Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
File:                     T7ZXbs2iUkbfcNenLhz_-tiI6js.mft (raw, json)
Hash identifier:          NGVvxst4C5PYTgtZq5DR6yodriRfnfbGQ4+QwSzKI5Q=
Subject key identifier:   BA:F6:2B:20:A0:70:B8:44:CD:7D:14:BF:25:4B:89:4E:9A:B0:F4:7C
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Certificate issuer:       /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial:       0194BD4EB464E90427748A01804AE0AB6E1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
Manifest number:          03CD
Signing time:             Fri 31 Jan 2025 17:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:39 +0000
Files and hashes:         1: T7ZXbs2iUkbfcNenLhz_-tiI6js.crl (hash: BmpfJkF+BtWJRHLd3C0Jd4n5vAGQeiCojhRmf/3POcw=)
                          2: q0JCtn0ymXJ_44Fp2RsnS-aL5Os.roa (hash: ol9vwFP2kye7kweAuJ86LI17vpYzbBP1gC/LI4vVUEU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:b4:64:e9:04:27:74:8a:01:80:4a:e0:ab:6e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
        Validity
            Not Before: Jan 31 17:00:39 2025 GMT
            Not After : Feb  1 17:00:39 2025 GMT
        Subject: CN=baf62b20a070b844cd7d14bf254b894e9ab0f47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e8:cb:ad:7b:31:2e:35:d3:98:1d:1e:28:56:
                    ad:f7:19:4a:18:28:de:18:b2:74:54:62:f9:72:04:
                    4c:b6:56:91:aa:a6:1d:f6:9f:01:bb:52:2d:d4:e2:
                    5f:7f:2b:65:57:41:cb:b6:96:af:83:f6:6a:f7:0c:
                    c1:76:f6:7b:a7:25:5c:f4:7a:ad:c6:5b:89:81:34:
                    e1:88:d7:36:a0:2c:0e:e3:f1:2f:e8:d5:4a:23:9d:
                    77:ee:16:d7:95:fe:1c:95:f7:92:d2:4b:f2:e8:5d:
                    09:68:b9:38:87:b0:82:14:bd:4f:62:4b:ec:9e:2c:
                    3f:29:de:86:90:f3:55:cf:4e:fb:56:c5:bb:f3:ad:
                    de:3e:9f:21:0d:48:36:98:54:6e:b0:93:ef:f5:02:
                    4d:c9:a4:f0:4a:ee:8b:95:96:fb:62:20:6a:88:ff:
                    b7:ef:af:f3:24:a6:46:70:52:81:02:48:ac:71:bb:
                    23:d3:fc:b1:35:73:55:01:d4:1b:1c:32:9c:a5:b3:
                    df:c3:60:9b:ba:ba:b0:1d:ed:f6:d7:67:99:e0:4d:
                    db:2e:4e:e1:cc:18:84:e4:90:5e:30:0c:f7:a3:9c:
                    1a:57:d6:ec:dc:b1:8d:76:17:5d:21:98:20:04:c1:
                    0e:ee:28:91:92:80:07:d0:5e:aa:37:c6:3d:13:5f:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F6:2B:20:A0:70:B8:44:CD:7D:14:BF:25:4B:89:4E:9A:B0:F4:7C
            X509v3 Authority Key Identifier:
                keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7c:4e:0f:a6:cc:33:f3:4c:64:22:e3:8e:60:bd:63:73:0e:
         00:c7:b1:ef:69:61:03:22:50:13:2a:cb:2c:9d:8e:fc:b5:10:
         eb:0b:df:9d:f6:c4:2c:26:c5:67:04:cd:47:18:2f:74:2a:f6:
         a2:ab:7a:fb:57:a2:18:14:16:f9:3b:c3:68:e9:96:e6:d1:6f:
         be:15:84:78:3d:b3:d5:bc:c4:62:f2:e4:d2:80:fd:b5:8f:81:
         8b:7f:02:2c:79:a5:3f:90:31:2b:65:a5:2d:31:5f:53:cf:20:
         1b:e9:26:e0:84:8a:06:8c:41:98:4d:4b:0a:27:b7:60:69:c2:
         ee:ee:39:ab:a9:87:f9:e2:18:0c:3d:aa:dd:f5:8c:19:d5:dc:
         58:d9:6f:3d:ad:58:20:7a:d7:47:59:60:22:90:16:1b:e6:19:
         51:0b:74:54:24:83:03:21:2e:1e:59:7f:48:5a:d5:d6:d3:3d:
         b7:ce:c7:42:22:16:05:d9:36:2a:cb:76:98:a4:f7:aa:66:47:
         b5:10:2e:06:a5:37:85:7a:f4:85:be:de:12:eb:8c:67:5b:f5:
         85:f2:51:4e:d5:f1:d2:0a:5f:e7:85:88:87:16:d6:53:73:55:
         a5:78:48:73:31:0b:b9:a6:0a:b4:1f:05:61:6e:f3:91:27:61:
         3a:9f:f0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:57:51 2025 by rpki-client