Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.mft
File:                     t38R7tTnnIXMxWLfPR8oPjOdou0.mft (raw, json)
Hash identifier:          ndGsphpmOVWxHDxGSG7hb292rM/sn+IHgX915myGDVQ=
Subject key identifier:   E8:EB:2C:C9:7A:8F:CD:4B:E1:5D:AD:44:A8:3B:66:B4:C6:8E:85:F0
Authority key identifier: B7:7F:11:EE:D4:E7:9C:85:CC:C5:62:DF:3D:1F:28:3E:33:9D:A2:ED
Certificate issuer:       /CN=b77f11eed4e79c85ccc562df3d1f283e339da2ed
Certificate serial:       0194BBCE27F3B10A2C22744CE374153CAB10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t38R7tTnnIXMxWLfPR8oPjOdou0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.mft
Manifest number:          0ACC
Signing time:             Fri 31 Jan 2025 10:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:37 +0000
Files and hashes:         1: t38R7tTnnIXMxWLfPR8oPjOdou0.crl (hash: CTNwXar/uAkg2Kvohocc8/xJW5RmKLd11RM3j8Y8lmQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:27:f3:b1:0a:2c:22:74:4c:e3:74:15:3c:ab:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b77f11eed4e79c85ccc562df3d1f283e339da2ed
        Validity
            Not Before: Jan 31 10:00:37 2025 GMT
            Not After : Feb  1 10:00:37 2025 GMT
        Subject: CN=e8eb2cc97a8fcd4be15dad44a83b66b4c68e85f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:d9:3a:7e:b6:25:c7:d1:35:84:98:8d:2b:
                    88:47:79:d3:1f:c9:a9:fd:b7:3b:d1:1c:03:80:52:
                    8d:fb:ca:69:b1:05:51:69:c9:c6:06:21:3e:ba:60:
                    25:41:8e:94:64:97:51:95:5b:92:67:12:84:7e:e6:
                    e1:91:32:aa:b1:42:03:88:60:5b:b7:3b:44:d3:49:
                    75:d5:77:9e:c5:70:02:5f:36:07:b8:63:a3:89:e1:
                    af:f7:85:cc:81:2e:15:f3:a8:cc:4d:49:b0:d1:75:
                    94:0a:ef:0d:ee:4d:f2:7f:2d:9f:e8:35:9b:06:3a:
                    33:48:41:70:40:49:b0:3d:0e:3e:29:ce:4e:e0:52:
                    c1:fe:d9:fa:0d:a1:55:fc:61:e4:71:25:aa:fd:d5:
                    bc:ad:4b:03:50:bc:7b:ae:99:60:f0:6e:6f:4c:ff:
                    d6:3a:9a:ac:ff:e2:72:01:5f:d5:1e:b5:84:37:1a:
                    81:b8:64:56:0e:c7:7f:2b:4a:31:1b:bc:5b:25:35:
                    4c:90:e4:e7:b7:6a:3f:ba:1e:9a:ae:9a:40:42:cc:
                    8d:d8:10:cc:54:f4:df:4f:8c:fc:0c:a8:0d:ef:6c:
                    d9:76:cf:d3:46:25:be:c1:d1:e0:11:75:fa:90:6d:
                    cf:8e:00:10:4b:7c:1e:53:8b:34:a6:e6:27:eb:bd:
                    87:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EB:2C:C9:7A:8F:CD:4B:E1:5D:AD:44:A8:3B:66:B4:C6:8E:85:F0
            X509v3 Authority Key Identifier:
                keyid:B7:7F:11:EE:D4:E7:9C:85:CC:C5:62:DF:3D:1F:28:3E:33:9D:A2:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t38R7tTnnIXMxWLfPR8oPjOdou0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/975030-43b2-400b-8dc9-0c77559d9db0/1/t38R7tTnnIXMxWLfPR8oPjOdou0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e0:8c:90:e3:ff:8c:f8:bb:a9:a9:14:e4:d1:b0:bc:41:46:
         2f:fd:c5:29:4d:cb:57:5b:e7:2d:d2:db:64:c7:46:44:cb:d0:
         e0:ff:b6:94:a0:bd:eb:18:3b:f9:31:c9:3c:1b:72:1a:c6:58:
         66:2e:36:60:4b:e1:ec:21:3a:67:93:be:1e:9a:2e:f6:63:d7:
         57:4d:cb:8d:24:99:54:5c:13:ad:bb:c0:ff:93:5a:50:5d:b3:
         e1:6b:cc:48:78:e1:05:c7:b2:06:9f:39:7d:65:69:7a:32:56:
         34:b7:f7:18:8c:80:a2:ac:c9:6d:fe:af:12:f2:d5:e3:ff:98:
         9a:40:5d:d7:3a:4f:6d:f0:35:eb:4c:18:06:de:9b:92:bd:5c:
         13:96:35:27:74:b4:8f:05:15:84:7a:bb:14:19:b9:c0:13:73:
         46:ab:59:71:71:d5:10:e0:cc:c5:e6:3a:8c:e1:08:c2:73:2a:
         10:b3:87:20:f5:db:20:e2:92:ad:7a:75:16:f0:aa:36:45:a4:
         71:09:2a:c2:86:66:ef:57:11:a3:8f:e3:ea:78:50:d1:2b:8c:
         cc:ae:9f:81:39:a2:b1:12:f5:24:d1:65:76:97:c1:46:70:d3:
         0d:58:8e:ac:b2:2e:25:bd:ce:08:ec:b7:42:e1:5e:2d:a8:6c:
         16:45:4a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:55 2025 by rpki-client