Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
File:                     x90pfQiY__3ijXaWeVvb1SI_imY.mft (raw, json)
Hash identifier:          T4hmvvzQ7fpvaYUcuqC71PPmmaCAckfX3r5AIqaF30k=
Subject key identifier:   2F:04:0A:9E:0D:C4:C9:77:FD:73:6E:6F:68:6F:E5:9B:2F:26:3A:9B
Authority key identifier: C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
Certificate issuer:       /CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Certificate serial:       0194BBCE2F254D7FBE5F585BEE92B9CE8CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
Manifest number:          0574
Signing time:             Fri 31 Jan 2025 10:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:39 +0000
Files and hashes:         1: PxQsDU4dJfS8-Hbb6hEQ20lM3hY.roa (hash: Dqeit+iOR0VNRG8VfbYdPMEB+sCjr1lwniFYS+pVWgk=)
                          2: x90pfQiY__3ijXaWeVvb1SI_imY.crl (hash: IvWV+sOZwJIsgJQmP1HjqVgKJWVkMK6pCIhQ0lCEK6o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:2f:25:4d:7f:be:5f:58:5b:ee:92:b9:ce:8c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
        Validity
            Not Before: Jan 31 10:00:39 2025 GMT
            Not After : Feb  1 10:00:39 2025 GMT
        Subject: CN=2f040a9e0dc4c977fd736e6f686fe59b2f263a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ec:93:c6:8a:43:fe:af:31:1c:91:b2:64:49:
                    45:d6:f4:18:96:ce:1d:e0:98:0b:ee:98:91:df:3b:
                    be:04:78:9b:0a:ba:dc:1e:0f:19:85:99:bc:71:c3:
                    3f:03:43:1c:1d:c0:76:05:66:fb:14:6c:10:a5:a2:
                    2f:b7:b1:9a:2b:66:a3:1e:09:cb:f2:2a:75:4a:8e:
                    02:78:4c:cf:47:72:95:20:24:59:1f:a1:ed:6d:c0:
                    75:8c:14:49:f3:da:1a:96:5d:16:c1:83:8b:de:2f:
                    79:64:36:8d:79:f9:2a:e4:5a:68:a5:04:93:40:d2:
                    c4:40:b2:63:1f:3f:04:38:12:a9:4e:4f:e9:6c:47:
                    cd:f8:a2:fd:53:78:64:ce:ca:a2:0d:95:3f:af:ec:
                    b2:21:46:ae:f2:9c:8d:8b:03:98:eb:13:5d:dd:8d:
                    c3:d5:34:ab:ee:d6:ac:e3:1e:b3:7e:c2:0d:b6:6d:
                    f8:79:b7:c6:b2:07:a7:28:3f:e6:92:f5:24:89:e6:
                    48:94:ef:f9:72:fa:30:2f:b6:02:eb:1c:c4:e4:99:
                    9e:4f:e4:be:82:d4:2d:f6:f1:70:fd:aa:a9:c9:04:
                    d8:99:3c:04:6d:eb:86:96:05:cd:57:01:91:4d:d1:
                    f1:dc:a5:55:1b:2d:a1:da:ce:d6:1a:96:8e:e4:6d:
                    12:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:04:0A:9E:0D:C4:C9:77:FD:73:6E:6F:68:6F:E5:9B:2F:26:3A:9B
            X509v3 Authority Key Identifier:
                keyid:C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3e:b9:7d:90:3f:7d:e7:63:0f:40:da:ed:d5:0d:52:64:36:
         ae:98:b2:47:b4:f8:fe:63:57:bd:95:11:2b:03:0d:c5:41:0c:
         85:08:9d:92:cd:ba:67:7e:11:66:9d:4e:c4:ee:9d:60:e3:e3:
         1b:18:05:3b:98:d6:fe:3a:db:5f:98:25:b6:9a:56:e3:70:a0:
         2c:b0:40:bb:9a:fe:ef:aa:b2:74:2c:76:37:0d:67:f7:41:b9:
         70:13:f9:a9:8c:4f:4e:48:92:5c:94:1f:61:73:16:55:cc:23:
         55:fe:fe:30:ee:4e:bf:37:8c:a2:62:3b:60:20:70:9c:d8:11:
         b6:15:c9:4b:0d:e1:ce:31:41:14:36:b9:a8:0d:d5:54:72:3a:
         d5:a2:73:0a:7a:b2:3b:73:b2:dc:55:43:6c:a7:64:ab:ac:c3:
         90:83:94:cf:1c:40:08:75:40:1a:2e:64:97:b4:18:06:7b:8c:
         61:0e:6b:42:21:c7:b4:f7:29:45:44:00:65:62:d0:c3:dc:70:
         52:f7:65:73:42:5f:f7:69:9b:66:53:d5:66:c4:56:c8:12:90:
         ff:3b:67:75:57:97:43:7e:82:b4:9e:c8:88:88:6c:a3:7a:7d:
         64:7c:e2:a1:c5:83:12:9f:fa:46:c6:2b:21:d9:3a:ff:b5:78:
         4d:63:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:50 2025 by rpki-client