Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
File:                     _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json)
Hash identifier:          J3gtvyEczyq+Spspc003G7i1Rieong1lK/bAx2NlC3s=
Subject key identifier:   BF:AA:B4:DE:9A:3D:24:09:EE:AD:69:30:A6:10:98:F2:74:82:89:D6
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Certificate issuer:       /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial:       0194BC3BDE181D4B21C4AD1D0619F2DFE87C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 12:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:27 +0000
Files and hashes:         1: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: dzAPmskz3dInKkNEIHLH2POPA7nrpz/FMkKC/FsH2/o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:de:18:1d:4b:21:c4:ad:1d:06:19:f2:df:e8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
        Validity
            Not Before: Jan 31 12:00:27 2025 GMT
            Not After : Feb  1 12:00:27 2025 GMT
        Subject: CN=bfaab4de9a3d2409eead6930a61098f2748289d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:3f:47:9c:8f:0a:9e:6f:7a:6e:b9:84:20:
                    f7:16:27:43:72:f0:71:d6:27:d6:6a:1d:e2:42:9d:
                    a3:d7:cd:b1:56:c2:7f:ae:57:05:f2:ef:a4:3b:3e:
                    17:0d:11:e7:c6:b5:43:f4:93:5a:5a:81:b9:0a:0a:
                    38:5f:c0:47:23:b0:97:18:ad:5c:9c:99:38:6d:49:
                    ff:6f:05:6e:2f:58:0b:94:8f:24:56:f7:a7:62:49:
                    0a:d8:b2:39:59:5b:02:bb:d0:ec:33:4e:12:b4:84:
                    c8:50:d9:35:d8:49:b8:1e:07:1d:07:fc:7e:75:2d:
                    13:4d:68:43:99:f9:ba:31:bd:91:ab:99:dc:31:32:
                    4d:3e:dd:7c:b9:09:3b:4a:ed:08:e3:b6:4d:ff:06:
                    93:f3:93:ce:cc:eb:24:23:31:04:18:3e:d0:75:82:
                    ad:03:7d:2d:54:78:73:4e:cc:df:53:83:67:f1:c0:
                    3d:05:3c:31:e0:de:ac:98:ca:77:15:64:99:1f:58:
                    30:4f:6d:4d:4b:b0:c0:41:0d:fc:da:da:19:5d:4a:
                    50:b7:95:56:30:90:30:c1:6a:ab:a6:5f:99:15:ec:
                    a7:7b:df:17:54:ff:b1:62:f7:2e:07:3f:a2:04:89:
                    52:fd:fb:24:8f:6c:c8:39:77:64:59:06:80:d6:db:
                    3e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AA:B4:DE:9A:3D:24:09:EE:AD:69:30:A6:10:98:F2:74:82:89:D6
            X509v3 Authority Key Identifier:
                keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:65:93:6f:94:42:38:1f:44:43:6e:6e:09:35:96:24:31:f9:
         f4:35:44:10:2d:cf:d8:b6:2a:29:98:75:63:a0:94:3c:f2:43:
         6b:39:fe:78:47:93:52:6c:d6:32:55:3f:31:8d:96:25:5d:ce:
         1d:25:b3:41:42:61:09:24:6c:a4:ff:48:ae:2f:88:bb:64:f1:
         26:31:eb:9a:fa:15:e2:97:d6:fd:7a:16:c7:74:17:1a:a5:cf:
         d6:16:2a:84:60:b4:96:db:91:c8:28:b6:81:5b:df:da:1b:4d:
         84:81:16:6c:08:4a:41:4f:8f:3f:e1:bc:68:9c:dc:1d:fe:f9:
         de:fe:e3:83:e6:b4:6c:ab:4a:8e:12:87:d0:e7:ec:11:b5:c2:
         24:60:f9:7b:d1:7f:0c:00:4c:9f:da:eb:61:5d:96:dc:cb:08:
         b8:b6:c9:34:9a:d5:fe:36:fa:42:46:1a:fc:1e:1e:d0:81:ab:
         80:0d:1f:16:7a:b0:9c:5c:fa:cf:5a:32:0c:21:f3:d1:bb:71:
         58:99:91:ef:d1:6f:84:f1:c5:fc:45:55:0b:7c:8b:cb:f5:a7:
         9d:a4:23:ac:15:84:00:08:1e:be:48:7c:74:e6:da:bb:51:1a:
         b5:93:54:09:c2:e5:0c:03:0f:6c:b3:54:40:11:01:41:5c:4b:
         07:ec:ae:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:27 2025 by rpki-client