Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File:                     fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier:          JRgYrw0fp/yJ3Nv7LctShlh+6YPa/6e0SS8OQ/3jZB8=
Subject key identifier:   BD:7F:8D:71:BD:AA:6A:C8:B7:B0:C8:8A:29:FA:47:F2:08:43:4C:37
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer:       /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial:       0194BD4EB683D926D8E4B3326A317782F1D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number:          0111
Signing time:             Fri 31 Jan 2025 17:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:39 +0000
Files and hashes:         1: DPq81yxdoD2U1ZNGuCuMUOScd8s.roa (hash: gHFyGp/GTt9qIfJMs4LIdJd6bOpZsDzt48MpjJHU1l4=)
                          2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: iD3dNk3lgRLgqz4jeIuz85/2+x3V1IrmkE54mWwxIRk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:b6:83:d9:26:d8:e4:b3:32:6a:31:77:82:f1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
        Validity
            Not Before: Jan 31 17:00:39 2025 GMT
            Not After : Feb  1 17:00:39 2025 GMT
        Subject: CN=bd7f8d71bdaa6ac8b7b0c88a29fa47f208434c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:b6:1d:b8:a0:73:78:8a:86:c6:3c:d5:a5:
                    7e:64:6f:03:31:1f:25:72:26:90:84:bc:25:8d:52:
                    52:80:9b:15:1d:c7:2d:58:a1:0f:08:3b:88:5a:f8:
                    84:36:69:88:18:51:7f:f0:57:a8:8a:5b:21:8b:45:
                    f0:a7:04:49:59:df:11:9d:68:47:e4:7b:85:ba:d7:
                    07:37:45:4c:31:34:33:03:30:5d:be:b9:8d:95:b9:
                    90:72:d6:7a:bb:1d:86:91:52:95:5b:31:64:2a:91:
                    22:c5:6d:2d:7a:cd:da:2c:c7:1f:7d:71:6a:3b:b6:
                    43:45:f8:b7:77:28:58:a5:11:fc:fc:25:7f:74:ed:
                    ec:c3:83:66:ff:37:0d:13:e6:85:1d:4e:5a:bb:95:
                    8f:94:1e:85:78:d8:28:70:07:af:0b:a2:f4:38:67:
                    fb:35:7c:33:65:f8:fc:3b:f0:27:74:69:24:32:63:
                    30:3e:e2:ad:0c:cb:b8:a7:07:cf:06:2c:3c:98:8f:
                    40:86:18:a2:92:6e:b9:6e:ad:77:aa:90:0c:9f:6d:
                    09:e9:02:ff:28:3e:db:1f:90:53:7a:94:1a:c0:a3:
                    27:5c:98:b6:76:be:f2:65:c7:6d:5c:d5:07:7d:43:
                    a2:01:1f:af:20:eb:64:e8:39:66:6f:14:ec:60:b8:
                    52:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7F:8D:71:BD:AA:6A:C8:B7:B0:C8:8A:29:FA:47:F2:08:43:4C:37
            X509v3 Authority Key Identifier:
                keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:40:88:6f:3f:8f:6e:16:58:f1:c3:43:26:dd:f7:e6:5e:bb:
         c9:9c:b4:a2:3c:e9:7b:18:0e:f7:4c:e7:d7:c0:e1:97:a1:89:
         db:f4:ac:ff:d2:c6:55:9c:9a:7b:3d:b7:b9:88:54:1f:4a:22:
         c0:64:75:a5:3f:ef:08:ab:6a:04:d9:ef:0b:ce:e4:aa:f2:22:
         89:82:49:31:75:8d:ab:35:45:07:b6:80:74:57:d4:4e:09:a7:
         3c:24:c3:52:9c:18:9b:2e:da:b2:73:df:ca:67:1b:b9:c2:94:
         32:9b:20:66:ac:75:ab:fc:e1:2b:da:28:98:8b:c9:5c:9e:e6:
         dd:dc:2f:5f:e0:58:dd:5e:fd:82:13:69:0c:be:6e:18:94:43:
         26:30:fe:75:32:d0:78:86:db:69:71:6f:82:62:f7:9d:6f:8b:
         98:53:02:35:d2:06:4f:15:2f:77:bc:c0:fa:8e:a1:5e:6e:9f:
         60:00:42:fc:50:af:2d:c6:08:34:a9:19:7d:4b:90:4d:1d:a6:
         59:2d:f9:3f:18:78:ae:66:38:5f:32:cf:cb:cd:8a:25:b7:90:
         21:59:ae:1d:a5:24:a0:17:ed:1b:26:52:cb:b0:5f:ab:01:4a:
         a7:1b:de:ae:59:c4:d3:4c:21:1e:62:48:11:e2:c2:b8:9f:8a:
         8b:c6:37:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:24 2025 by rpki-client