Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
File:                     fEuRfckEagZWeK4N9NPjA2nFnGk.mft (raw, json)
Hash identifier:          sQCwi3Oc90QdLYRJuFQzr7fELg/xkj2cbCUPLaHzl9g=
Subject key identifier:   12:ED:DB:D5:83:F4:4A:CB:C4:41:27:A8:BE:87:15:F0:99:5C:F0:F3
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Certificate issuer:       /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial:       0194BD4E47D91CFD8DD65E122424B285E80E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 17:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:11 +0000
Files and hashes:         1: HHlEIHLaS3GMguRjiZVeXZtaB1U.roa (hash: YlDlqGcFKkVbm+bI6++WiC8vTEcJ4i7q+bRlRvHQvDM=)
                          2: JFfXWjIJHVSFeGbySM8n0cwBw74.roa (hash: kgkONWoOOrXSbcj6bdCOVH5+Q3j9I/JtMm/NZI6wPhU=)
                          3: YWh_o51jvYOy_7yJxKWIzC6AjVw.roa (hash: 5h6ADSbcLhyyb1o530CRr7FXSLev1xEONn8X3G0ic1Y=)
                          4: f0wCPyNuTeQIvdOaxmoM9zgS-yA.roa (hash: f/FLhL5iK4w35mAjQuNFPLV5x3iPtqx+dEGqwTvpyc4=)
                          5: fEuRfckEagZWeK4N9NPjA2nFnGk.crl (hash: AScQTQhsUKcAwhyrRpxYv5lKk2kbKnRqZ19gwo3L3Xk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:47:d9:1c:fd:8d:d6:5e:12:24:24:b2:85:e8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
        Validity
            Not Before: Jan 31 17:00:11 2025 GMT
            Not After : Feb  1 17:00:11 2025 GMT
        Subject: CN=12eddbd583f44acbc44127a8be8715f0995cf0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:cb:2e:fd:56:3e:fc:a4:fd:93:7f:12:bd:
                    df:e5:4c:25:68:f3:ad:ce:fc:76:2b:bd:96:e7:23:
                    9f:c5:1c:12:5d:0c:fa:cc:4f:12:ee:34:60:2b:9f:
                    a0:39:a6:21:14:0f:d2:d1:8b:8b:59:78:b2:54:aa:
                    fc:84:68:4e:23:f2:b5:b8:19:fd:64:07:94:38:53:
                    73:c0:3e:3e:18:1d:5e:c6:6e:0c:e2:68:ce:24:cd:
                    8e:76:a2:57:d5:d4:6f:84:fe:73:36:91:94:aa:95:
                    a1:ad:f9:14:01:47:54:7e:9f:6e:0a:1d:41:c8:a9:
                    bf:c2:83:bc:d3:96:84:17:5b:41:b2:25:bb:0e:e5:
                    fb:9a:72:52:73:f5:3b:25:f5:72:c5:15:71:ac:24:
                    c3:22:25:9e:90:98:97:43:90:e8:d0:af:3e:bc:14:
                    ab:82:2b:c7:fb:6d:51:9b:12:22:42:c7:89:5c:54:
                    1f:65:c8:13:59:23:49:1c:29:6a:d0:7e:f9:90:99:
                    0d:3a:5e:b2:11:29:0a:55:c7:c6:56:d3:41:15:f4:
                    1e:3b:aa:44:46:2a:a0:ba:4b:69:cf:8b:03:be:fb:
                    c4:b8:03:10:cb:1a:2e:96:44:8e:d7:72:4a:3f:05:
                    ce:6a:5e:ec:b9:18:58:5f:ee:51:7e:29:0c:b7:55:
                    09:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:ED:DB:D5:83:F4:4A:CB:C4:41:27:A8:BE:87:15:F0:99:5C:F0:F3
            X509v3 Authority Key Identifier:
                keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:44:e3:88:d3:ca:cb:65:c7:ad:c4:c4:a2:55:0c:c1:84:89:
         1e:64:a5:7d:6e:f9:68:af:26:06:05:d8:ad:19:e1:da:a5:c6:
         c0:95:3a:82:62:f7:65:13:f5:5b:27:fa:9d:14:0e:6b:5a:77:
         d4:29:48:be:72:30:59:f5:fe:63:ab:11:75:b2:e0:a4:9f:ee:
         f8:7f:1a:f9:38:81:dd:ae:23:d1:04:2a:69:e8:28:18:2c:fd:
         a0:f2:ea:c5:90:13:de:2e:96:b8:7c:8b:9b:dc:1c:24:be:93:
         36:b2:4c:9f:44:bc:0f:ae:58:b4:22:2f:a1:07:29:d1:1a:64:
         c6:50:74:29:f2:b8:77:3f:99:1a:d4:37:00:30:03:4e:35:51:
         5b:02:2a:bc:78:97:1f:cd:4f:be:8f:2a:d2:84:ae:74:e8:17:
         67:03:97:53:06:80:17:0c:ca:5e:fe:a5:fa:3b:04:f0:20:72:
         7e:81:58:fc:fd:0d:42:2f:72:35:ae:61:86:48:5b:52:bc:b5:
         3c:6e:cc:a4:36:27:c1:29:1a:e3:82:ee:3a:2d:13:8f:14:2f:
         3a:aa:bd:a7:35:3b:32:23:14:cf:0d:7a:40:d2:27:32:69:1a:
         a1:0f:1f:d1:50:ff:15:a7:29:08:c0:b1:d7:a3:a5:c1:26:38:
         5b:14:33:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:07 2025 by rpki-client