Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
File:                     rHI58-_bN5H1vlVSmbXYFpfz0BI.mft (raw, json)
Hash identifier:          lUo/lt4zgcItqpPy9f8N38uq84Dk9rUrm7NeFp0Eu4M=
Subject key identifier:   49:43:9A:F0:FF:AB:39:93:BA:66:A2:9E:CC:13:D6:76:46:AA:C7:07
Authority key identifier: AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12
Certificate issuer:       /CN=ac7239f3efdb3791f5be555299b5d81697f3d012
Certificate serial:       0194BC3BC0BC26A4C969650C532D3A63805F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
Manifest number:          0FE6
Signing time:             Fri 31 Jan 2025 12:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:19 +0000
Files and hashes:         1: rHI58-_bN5H1vlVSmbXYFpfz0BI.crl (hash: zG+DD9eGLsHeLh8M73I2YiS0aKo2ryCfsQNWp27P8SU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:c0:bc:26:a4:c9:69:65:0c:53:2d:3a:63:80:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7239f3efdb3791f5be555299b5d81697f3d012
        Validity
            Not Before: Jan 31 12:00:19 2025 GMT
            Not After : Feb  1 12:00:19 2025 GMT
        Subject: CN=49439af0ffab3993ba66a29ecc13d67646aac707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:c2:5a:56:5f:92:86:0a:e4:98:53:a5:d2:
                    ab:b4:57:d4:86:82:2f:b3:4a:1e:b0:38:52:e9:39:
                    3c:4e:af:77:84:54:8f:a6:28:a3:df:33:18:1e:c8:
                    c7:5b:13:e5:a9:05:d4:18:5a:60:3a:d4:fe:9b:8b:
                    99:c6:da:ae:50:dd:c1:49:1b:7b:aa:8f:62:89:9a:
                    2f:55:a8:f0:6c:f9:47:89:e5:dc:61:d3:d8:ca:7a:
                    ef:c6:7b:e0:b7:61:04:0b:e8:ef:0c:15:03:ba:e6:
                    2b:ec:02:d4:78:01:f1:70:34:7b:91:47:cc:aa:4d:
                    0a:7d:ec:07:04:3f:d5:bb:c6:f1:e8:07:ac:d9:a5:
                    e7:e9:ed:7c:5b:96:29:88:0e:f6:32:9f:56:52:e1:
                    44:c2:a1:3c:93:b7:71:c1:69:8c:99:03:0b:62:f9:
                    9b:6c:ed:67:8c:29:a4:f1:89:f7:8e:fb:0e:bc:3d:
                    0e:c3:a7:a9:d6:80:1e:62:7b:23:53:a7:f4:c3:ec:
                    2c:2b:70:bc:4d:9b:30:72:bf:2c:e5:33:b7:38:24:
                    fb:ce:23:3a:d0:26:48:10:bb:a5:c1:fa:6e:26:5c:
                    cc:e8:fc:9a:7a:cf:ba:68:08:54:fa:d4:be:b9:89:
                    d5:92:eb:74:e9:10:10:76:9d:02:ed:fe:74:0d:28:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:43:9A:F0:FF:AB:39:93:BA:66:A2:9E:CC:13:D6:76:46:AA:C7:07
            X509v3 Authority Key Identifier:
                keyid:AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:96:55:1e:46:e5:d6:54:a5:16:47:95:2e:5e:2e:98:c7:f5:
         8c:ab:10:32:1c:0f:d9:8b:ae:0a:52:72:96:b5:2d:ad:8f:9a:
         c4:1b:bf:03:fe:bd:d6:17:33:06:8a:5a:c3:22:84:e4:46:2f:
         98:2b:4c:ed:99:33:90:d4:94:4b:eb:0f:ee:92:b6:09:a9:b5:
         27:27:32:8e:70:ec:b1:a9:93:dd:21:b6:ea:c1:68:2b:ab:dc:
         98:13:c5:45:ad:98:7d:8d:a3:a9:fd:1a:fd:87:0c:4a:12:33:
         ff:aa:e2:69:ee:5c:6d:83:c7:c4:f7:78:69:af:64:6d:bc:be:
         af:31:35:db:b1:d8:4c:49:1c:c6:f2:2f:26:ec:28:73:89:7d:
         02:9c:33:82:8e:c0:5a:08:c5:63:ad:d3:98:a1:65:f2:c0:66:
         a0:df:4c:80:8b:41:6c:6b:57:f2:33:32:ed:98:b8:70:2f:64:
         2c:ee:7f:64:22:6b:f5:7f:d8:7f:f3:b9:f9:28:83:71:14:45:
         43:b0:05:7f:9d:13:b1:90:2a:4d:f1:56:28:b4:85:5f:4c:97:
         04:79:cc:21:e5:77:26:cf:51:b6:22:92:2f:d2:f6:58:c7:ef:
         72:d6:7e:2c:ee:dc:9c:23:5c:33:cc:cd:31:78:53:49:91:cf:
         2f:5f:a2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:37 2025 by rpki-client