Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
File:                     COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json)
Hash identifier:          QBbAnVZLfDCkMFxE1X6AezHEiNtqRNAtP5WoKA9QEN8=
Subject key identifier:   2F:88:27:F7:2C:E0:3C:F9:58:D2:02:AD:E0:58:94:40:3A:DC:5F:71
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Certificate issuer:       /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial:       0194BCA98B7F20B518F05D08729DE1970A7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
Manifest number:          49
Signing time:             Fri 31 Jan 2025 14:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:15 +0000
Files and hashes:         1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: 82y3gbyM6Xyae/GPuQCgHgeImzs5DI6HQQd1dv9qX60=)
                          2: xBEy6xBfQ6xkWNnMM3b-8Ps1FR0.roa (hash: Ym4zKNNqMflGb0dAEycHEmUQAQN+DoJITr/UvN/UU8U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:8b:7f:20:b5:18:f0:5d:08:72:9d:e1:97:0a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
        Validity
            Not Before: Jan 31 14:00:15 2025 GMT
            Not After : Feb  1 14:00:15 2025 GMT
        Subject: CN=2f8827f72ce03cf958d202ade05894403adc5f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:37:28:aa:fd:8b:85:8a:48:5b:de:ba:8a:d5:
                    cf:01:7b:2c:a8:c4:39:14:c9:bb:20:c3:4c:6b:1a:
                    52:9c:60:8c:08:a0:09:01:e2:a6:0d:06:f5:51:96:
                    74:9d:6d:91:ac:96:19:15:ea:dc:12:7d:61:cf:18:
                    1f:6f:80:c8:eb:50:d2:d6:1b:f7:21:17:53:df:11:
                    99:c9:a4:89:a5:44:86:da:46:69:11:cd:47:dc:06:
                    6c:85:da:9b:e9:76:74:aa:8f:a1:45:06:ad:8d:e3:
                    bc:e8:95:29:e7:df:64:71:15:6f:f9:db:00:47:91:
                    08:5f:c6:e7:36:28:cb:c7:0f:65:0b:fc:88:9f:ff:
                    8d:8b:b0:af:ed:46:67:f4:b0:ca:b2:85:e5:9e:68:
                    be:90:b9:12:65:5f:98:0d:c7:1a:b0:22:c8:af:aa:
                    63:1a:59:06:67:51:0a:52:1d:4f:d9:74:c8:ef:f1:
                    91:08:9f:2f:f6:91:9b:5a:c1:90:6c:f0:c8:4d:6f:
                    3f:42:bd:66:a5:9e:52:4f:e9:85:cc:96:38:30:55:
                    20:80:2f:86:2b:de:bd:64:f0:f2:c0:56:4e:cc:4e:
                    fe:39:7c:4a:57:c8:37:39:c0:f3:65:c0:91:3a:d4:
                    90:8c:fe:36:0e:8f:32:90:c4:16:37:e0:0a:5b:dd:
                    e4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:88:27:F7:2C:E0:3C:F9:58:D2:02:AD:E0:58:94:40:3A:DC:5F:71
            X509v3 Authority Key Identifier:
                keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:15:d4:58:5c:fc:19:a9:c8:ba:29:b7:0c:6e:9c:c9:67:41:
         2b:09:4b:0f:f1:24:7d:4d:7f:38:ff:4b:b4:ac:0a:a5:32:c4:
         46:b9:b5:25:5e:3a:dc:a3:4c:3d:30:a0:13:79:be:73:08:69:
         e1:27:cd:fd:57:11:41:02:f4:40:87:b0:b0:63:7d:1d:db:cd:
         b1:9d:79:da:82:cd:b0:e3:cd:89:a3:3b:3c:20:dd:28:4e:cb:
         35:1a:81:89:c3:1c:77:82:7e:5c:0d:a4:84:0c:af:a4:1c:50:
         c1:a7:58:02:ce:90:a0:d2:00:be:2e:41:93:36:87:ff:9d:8d:
         57:24:b2:ab:76:16:b2:c0:38:1d:66:70:9e:8c:d0:e0:14:f7:
         46:ab:e7:6f:ac:db:0c:8d:f5:65:36:ef:5b:b4:4f:c0:c3:71:
         6d:bf:60:25:f6:b0:45:04:fe:28:91:81:e3:ab:e8:5f:bb:6e:
         79:c7:31:ea:10:b2:cb:7a:4d:98:c7:d8:b0:0f:07:57:e1:19:
         29:ad:a0:76:17:8a:50:84:1a:84:e1:8f:6f:0a:ef:43:17:f9:
         a1:14:cb:17:81:fd:3b:92:9c:18:e8:c6:a3:4a:6c:21:88:d5:
         21:4d:84:c0:00:30:43:fa:e1:db:be:65:97:58:c7:af:f9:58:
         6d:c6:20:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:05 2025 by rpki-client