Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
File:                     fWNA43zPwSrrqsKl8z1F6gqIeoo.mft (raw, json)
Hash identifier:          tEesb7zR5p0YuW5pFTlfKoDZA19DssPGJGpwJ4OrvAY=
Subject key identifier:   A0:32:70:FF:08:15:CD:8F:09:D3:71:C7:BF:04:75:49:94:F6:AB:6E
Authority key identifier: 7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A
Certificate issuer:       /CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
Certificate serial:       0194BC04EAD2A9506343DB3F644BDFC370B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft
Manifest number:          0E73
Signing time:             Fri 31 Jan 2025 11:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:26 +0000
Files and hashes:         1: fWNA43zPwSrrqsKl8z1F6gqIeoo.crl (hash: CB7Z7HdX6Nt84fd1ka2wQtEly93elGqS0azkLD2AyRs=)
                          2: jRJwX_ZKuADln4pES5WgoVS__88.roa (hash: K3aJVjlqhUCHgSM5vEOmY3eFV+XqReoMzhLc+qeCd0E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:ea:d2:a9:50:63:43:db:3f:64:4b:df:c3:70:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a
        Validity
            Not Before: Jan 31 11:00:26 2025 GMT
            Not After : Feb  1 11:00:26 2025 GMT
        Subject: CN=a03270ff0815cd8f09d371c7bf04754994f6ab6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:8c:11:44:27:10:f1:a9:1e:42:9b:4d:d3:
                    b1:16:3b:9b:11:9e:8c:15:64:f9:a3:16:90:0c:a1:
                    39:7f:26:df:81:64:40:2f:ad:57:ca:01:71:16:13:
                    a0:65:5a:33:aa:1a:57:50:4c:11:70:94:ff:60:98:
                    22:f6:d3:23:f2:0e:5d:b4:cb:0c:8c:50:6c:88:51:
                    06:d4:dc:4c:50:da:fa:42:19:4f:e3:b6:25:3d:25:
                    19:ca:f7:d4:9b:f9:bb:fd:ee:36:41:9a:58:82:a8:
                    47:c2:6e:65:ef:0d:5f:f8:4e:c1:c0:b6:0f:a4:8f:
                    2b:a7:73:bb:c8:d3:93:ea:a6:05:c1:32:51:2c:68:
                    32:bb:35:82:01:23:b4:d9:a1:d8:6f:06:c0:6b:2c:
                    0f:6e:23:85:62:86:5c:8a:93:94:16:b9:07:d1:9f:
                    cd:92:81:51:fc:70:00:31:1b:44:f2:27:ab:45:c7:
                    1e:00:2c:a0:5f:ed:d5:2e:4c:26:52:0d:6f:18:16:
                    b8:d1:98:34:3b:c1:ae:c9:75:d5:0f:8d:79:04:0f:
                    b7:a8:77:68:d5:fb:dd:5b:5a:f1:38:ac:8f:a1:5e:
                    08:23:17:ea:f0:46:c6:04:3a:e4:71:63:3f:6b:fb:
                    af:86:80:a7:80:de:24:08:ed:0e:07:d7:78:a6:9b:
                    70:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:32:70:FF:08:15:CD:8F:09:D3:71:C7:BF:04:75:49:94:F6:AB:6E
            X509v3 Authority Key Identifier:
                keyid:7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:aa:25:b3:0f:c4:36:8e:17:5b:c4:91:c4:a5:9e:97:d2:eb:
         cc:f1:f8:55:18:a0:5e:98:e3:9e:f1:b3:9a:fd:4e:66:03:19:
         ac:4a:c6:53:4c:3b:68:ad:c6:e8:e8:55:2a:6e:cb:95:e1:cc:
         65:c0:20:d9:c5:48:94:59:2d:73:de:4e:ea:4d:7c:aa:a5:87:
         f3:ba:62:4f:ef:98:17:30:c2:d1:1f:b8:0d:8b:46:70:4c:41:
         1c:95:a6:b2:52:7f:8c:54:1e:e8:6f:b9:da:62:ef:73:f3:be:
         d0:ff:56:8d:84:03:60:d5:c8:43:ee:ae:30:bf:f3:e1:11:cc:
         55:90:92:d1:35:21:c4:a5:85:63:76:1c:d8:13:e5:9e:c3:0b:
         25:51:0b:5e:bd:3e:2b:a5:3c:9c:6d:e3:bd:59:45:ec:5e:77:
         c8:d0:c2:71:69:71:64:69:2d:ea:fd:eb:c8:b1:3e:da:27:02:
         a7:1b:b8:01:e6:51:04:86:d4:1a:d1:bd:57:c8:dd:9b:eb:a8:
         b3:50:56:b9:9a:2b:11:d3:f7:5c:2d:0a:76:48:3a:86:2a:9b:
         84:72:ca:55:e7:44:06:04:66:9d:f7:cd:a6:1b:fc:51:8a:93:
         5f:92:b6:f7:61:72:14:40:5f:12:d1:99:e2:9d:44:d0:90:84:
         ec:58:85:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:25 2025 by rpki-client