Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
File:                     _Nq63VYraOxeFY4easdvfalucyM.mft (raw, json)
Hash identifier:          gYKWcJkNIHOzRoz6BGHlOqdQsAveh/oRw+Wkx62YkgU=
Subject key identifier:   79:8B:2A:69:12:F2:13:99:EE:BE:AC:BF:6E:DF:C9:56:46:2A:98:37
Authority key identifier: FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
Certificate issuer:       /CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Certificate serial:       0194BC3C04D2F79C61FF2B8A7EA1A1F84355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 12:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:37 +0000
Files and hashes:         1: _Nq63VYraOxeFY4easdvfalucyM.crl (hash: l7pG7f5BcDiMnky66KaCfq5nztAVCodHscVgXgi31mo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:04:d2:f7:9c:61:ff:2b:8a:7e:a1:a1:f8:43:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
        Validity
            Not Before: Jan 31 12:00:37 2025 GMT
            Not After : Feb  1 12:00:37 2025 GMT
        Subject: CN=798b2a6912f21399eebeacbf6edfc956462a9837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:95:a7:c0:ab:f5:f4:b0:ca:d5:c4:c0:02:0b:
                    e8:aa:3e:71:a7:e4:a4:32:14:f3:8e:0f:62:e4:19:
                    96:f0:2b:76:e6:5f:f3:73:f1:80:56:bc:a5:67:28:
                    34:14:f2:92:1b:23:10:f6:02:ff:a6:87:6d:a4:69:
                    4f:cd:bf:73:bb:a0:52:f1:23:90:26:44:ba:33:47:
                    31:14:02:ea:9d:39:1e:91:64:41:21:66:9e:42:a0:
                    6f:d5:66:0f:fa:34:f6:10:c5:63:6b:13:7c:d6:ed:
                    99:08:e7:ea:d4:03:84:34:29:f1:90:0b:b2:22:eb:
                    55:50:7f:e2:01:68:77:26:ba:a8:97:8a:a0:63:61:
                    ed:5e:c0:3a:d5:4b:31:96:ee:e7:87:f2:35:98:f9:
                    2e:9a:10:c8:56:dd:fe:bf:ee:62:44:c2:ee:43:7f:
                    ef:4b:dc:22:c8:59:e5:75:87:72:40:89:24:22:00:
                    e9:1d:f5:af:92:52:28:93:ca:68:06:4a:56:56:21:
                    3f:bb:f7:23:44:ad:af:68:ab:c7:48:a3:9a:ff:ea:
                    b0:94:19:b2:43:d4:ad:93:c1:32:bc:1f:86:d4:7c:
                    1e:cd:ed:6a:12:0b:16:0d:5b:b9:c1:ee:97:e7:d6:
                    32:16:f0:fd:bc:19:fa:9b:3a:15:95:b8:1f:06:a7:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8B:2A:69:12:F2:13:99:EE:BE:AC:BF:6E:DF:C9:56:46:2A:98:37
            X509v3 Authority Key Identifier:
                keyid:FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:50:c0:43:59:96:b1:a4:15:49:d3:ef:32:70:2f:e4:6e:74:
         75:e9:e3:9c:cb:6d:b5:f5:0c:b4:9e:01:fb:0c:d5:0e:9a:bb:
         1f:4d:68:1f:11:7c:59:1a:9f:a0:ee:69:72:0e:50:06:72:da:
         36:cc:76:53:14:4a:cd:bb:cb:72:26:03:43:a4:a1:f4:f7:6f:
         10:c7:41:ce:52:84:2a:e6:70:af:33:54:e0:75:2f:a4:e9:8c:
         46:6d:2c:c0:e8:b2:59:2a:79:4c:9a:60:f5:14:74:35:e6:97:
         da:9d:54:f9:f0:ab:94:f2:5a:c7:e4:2d:5f:4c:00:29:aa:b5:
         b8:2f:3f:5f:cd:92:ad:17:db:a1:2b:8c:16:7b:04:d1:08:ae:
         51:37:a1:77:15:15:e7:86:9b:b9:01:f6:cb:1a:7b:63:14:9b:
         29:2b:6b:d2:f9:82:96:ab:7b:a9:e8:07:5c:f1:db:3e:c9:f4:
         0f:94:c8:8c:cd:37:e2:9e:12:ba:7f:a4:2c:92:5a:7d:16:29:
         57:74:07:91:03:c7:c1:9e:d0:1a:3e:d6:d8:84:0f:33:86:66:
         39:ec:69:02:9c:02:51:f0:11:2e:82:0f:4c:52:e6:f3:46:f2:
         d0:73:79:a6:31:20:d8:35:71:b0:09:3f:0c:e7:2e:e5:25:cc:
         84:4c:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:57:57 2025 by rpki-client