Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
File:                     fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json)
Hash identifier:          nG2Q+CRSr0K0rt9y+Iqi3FEsfyr9b4ravwCyK41Z6fo=
Subject key identifier:   83:54:1E:47:74:2A:45:F4:6D:D0:97:3B:E4:45:8D:45:3F:FB:31:38
Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
Certificate issuer:       /CN=7eaf5714c5056cbe269d12fa3099378a95728424
Certificate serial:       0194BD17E9FBFA59489120C0459FB42D7922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
Manifest number:          1180
Signing time:             Fri 31 Jan 2025 16:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:48 +0000
Files and hashes:         1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: VNShQOyUoiBAYhtM4HayMMTtJaVxP607wimOyxXYMbg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:e9:fb:fa:59:48:91:20:c0:45:9f:b4:2d:79:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424
        Validity
            Not Before: Jan 31 16:00:48 2025 GMT
            Not After : Feb  1 16:00:48 2025 GMT
        Subject: CN=83541e47742a45f46dd0973be4458d453ffb3138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:52:cc:22:5c:3b:4c:c0:d6:2b:01:28:d3:cd:
                    e1:65:03:dd:62:dd:93:22:10:17:8a:c8:9d:5c:22:
                    e8:26:10:af:d4:51:60:75:c6:2b:9e:b5:f9:6b:d0:
                    7f:ff:27:ed:5e:f3:a8:1b:48:a2:6a:52:11:36:5a:
                    ca:ce:34:7f:d4:2f:08:0b:18:ca:30:24:74:e4:21:
                    93:59:c3:45:31:67:64:cd:9a:9f:26:9c:4b:e9:7b:
                    46:a0:8b:ea:6d:2d:84:8e:a9:e8:21:20:b3:d5:11:
                    72:3a:85:c0:a9:51:59:77:d2:4c:23:af:df:e0:7f:
                    a7:1c:f1:18:be:d8:93:c5:65:94:9f:85:9d:de:fc:
                    c0:56:b1:9b:1a:f9:96:84:56:f0:03:69:fe:9e:88:
                    aa:b8:0f:cf:3b:c4:65:fb:bf:d9:c0:6e:1f:43:d2:
                    f6:73:0f:98:fc:c2:df:8c:36:d4:0b:2e:5c:ef:12:
                    61:e0:63:3e:d7:f3:16:f2:61:25:37:a0:49:30:56:
                    b6:b4:26:8d:9e:ac:3a:81:fa:4c:50:af:1e:a2:9f:
                    40:bf:df:58:2f:76:58:67:fc:22:d2:96:44:5c:29:
                    81:7d:fe:e8:d8:2f:8c:ab:f5:e5:09:f1:45:b6:e7:
                    8a:3d:0b:9d:f2:6e:2b:de:79:a2:69:90:b0:84:54:
                    f6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:54:1E:47:74:2A:45:F4:6D:D0:97:3B:E4:45:8D:45:3F:FB:31:38
            X509v3 Authority Key Identifier:
                keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:82:b0:f9:1f:e2:fd:cb:c5:37:1d:02:ae:04:4d:dc:72:f9:
         6c:e6:11:d4:e2:ab:73:e8:5c:bf:53:b4:8a:22:a3:47:fb:f9:
         7b:c2:dc:cb:a0:41:5a:81:d0:ce:5f:08:77:ab:b9:df:af:58:
         9b:63:5a:bd:61:8e:00:f5:92:c5:76:19:05:64:49:ab:e1:47:
         f4:3e:f0:e9:ad:7f:15:30:0c:e8:df:5f:e6:80:7a:3f:ee:78:
         c7:d7:b2:24:cd:34:7f:62:84:05:5d:27:34:25:25:df:32:c6:
         86:62:6c:eb:f0:78:22:40:ff:cb:f3:91:98:4f:88:fb:90:7b:
         47:29:eb:5e:ad:b3:9f:09:46:66:06:f5:e6:4d:73:2c:0d:84:
         28:de:35:ae:f3:57:b5:11:cc:f2:f0:6c:d6:66:23:f2:d1:e7:
         02:55:b8:71:ac:f6:7d:d4:80:7d:78:47:45:ef:7e:21:9d:0b:
         75:74:a6:40:f9:49:24:7c:ad:7c:bf:1a:8c:01:8d:a7:f6:f9:
         69:98:15:12:62:60:bd:d7:78:1f:34:54:6a:3d:7f:81:f5:9a:
         26:22:05:5e:0d:64:a1:36:5b:da:ed:cc:e6:bc:c3:48:29:d3:
         2f:ca:75:d3:76:9d:c9:ce:f6:ac:b5:4d:fd:66:32:33:22:8c:
         50:8e:39:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:00 2025 by rpki-client