Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
File:                     j3phc572fsR6X9EOVvx6NNy3PHA.mft (raw, json)
Hash identifier:          p32Mdk1VITsAfPNucNcLlH3FZ1x/HnVvuK/i7jM8Z7w=
Subject key identifier:   93:C4:74:8B:43:50:89:95:EB:91:F4:71:ED:B1:1B:C5:B1:33:CD:77
Authority key identifier: 8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
Certificate issuer:       /CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Certificate serial:       0194BC72A3E87654F3C3829553B955F7F388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
Manifest number:          0C7D
Signing time:             Fri 31 Jan 2025 13:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:17 +0000
Files and hashes:         1: j3phc572fsR6X9EOVvx6NNy3PHA.crl (hash: yRF14hFrNALJdPkA9ECRUumKI+DVI5Ejx2RC5jGsZmE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:a3:e8:76:54:f3:c3:82:95:53:b9:55:f7:f3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
        Validity
            Not Before: Jan 31 13:00:17 2025 GMT
            Not After : Feb  1 13:00:17 2025 GMT
        Subject: CN=93c4748b43508995eb91f471edb11bc5b133cd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:c2:ba:ed:0f:55:56:1c:40:b7:ed:cf:a6:
                    12:d1:2a:96:fd:55:f9:e0:43:03:42:3b:6a:0e:21:
                    02:53:d8:bd:32:b5:9f:ee:51:fd:d3:d4:81:37:3c:
                    00:74:f1:12:d4:e0:d2:19:23:bd:be:7b:5f:e9:bb:
                    b2:b5:20:d4:57:14:02:8a:dc:ac:3d:48:ad:f0:bb:
                    e8:4b:4b:2f:3b:b7:da:73:0d:fd:b7:6b:6e:bb:cc:
                    23:6d:6b:57:ee:4a:48:57:b4:ff:97:99:30:ad:74:
                    f8:fb:74:c1:07:aa:6e:cf:85:bf:c8:47:17:a6:87:
                    08:eb:4b:dc:a6:41:be:64:57:e6:08:4d:c3:19:33:
                    bb:cb:f6:a0:d8:1f:58:2e:f5:e9:ca:09:01:eb:e6:
                    d9:56:43:d8:24:79:49:64:49:13:75:5a:35:cd:5e:
                    b8:e1:53:1e:34:00:13:e5:e8:88:82:7f:d1:45:70:
                    a1:2e:88:1b:63:46:fb:ae:5c:f5:c0:28:51:67:75:
                    7f:ae:ee:03:dc:af:97:9b:b5:00:9a:80:d7:39:1e:
                    d0:8e:19:39:d2:6d:a0:09:c3:19:a3:33:59:bf:de:
                    65:3c:91:66:52:5f:a2:82:64:cd:7b:6f:30:93:cf:
                    aa:be:19:32:12:4a:f8:fe:fb:b0:ef:8e:04:08:2a:
                    90:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C4:74:8B:43:50:89:95:EB:91:F4:71:ED:B1:1B:C5:B1:33:CD:77
            X509v3 Authority Key Identifier:
                keyid:8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:08:72:11:0e:7c:1a:3b:a2:9f:f4:9a:7e:5a:bf:94:bc:6f:
         f3:5f:fe:bb:25:2c:8c:cc:32:63:52:e3:a6:7d:46:2d:b4:21:
         c9:f0:7b:78:91:16:53:5a:23:8e:2c:e1:08:6e:32:05:c9:dd:
         58:d4:13:ed:35:0c:f4:db:0b:64:6c:fe:05:07:0b:c6:5e:7f:
         87:6e:37:02:3b:59:b1:37:5b:23:9c:09:e7:5b:ac:bd:9f:48:
         47:0e:2d:8d:48:9c:24:07:b4:70:34:2d:8b:78:3e:a2:4b:3b:
         55:d0:97:4a:69:af:c5:d4:ae:57:24:bd:1f:ec:59:28:1a:56:
         25:63:b2:75:a5:4b:fe:ba:a3:95:a9:3d:f5:93:63:da:76:fe:
         b1:d9:a9:94:f8:86:9f:cb:87:80:1c:e4:d6:2a:99:08:60:3f:
         9d:f8:bc:47:ae:86:e2:0e:b9:ae:37:0d:21:9e:96:1f:68:e7:
         7b:09:22:a7:50:ac:79:d0:22:5d:b1:41:f1:eb:8c:86:95:2e:
         eb:75:77:e0:67:66:f1:9f:b0:42:92:4a:18:8b:c9:48:8c:76:
         0d:fd:8d:a4:6e:c0:e4:8e:b7:23:f7:39:11:a2:b3:f8:36:88:
         4d:8d:58:b8:d0:5e:d4:fa:1b:41:1b:38:10:bb:08:ec:02:eb:
         29:b9:8f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:40 2025 by rpki-client