Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
File:                     fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json)
Hash identifier:          f7NBD//PqHaz4P7OBP/4h6KUjX4L2YL9OjB9jHKIMUY=
Subject key identifier:   D4:60:BD:A0:F1:81:16:25:71:CA:21:F0:17:54:D3:67:B7:E2:BF:02
Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
Certificate issuer:       /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Certificate serial:       0194BD4E44A81C35A78E1283EB83F9971584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
Manifest number:          07
Signing time:             Fri 31 Jan 2025 17:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:10 +0000
Files and hashes:         1: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: V1lXgSbC74/cQeb/AwXOLJmMHKqcfDrVggF9yOlPjc0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:44:a8:1c:35:a7:8e:12:83:eb:83:f9:97:15:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
        Validity
            Not Before: Jan 31 17:00:10 2025 GMT
            Not After : Feb  1 17:00:10 2025 GMT
        Subject: CN=d460bda0f181162571ca21f01754d367b7e2bf02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:93:f7:2b:74:bf:8a:8f:50:c5:c6:7f:f6:
                    72:c0:6d:3a:45:83:a7:9f:10:30:43:de:d9:c0:0d:
                    ac:bb:e3:3c:2a:23:b9:6f:07:06:60:b2:5e:74:f8:
                    51:c7:a6:08:b4:26:68:af:3a:3a:37:b3:18:89:53:
                    46:db:41:c7:15:dc:13:76:35:9b:84:24:5e:53:40:
                    f7:84:15:66:78:69:f4:2d:44:66:a7:02:0f:bb:88:
                    d3:7b:c4:da:32:1a:f5:00:88:48:32:12:51:22:8d:
                    38:44:74:a8:9e:12:33:8e:d5:f2:b4:5f:c8:c1:da:
                    ba:eb:26:af:56:58:f1:58:b7:f9:55:78:be:8d:da:
                    38:ed:2e:e3:c8:6e:d0:b9:dd:01:81:11:0b:2a:91:
                    63:94:c8:9f:9f:bf:68:24:62:f2:be:74:9d:e1:f1:
                    38:bf:91:ea:cf:41:e6:ac:64:b8:94:a6:87:03:e2:
                    ba:b3:92:13:d9:bc:96:86:46:54:dc:b3:be:da:96:
                    1e:89:ef:c6:11:36:60:74:dd:25:a4:eb:6e:c2:73:
                    2b:78:38:ea:16:3d:e8:d1:8f:a8:a4:01:ba:61:b6:
                    8b:fa:16:43:ea:25:8c:ac:18:28:0b:42:17:9f:c3:
                    fd:84:90:2c:c3:b9:93:26:bb:0b:94:c4:35:42:c6:
                    46:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:60:BD:A0:F1:81:16:25:71:CA:21:F0:17:54:D3:67:B7:E2:BF:02
            X509v3 Authority Key Identifier:
                keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1e:6c:f6:e2:a2:95:46:17:8a:92:b3:f8:f9:88:3a:c0:f3:
         47:c4:23:2c:19:b6:86:9b:e2:86:77:84:c1:3f:73:21:62:c1:
         81:13:01:06:36:00:f4:f1:18:70:4f:87:ba:64:fe:f6:9f:46:
         5c:6a:db:d6:7d:d5:2c:57:c4:87:fb:ed:c9:39:c9:52:d0:cf:
         19:78:cb:64:92:4b:6e:18:42:c9:0a:90:85:e7:4a:b1:6f:a3:
         07:8c:6d:b8:15:c3:dc:31:65:2e:3d:d2:99:4e:6c:8f:ff:eb:
         b1:91:46:79:22:91:38:67:4e:71:83:b8:27:a7:2d:69:81:3e:
         de:78:a6:b8:b1:a4:75:00:01:4b:1b:49:af:c4:b4:24:91:44:
         f5:b1:32:49:f5:de:d0:1b:36:dc:96:39:47:b6:a8:a7:22:b9:
         f1:2a:16:79:68:af:20:8c:e4:ff:cb:e8:be:72:d2:0f:52:86:
         fd:0b:20:ee:3d:c5:b7:58:34:ea:41:a4:8f:7f:af:20:2d:2f:
         ff:34:ec:70:60:6d:cb:2c:64:6d:ac:f1:b7:09:be:3b:fd:a8:
         47:f2:25:e2:f4:56:aa:30:5c:a1:fa:70:82:2e:be:69:8b:db:
         59:96:1b:cb:14:fb:64:67:7d:b7:35:20:fd:6b:a6:54:09:80:
         a4:99:a8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:24:33 2025 by rpki-client