Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
File:                     h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft (raw, json)
Hash identifier:          RuJNB57vhz8QsYZTSyOT5+3N53s965PAUFT1Y6DpblM=
Subject key identifier:   7F:D6:CA:01:DB:3E:71:E5:BA:44:01:EC:57:AE:23:51:AB:C0:8A:21
Authority key identifier: 87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
Certificate issuer:       /CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Certificate serial:       0194BC3C55BA0EDC2322256D205E0E750E92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
Manifest number:          064A
Signing time:             Fri 31 Jan 2025 12:00:58 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:58 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:58 +0000
Files and hashes:         1: AO9S5FPNyFUFF8sl00iZG2uj63o.roa (hash: dj/tZS47oYr7HP4aHIaoRYk9wXqksDBdwIFty9clVxk=)
                          2: h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl (hash: 8AWxfoqGUTFfRW7MHGV+mocSTnQZw4ImVOrsAwDg5og=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:55:ba:0e:dc:23:22:25:6d:20:5e:0e:75:0e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
        Validity
            Not Before: Jan 31 12:00:58 2025 GMT
            Not After : Feb  1 12:00:58 2025 GMT
        Subject: CN=7fd6ca01db3e71e5ba4401ec57ae2351abc08a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:44:eb:b3:75:07:9c:20:98:8d:3b:21:37:2a:
                    8c:d9:ec:04:84:e5:30:48:46:87:a0:b8:6b:2f:9a:
                    c8:a4:ef:c3:7b:00:70:79:47:88:0b:bb:8a:23:a8:
                    a0:e2:6b:49:28:d0:ef:cb:2f:75:1d:1c:6a:cf:e8:
                    4f:88:7e:bc:5a:c3:e1:66:57:db:2a:1f:e9:70:8e:
                    04:ab:42:bd:5f:d1:98:18:2d:0e:d2:dd:8e:37:3e:
                    c6:9c:5d:b4:56:6e:e0:3c:99:0f:47:9d:29:d5:fa:
                    a2:80:8a:fd:ba:ea:41:80:b2:e4:01:73:4c:34:f8:
                    7c:e2:7a:ff:dc:29:2e:7a:d3:91:61:2e:03:02:79:
                    50:0b:06:30:75:d3:c3:00:78:08:6f:44:73:44:03:
                    8f:a6:fa:6f:a8:3a:f5:e8:8b:96:05:80:eb:75:41:
                    2a:31:d8:96:e3:96:70:21:22:e7:c5:48:c0:77:95:
                    9c:37:38:3c:1f:6e:a8:fe:7b:ee:dd:e1:74:51:ce:
                    eb:2c:16:a5:a8:17:90:d6:e0:b8:65:7b:e5:fd:06:
                    95:65:d1:4f:bf:d7:e3:35:6a:dc:78:9f:84:c9:3a:
                    da:0e:a1:1c:5c:e1:2f:a9:c8:19:05:57:e6:f2:5d:
                    83:53:e0:b0:ac:1f:f5:f7:dd:27:af:e1:f3:47:33:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D6:CA:01:DB:3E:71:E5:BA:44:01:EC:57:AE:23:51:AB:C0:8A:21
            X509v3 Authority Key Identifier:
                keyid:87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:36:73:6d:94:00:1a:a4:af:41:66:58:e0:f4:a8:bc:88:f8:
         52:e4:71:d0:d8:25:bf:94:1c:13:87:12:92:a9:c6:6c:12:fa:
         60:a6:99:ee:63:30:33:a6:9f:71:92:5e:1f:99:65:03:b9:7f:
         03:e5:53:80:67:1d:ea:4b:6a:78:81:0c:fd:8d:dc:26:fe:3d:
         1b:5c:54:a0:1d:70:5c:86:73:9e:d4:70:ea:ca:49:2f:8d:2d:
         d3:55:b3:cf:29:64:ee:4d:2f:06:4c:3b:ca:d4:2b:96:63:24:
         0e:61:ed:ec:69:dd:5b:f6:0d:fd:cc:3c:86:b6:8e:6b:44:94:
         f0:28:90:a3:14:16:c0:ab:0b:b2:7c:17:13:04:ff:27:f9:79:
         a1:43:d0:3f:a5:4f:6b:41:28:af:b8:cb:a3:cf:68:3d:4a:c2:
         8f:61:c2:c4:6b:43:4f:5c:04:ee:67:fc:fa:31:58:ee:bd:9f:
         4a:37:16:f2:7d:a7:b6:06:81:60:4e:ba:2f:bf:f6:35:74:2e:
         84:46:de:75:60:48:c4:7a:d5:7a:2b:94:78:1f:bb:41:c5:0a:
         70:b3:1e:30:89:39:b1:5e:bc:ad:74:b0:95:f8:4f:1c:e9:a6:
         f3:1a:44:fc:df:a8:59:98:8e:f2:1b:f9:13:40:2b:d5:74:fa:
         9f:d3:ea:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:16 2025 by rpki-client