Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File:                     FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier:          FeeiOf6aGEscy2P0uajKtAjpKBc6LAyW4q+UOqKViLQ=
Subject key identifier:   D7:DA:2B:8F:DA:BB:C1:5E:B5:59:DA:C8:C6:E2:C8:3F:F2:4E:DE:9D
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer:       /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial:       0194BCAA28549D0658F92399FDC8CD3C3B75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number:          0209
Signing time:             Fri 31 Jan 2025 14:00:55 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:55 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:55 +0000
Files and hashes:         1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: 6KZkoJK10YufUkdm1AMaHrktarEyXyYsPtwcSXX69Qk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:28:54:9d:06:58:f9:23:99:fd:c8:cd:3c:3b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
        Validity
            Not Before: Jan 31 14:00:55 2025 GMT
            Not After : Feb  1 14:00:55 2025 GMT
        Subject: CN=d7da2b8fdabbc15eb559dac8c6e2c83ff24ede9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:c3:f8:5a:73:70:1a:e3:9b:d8:c8:b1:5f:
                    a9:88:7d:40:3d:ce:70:de:77:84:9f:73:bc:21:10:
                    26:88:1b:21:8c:47:30:f9:03:d4:38:77:bd:f9:1f:
                    68:6d:c1:df:11:3e:10:85:49:75:25:cc:65:65:21:
                    93:c9:27:cb:a0:32:e1:72:4a:f7:76:93:f5:2b:84:
                    74:fb:89:77:6b:7a:0a:1c:c5:13:58:43:a3:63:01:
                    35:a0:48:29:5f:9f:a4:39:42:a9:4d:07:d2:47:38:
                    8b:2f:df:59:ba:1f:9c:36:8c:20:6a:20:2a:d7:f8:
                    be:8d:58:e8:78:c4:ed:7c:7c:9a:4c:6b:55:ab:2d:
                    b7:8c:1b:79:97:90:c8:63:7f:19:40:fb:f8:ea:a4:
                    7a:33:df:91:59:f2:12:0b:05:4e:2f:87:09:93:92:
                    04:fb:9e:4c:b8:c1:5c:11:44:63:c2:84:e9:4c:45:
                    0a:2c:70:15:e5:f1:b5:a4:6c:df:ed:bb:6d:11:98:
                    6e:ad:76:0f:f4:48:1d:5a:0c:ee:7e:52:08:ce:e8:
                    1c:63:ca:00:fb:3c:90:0c:3f:a6:db:b3:db:84:ce:
                    ae:72:ee:6b:cc:0c:60:9a:20:23:dd:8f:7f:7f:0c:
                    67:70:34:62:3e:fa:03:40:2d:40:b8:b7:da:ea:06:
                    66:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DA:2B:8F:DA:BB:C1:5E:B5:59:DA:C8:C6:E2:C8:3F:F2:4E:DE:9D
            X509v3 Authority Key Identifier:
                keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ad:8e:77:3f:2a:ac:71:da:f3:a3:cd:43:e5:72:49:8e:32:
         2e:93:60:4a:52:25:fa:3c:04:89:9a:38:15:3d:52:5f:56:ca:
         91:e5:39:ae:91:37:07:ce:aa:be:22:bc:a4:67:b5:4a:9a:b1:
         5b:b5:16:a5:42:b1:89:71:9c:42:25:bf:32:a8:08:61:2f:e5:
         75:0c:98:18:55:71:55:ab:44:cc:c0:f2:34:ec:ae:d4:bf:c2:
         73:72:12:a3:3d:3a:9d:01:32:f8:a0:e5:d0:b3:89:73:aa:c8:
         42:60:e8:de:9d:35:75:29:80:7d:1a:8e:43:2e:ce:9a:99:d4:
         ca:69:49:7a:4e:a7:54:d3:fd:97:01:7a:5a:f9:23:79:ff:75:
         92:aa:c9:88:b3:02:b8:e3:c9:7e:89:48:a1:85:ba:b3:cb:f1:
         be:cf:59:17:f3:01:38:c0:66:d0:65:f3:f2:de:00:7c:58:ab:
         8f:06:ce:30:d3:c8:5f:83:5f:9d:95:10:97:81:77:eb:d6:65:
         a7:9b:8e:97:76:75:bc:0d:b5:64:47:e1:01:fa:25:13:a0:d6:
         4c:6d:ec:b6:61:93:c7:c1:37:53:5b:bb:0d:36:a8:03:69:d0:
         1a:66:11:8a:e6:bc:89:10:8d:70:1e:e5:d4:32:e3:aa:48:f5:
         cd:a9:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:05 2025 by rpki-client