Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
File:                     eJJmn4GevY3S67qT8t0tPhonwjE.mft (raw, json)
Hash identifier:          Kfx3iEIKCp87IIM29Ewj6yK+M+yM2/SYRtaMrO1pmOQ=
Subject key identifier:   56:33:39:7D:3C:1D:92:D5:DD:81:69:7E:8D:67:96:E8:9C:5B:A6:50
Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
Certificate issuer:       /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Certificate serial:       0194BD17AADEF4622BF96F0D301451374915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
Manifest number:          06DB
Signing time:             Fri 31 Jan 2025 16:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:32 +0000
Files and hashes:         1: eJJmn4GevY3S67qT8t0tPhonwjE.crl (hash: /wkXWu3Okz7PF0WxBDBFJu3gV8Qmjyfb7kDuzGl00nA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:aa:de:f4:62:2b:f9:6f:0d:30:14:51:37:49:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
        Validity
            Not Before: Jan 31 16:00:32 2025 GMT
            Not After : Feb  1 16:00:32 2025 GMT
        Subject: CN=5633397d3c1d92d5dd81697e8d6796e89c5ba650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:1e:3c:22:f6:bf:6a:69:24:da:2d:ab:d8:
                    8f:d9:38:21:bf:40:8d:45:3c:b3:6a:cd:3b:40:a5:
                    dd:b3:a7:24:32:2a:69:e8:e5:42:d5:c8:02:63:dd:
                    9f:1b:ef:5b:37:28:01:3d:9a:11:30:ec:92:3d:90:
                    92:2e:b4:b8:49:37:ee:ba:c6:aa:2e:da:9e:df:1e:
                    cb:80:0b:bf:cd:90:3a:a3:b2:dc:8e:95:16:77:38:
                    71:6d:69:44:0f:48:05:26:84:36:a4:c3:7a:80:ff:
                    ca:99:67:5b:43:6e:df:c9:5b:2b:a7:b4:d6:8e:30:
                    d8:dd:cd:91:80:67:7c:8f:a6:24:20:7f:a5:87:b6:
                    15:ab:37:18:61:e7:ca:6f:c7:c9:ea:50:23:f8:fa:
                    1f:91:a3:1f:b1:ed:01:74:1b:2a:87:59:d2:d8:53:
                    2c:fd:6a:11:40:5d:a4:fc:67:ba:46:7a:e9:e2:11:
                    b2:12:61:60:b8:b4:11:c6:7c:4a:6a:ca:e6:4b:c6:
                    cd:59:62:9d:d3:44:79:f1:dd:b4:da:f0:a5:ce:c0:
                    9d:dc:ae:3e:1e:97:9e:19:df:1c:82:48:f8:c0:4a:
                    19:ec:2b:f1:a3:55:66:a8:42:00:ca:1b:cb:b7:b5:
                    f8:01:26:ee:0f:d3:83:b9:5d:5c:66:41:4c:85:fa:
                    71:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:33:39:7D:3C:1D:92:D5:DD:81:69:7E:8D:67:96:E8:9C:5B:A6:50
            X509v3 Authority Key Identifier:
                keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:97:4c:1b:7c:cb:35:81:6f:c4:40:c0:9b:f7:d7:3b:4d:25:
         ef:16:ba:cd:07:2e:48:a4:e1:5b:ea:09:91:b5:72:fc:1d:b4:
         3d:d4:58:d2:57:cd:e1:6a:48:50:0f:88:f6:9a:2b:7e:81:b6:
         1d:ee:7e:77:4b:7a:d7:32:93:2f:14:0a:a0:d8:72:c5:d3:cb:
         77:54:a2:3c:cf:c7:15:72:dc:5b:46:d4:12:10:7c:19:88:94:
         1f:a5:af:6a:86:6d:44:11:ac:69:57:58:11:cc:21:b6:e3:39:
         69:db:d4:37:33:e7:0a:70:33:81:4d:17:14:bb:64:67:56:25:
         a5:a3:7d:fe:59:59:a8:0f:29:e9:d7:e2:76:0d:4c:0b:44:ff:
         79:b6:a4:50:6a:b0:e5:40:d3:f7:a5:94:9e:ec:30:09:04:de:
         cd:9a:49:ed:0b:6a:98:42:4b:1e:50:97:41:92:dc:95:2f:5a:
         47:92:7c:7c:19:52:28:38:46:6e:9d:0f:97:9e:4f:78:ca:b6:
         2c:02:9d:1c:d0:cf:2b:eb:95:46:e0:95:77:66:e5:65:9b:06:
         e7:54:02:d2:f4:e0:2d:63:1c:8a:1d:c9:49:12:8c:56:c7:96:
         b8:41:7d:2c:12:07:a5:8e:00:47:45:d2:e3:55:8f:42:44:22:
         84:d6:cd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:02 2025 by rpki-client