Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
File:                     s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft (raw, json)
Hash identifier:          qurQhTqEe6L7zZTVSa2jY0ZB/Den77eqbF7ToBMSt6g=
Subject key identifier:   34:E3:88:AF:54:33:6B:A8:2C:8F:9F:6E:1F:20:16:FE:EF:93:B5:A7
Authority key identifier: B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80
Certificate issuer:       /CN=b3b77e52cc777a1eafe69a517f95d2c219c19080
Certificate serial:       0194BCAA23863ADAE7B76F1F5BA4016028A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft
Manifest number:          0599
Signing time:             Fri 31 Jan 2025 14:00:54 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:54 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:54 +0000
Files and hashes:         1: s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl (hash: PlJINRUDQ91Y45NQiepmIfLymuThxzURCrCStLmyclA=)
                          2: sGUfZNonYxZsb_xTxnb3H4Yu91o.roa (hash: s4fR6r2ByqMIr6sZhA9/b2xFuO1KrvktMupAhaQVN8w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:23:86:3a:da:e7:b7:6f:1f:5b:a4:01:60:28:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b77e52cc777a1eafe69a517f95d2c219c19080
        Validity
            Not Before: Jan 31 14:00:54 2025 GMT
            Not After : Feb  1 14:00:54 2025 GMT
        Subject: CN=34e388af54336ba82c8f9f6e1f2016feef93b5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:aa:a2:53:4f:cd:f2:56:e3:78:ef:00:20:69:
                    db:ac:90:0c:e7:b4:94:ec:45:e6:9b:da:1e:ac:c7:
                    29:6e:5a:91:cd:dc:b6:ff:f0:52:44:17:3c:e9:f1:
                    0f:6b:5f:c6:e5:be:0d:4e:61:7f:f1:54:24:a4:74:
                    39:9c:97:91:dd:6d:0f:39:bc:1e:2f:c9:f4:ba:0d:
                    6f:e7:8c:d1:5e:f7:97:77:f2:34:7d:ea:fa:ba:3b:
                    e8:1c:f6:7c:e8:98:8b:42:d1:7e:2c:98:71:d6:3d:
                    6e:2f:0f:69:73:eb:9a:a4:03:3c:75:02:fb:06:26:
                    88:4f:d1:5a:18:45:a1:1c:a2:a5:b3:2b:5d:2a:08:
                    ed:be:23:72:93:97:e7:96:99:7f:04:75:9a:bf:22:
                    b0:5c:98:ed:0d:03:44:cd:ba:99:75:aa:22:ac:4b:
                    88:cc:de:93:d1:3c:b0:d6:3f:5e:23:aa:3f:38:99:
                    26:7b:80:03:3d:d5:15:68:27:e8:61:11:28:21:8a:
                    eb:c2:cb:5c:99:ba:3e:07:f2:45:65:c5:f7:31:4f:
                    1c:ca:41:d6:a2:ce:01:9b:d0:9a:f0:c3:f9:7c:e7:
                    8f:42:cc:96:a5:a2:fd:db:23:a1:3d:16:ed:3a:78:
                    74:17:50:ff:6e:6d:da:0b:f9:05:2d:00:a9:31:c2:
                    9d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E3:88:AF:54:33:6B:A8:2C:8F:9F:6E:1F:20:16:FE:EF:93:B5:A7
            X509v3 Authority Key Identifier:
                keyid:B3:B7:7E:52:CC:77:7A:1E:AF:E6:9A:51:7F:95:D2:C2:19:C1:90:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7d-Usx3eh6v5ppRf5XSwhnBkIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/772440-876c-42d0-80f5-b4aee8c5d48e/1/s7d-Usx3eh6v5ppRf5XSwhnBkIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:48:fe:05:ad:3f:8b:ed:82:e0:10:c4:18:b3:97:77:2f:e5:
         c3:88:d0:e5:73:5e:bd:ca:73:3d:1f:ce:f9:ef:20:32:9a:68:
         98:99:76:42:3b:b7:f9:08:ad:27:09:90:92:5b:7d:c1:e6:ad:
         51:8c:7d:dc:aa:a4:f3:3d:52:7e:f5:43:b1:99:dd:6a:90:18:
         25:4a:83:3e:04:16:c5:36:43:76:bb:0c:03:ff:64:a0:28:c1:
         04:8c:f9:d6:86:ad:eb:e4:38:e1:50:1b:ea:07:82:de:65:d8:
         83:d9:f4:64:e0:2a:79:57:e6:0a:fd:74:70:a6:eb:6f:81:1e:
         0c:b8:e9:95:ca:dc:f8:ff:60:2b:6d:97:61:bd:cd:9f:25:ec:
         8a:80:af:5f:52:17:20:93:2d:86:61:09:22:13:b4:b8:fe:bf:
         57:f6:ef:8f:20:f7:91:54:5d:4d:2a:77:f7:52:3e:a1:fb:6d:
         84:7c:6e:6f:c2:8f:0e:11:fb:99:44:7b:eb:81:cc:6c:63:6d:
         ba:a9:c3:fa:72:8d:09:e5:a8:4d:43:df:ea:f8:4b:dd:9e:31:
         0c:2e:09:c8:0b:fb:ae:62:ce:70:68:0f:f0:5a:80:ce:e7:b7:
         75:2f:74:8b:8f:c8:43:38:b9:46:88:7f:49:9f:9a:40:cf:40:
         17:a9:d8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:28:12 2025 by rpki-client