7:95:c4:7a:aa:29:63:93:8a:4c:7e:76:c3:94:6c:
                    59:b1:cd:fc:cb:0f:12:e1:52:2e:28:4d:17:42:5c:
                    02:60:45:d9:7e:6b:56:7f:91:b5:3c:bc:49:49:b7:
                    18:49:60:a3:54:72:f0:a2:27:32:f3:a1:d9:65:52:
                    c5:eb:66:89:fe:ee:c6:39:e4:af:a5:fb:cf:2a:ba:
                    e1:28:ed:3c:e0:61:2a:f4:40:77:fb:a1:fe:b6:02:
                    34:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E8:DA:85:E5:9E:77:C3:B3:59:5F:7B:4F:B8:22:1E:5E:BD:39:D6
            X509v3 Authority Key Identifier:
                keyid:7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b5:68:75:42:a1:f8:b8:db:d3:3a:e5:2d:c7:f1:88:4f:8f:
         06:de:a8:03:49:d3:1b:d8:fe:23:9e:95:ea:18:19:65:de:a7:
         76:a0:7e:ce:d5:b2:98:89:e6:90:15:f4:1d:43:75:62:ab:a9:
         23:4a:2f:d6:d1:15:95:be:b9:31:22:e5:8c:78:d1:5e:01:45:
         5e:2b:39:6a:b2:0e:7c:49:cb:34:dd:31:e3:28:64:16:ec:52:
         e7:c7:5f:26:af:70:5b:3f:9e:48:4f:56:c6:68:39:5a:fa:46:
         2c:19:1a:6c:0b:76:a7:23:bb:99:ca:67:d4:b8:99:70:a4:c5:
         ec:20:50:6c:5d:51:da:51:e4:72:52:8d:9e:6f:c1:dc:25:78:
         39:9e:1e:38:e5:90:67:63:d9:ee:a6:f9:5d:ce:3d:02:3a:d5:
         fc:31:12:b3:8c:79:41:f1:36:52:b6:bc:7a:bc:a3:bd:fc:ef:
         c1:65:cc:bd:5e:f1:a8:0e:7c:e3:0c:21:68:d0:4b:70:da:d0:
         f4:6a:6f:3b:cc:81:2b:7f:a7:b9:4b:3c:56:e9:a6:3d:3e:f1:
         0c:ce:5e:f1:50:d8:3f:b9:53:6c:90:f3:9a:3c:91:1b:61:a0:
         63:24:88:5e:38:47:4c:e6:da:75:63:2d:21:97:40:f1:6a:36:
         c2:74:c7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:54:29 2025 by rpki-client