Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
File:                     EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json)
Hash identifier:          YZDTb6Ol4h7i0CG0AVQw6eZMX3MMBkJQKeFPsmZ76DY=
Subject key identifier:   AD:BF:D9:ED:06:E4:5E:EC:A5:26:F2:2C:25:7C:01:BD:DC:8D:0A:C3
Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3
Certificate issuer:       /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
Certificate serial:       0194BBCE2973DF415B5A611942D9A42AB1CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:37 +0000
Files and hashes:         1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: Eu9QG7Ioa9ZxjwHW3YVoDkLr+hvXbK7riCGXzW1Fy7s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:29:73:df:41:5b:5a:61:19:42:d9:a4:2a:b1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3
        Validity
            Not Before: Jan 31 10:00:37 2025 GMT
            Not After : Feb  1 10:00:37 2025 GMT
        Subject: CN=adbfd9ed06e45eeca526f22c257c01bddc8d0ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:46:d2:8e:ab:41:79:dd:5c:5f:eb:2e:cb:28:
                    94:f2:66:43:5a:20:1c:da:c7:7f:c8:a6:87:3c:da:
                    d9:a0:63:ab:fb:41:69:17:1b:71:d7:42:6b:07:53:
                    ec:df:dc:d5:6e:29:43:9b:38:80:62:04:40:76:ae:
                    bb:96:a4:b2:91:f4:c9:9c:e0:8c:b2:b0:6d:f9:3c:
                    05:80:e8:ee:ed:64:14:a9:c6:33:b6:fa:8a:3e:5c:
                    af:a1:e1:b4:54:33:94:b9:fe:d7:16:1a:87:b0:07:
                    32:80:e9:d7:0f:d8:39:8a:0b:e4:89:b9:da:a9:0a:
                    23:e0:f0:2a:63:fb:23:59:dc:f7:37:84:a5:c5:cd:
                    f2:68:2d:d7:1a:bb:f0:26:67:a1:6b:1e:f5:3c:8d:
                    54:d1:43:45:3e:81:4b:ba:1d:9b:bb:81:0e:ff:4f:
                    61:fd:de:98:55:19:6b:5a:bf:94:6b:64:93:73:3e:
                    3b:da:f0:e0:69:ed:aa:a6:cc:07:7e:90:bc:19:4d:
                    b3:af:b8:8c:ca:52:9f:05:86:c2:2c:4b:5f:e7:51:
                    f5:2c:bf:15:f9:a2:4a:82:f1:98:7c:19:b4:43:b3:
                    56:9c:cf:02:54:8c:87:c1:a4:5f:d6:c0:af:24:7a:
                    f6:2a:6f:4f:20:e7:ea:e6:12:00:b5:e1:5e:0f:a1:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BF:D9:ED:06:E4:5E:EC:A5:26:F2:2C:25:7C:01:BD:DC:8D:0A:C3
            X509v3 Authority Key Identifier:
                keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b8:0f:0a:3e:02:e5:23:56:4a:60:69:9e:72:c0:32:3b:8e:
         c1:2e:33:63:99:e2:e1:c9:73:58:1e:5c:1f:a3:f8:22:03:32:
         00:1b:18:aa:d8:48:e3:92:ed:33:3a:c0:af:28:ae:3d:e7:11:
         1b:64:0e:c4:b1:f4:e7:1c:26:3b:d8:af:95:86:07:c2:2e:58:
         91:51:68:59:d0:c5:e9:3d:00:aa:54:6f:a0:b7:a0:67:9c:64:
         93:bf:87:af:e6:69:d5:3e:59:80:a0:ff:4e:24:49:08:84:57:
         a7:78:9f:98:e4:31:14:ec:43:0c:d5:42:fb:e9:6f:3f:0c:44:
         27:69:13:8f:81:3e:c8:9b:c5:91:91:0b:9e:9d:68:64:87:84:
         08:91:36:d3:91:a6:82:64:5e:74:6c:1f:c1:4c:d9:43:30:a3:
         75:95:a0:d3:a0:8f:aa:23:72:f5:b1:4a:1d:8e:bd:f8:ce:a4:
         3a:89:11:58:f0:e8:f7:b9:56:c8:e0:b9:e2:36:4a:42:cf:35:
         49:dd:0a:8c:47:7e:3d:bf:db:55:a7:af:34:d7:e2:e8:42:1d:
         58:77:84:25:e3:4e:81:ed:4d:4e:99:e5:7a:ea:46:b4:b3:6e:
         cd:d4:2b:56:51:a5:18:ce:46:83:6e:ac:a8:e9:50:b1:32:4f:
         b9:7c:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:26 2025 by rpki-client