Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
File:                     B7egwbq9Yh6CINDXd4d6hEtBPBA.mft (raw, json)
Hash identifier:          BaKjAOZe/kPG3T/w+dtbkxywGAsSPDPHgT2MQYHOMoA=
Subject key identifier:   2A:1E:E9:70:7B:16:06:BC:D6:3F:AF:AE:CF:C8:74:02:7A:FC:C3:73
Authority key identifier: 07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
Certificate issuer:       /CN=07b7a0c1babd621e8220d0d777877a844b413c10
Certificate serial:       0194BC3C29C9A0961D2A00892523A1CA9B25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 12:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:46 +0000
Files and hashes:         1: B7egwbq9Yh6CINDXd4d6hEtBPBA.crl (hash: sPhzRsptwPFoo3FzWcZcxmG16CKHmYNN2n2kQiju5DU=)
                          2: u07_9pXlmAHNvZNIHp40fo4J9fA.roa (hash: 204TNJbYlIMXBCvMgIFRQa54vmawR7NJf6FejBBRQA4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:29:c9:a0:96:1d:2a:00:89:25:23:a1:ca:9b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b7a0c1babd621e8220d0d777877a844b413c10
        Validity
            Not Before: Jan 31 12:00:46 2025 GMT
            Not After : Feb  1 12:00:46 2025 GMT
        Subject: CN=2a1ee9707b1606bcd63fafaecfc874027afcc373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:4d:f3:02:5e:1d:90:35:6f:57:15:ac:36:
                    f1:ed:7c:12:c5:27:4a:b6:c1:9c:fc:16:76:f9:b8:
                    cd:c0:ae:8a:86:13:b9:bb:d6:e0:f5:42:e1:a5:6f:
                    96:ad:af:94:91:92:f5:e6:7d:fa:e2:27:aa:d7:6b:
                    20:fb:9a:27:15:f5:38:65:cf:7d:b6:17:1c:ab:69:
                    fd:e2:1e:f8:0e:c4:62:7a:68:6a:96:16:ca:53:4c:
                    28:dc:fe:ea:fc:38:55:69:cc:fa:ea:5b:4a:97:ec:
                    b6:af:f4:9c:ee:09:6a:40:21:64:2d:14:d1:b7:35:
                    b0:b4:4a:49:f0:13:02:29:03:78:c0:60:67:d1:16:
                    a8:43:94:93:d2:5d:4c:6e:20:12:71:0e:c1:47:9c:
                    75:c5:0e:bf:32:39:28:5e:77:f9:07:41:ef:84:2d:
                    30:a9:ac:f9:e4:4d:72:bf:05:e7:e3:10:dc:28:64:
                    11:99:7e:42:7f:9e:4e:1e:74:d6:58:fc:58:3d:12:
                    01:6b:c0:59:af:60:0a:4e:03:95:cb:5d:69:df:c6:
                    d9:6c:06:30:c4:c6:4c:1b:e3:52:f2:d4:75:9f:39:
                    1e:b2:75:4a:53:25:fc:3a:50:76:46:62:5f:7a:59:
                    98:62:f4:53:94:a3:b4:1f:02:5a:36:f0:4d:5a:a0:
                    6f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1E:E9:70:7B:16:06:BC:D6:3F:AF:AE:CF:C8:74:02:7A:FC:C3:73
            X509v3 Authority Key Identifier:
                keyid:07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:58:b3:ca:8a:ca:d1:17:f5:c9:45:8b:7a:c8:94:02:96:17:
         09:53:44:07:ff:84:3c:c2:4d:a2:e0:25:03:3d:59:06:63:45:
         c0:69:9d:78:20:a2:1c:9f:87:97:5b:3d:a4:31:36:e3:66:65:
         0c:d9:bd:0a:7b:78:51:a9:95:74:79:3e:b9:68:0f:e6:33:e1:
         36:2b:27:ed:17:da:13:1f:af:bd:15:f8:d4:5b:43:4b:06:9e:
         5a:f2:89:30:57:5e:f8:b7:57:ca:7e:43:06:bf:1e:e5:b6:b2:
         9e:60:b5:ac:ab:36:c4:2d:2b:13:fb:35:31:05:56:d5:9e:a3:
         3c:8f:f0:5e:01:f8:66:77:ed:eb:4c:84:c6:95:0e:78:56:de:
         09:5b:7c:0b:81:52:d1:2a:65:82:23:7e:66:96:6a:c5:94:b3:
         1e:12:7d:c1:72:43:d6:91:67:0c:99:fa:59:7d:c2:91:7d:0e:
         22:ed:0b:ef:86:19:84:7a:9f:bf:09:43:88:a6:ba:93:f0:9c:
         a6:7e:40:84:d0:b1:d8:bc:6d:cc:04:85:bc:23:82:15:64:5a:
         ee:d5:12:13:6e:63:d6:77:c0:15:f3:d3:2a:8d:5c:07:5b:80:
         39:ff:61:be:15:aa:b1:bd:87:1a:85:c8:87:3c:51:8c:10:96:
         9e:42:50:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:21 2025 by rpki-client