Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
File:                     jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft (raw, json)
Hash identifier:          NJx5egqwf1UNbarRXIiNahm58yDh7TWJeoyqihVa3eo=
Subject key identifier:   49:26:1F:6B:F6:F0:4D:4F:80:83:50:9B:91:CB:16:B4:B5:5D:03:67
Authority key identifier: 8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
Certificate issuer:       /CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Certificate serial:       0194BC727CC24E9E709BFE5B3C3C60CDF0B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
Manifest number:          0261
Signing time:             Fri 31 Jan 2025 13:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:07 +0000
Files and hashes:         1: jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl (hash: DaBGDEnv4PAkuE/IQ2mNNI5zPKomhq4Nlu2zwvF0VPg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:7c:c2:4e:9e:70:9b:fe:5b:3c:3c:60:cd:f0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
        Validity
            Not Before: Jan 31 13:00:07 2025 GMT
            Not After : Feb  1 13:00:07 2025 GMT
        Subject: CN=49261f6bf6f04d4f8083509b91cb16b4b55d0367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:0d:1c:af:ae:fa:06:2d:e5:54:14:28:e7:
                    6d:a8:d0:40:1b:b2:28:72:94:17:6b:6c:9b:66:b1:
                    d3:43:07:a3:e4:d4:34:af:15:b1:4b:45:4e:62:e7:
                    ca:41:4d:1f:00:71:12:de:85:37:50:3c:7a:fc:00:
                    59:52:b2:48:7a:2f:46:b8:01:7c:c1:87:16:ed:b8:
                    39:6f:0b:77:b7:05:0d:cc:a4:92:1e:5e:cf:01:70:
                    0c:d9:c5:bf:57:6e:b8:cb:f9:ce:3b:42:6e:1c:74:
                    a2:41:ce:b4:59:e7:6b:e5:c0:4a:55:8a:06:da:c0:
                    20:4e:c1:ac:56:5f:41:46:a1:a9:6a:8d:d3:c3:18:
                    23:dd:a1:79:a3:ac:30:b5:47:da:5b:0a:d8:04:ed:
                    6e:d3:59:ae:21:a1:56:e5:ce:e5:3e:22:5e:33:45:
                    b0:33:d7:f6:fc:98:0e:0c:c9:40:f1:aa:55:42:4a:
                    ff:46:3c:f1:a8:b7:e0:38:d1:ba:ba:d9:88:28:82:
                    5e:3f:f9:db:d6:e8:b2:17:96:99:eb:9f:b5:e9:55:
                    22:04:a0:65:a4:b0:e5:9f:ac:aa:5a:6e:eb:f8:b6:
                    78:96:40:c5:6b:da:67:bb:84:b3:c4:a2:8d:84:cc:
                    83:c3:6a:56:7a:d0:52:92:8a:e8:a5:8b:e5:39:0d:
                    84:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:26:1F:6B:F6:F0:4D:4F:80:83:50:9B:91:CB:16:B4:B5:5D:03:67
            X509v3 Authority Key Identifier:
                keyid:8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:06:eb:47:5d:3a:a6:8b:2c:70:f9:fa:6e:79:6f:34:75:00:
         c6:30:70:b1:e6:68:1d:80:3c:2c:82:70:f7:7e:80:30:73:a6:
         8f:02:22:c5:a8:1e:79:2b:01:54:00:c8:a5:e3:3b:35:13:2f:
         6d:ff:71:d6:38:c2:eb:2a:4c:28:50:9e:cf:56:89:53:ee:7c:
         8c:66:e0:fa:bc:28:bc:54:b6:ee:2c:4a:70:1f:08:d6:b8:d0:
         75:e2:6a:47:e9:0e:3d:a3:2b:76:73:09:cf:65:10:68:ab:1e:
         2b:2f:b9:eb:1f:e3:ce:24:5e:b6:01:6b:e7:1a:d7:78:f0:59:
         50:8d:bf:37:07:58:5e:dd:5c:3c:8d:74:e7:48:3a:f5:21:e7:
         2f:72:65:c7:7a:09:7b:c5:de:5d:d3:26:0f:58:b3:d0:04:1b:
         e7:42:9c:93:b1:06:9c:99:30:d6:c0:cc:4b:9f:0d:10:1a:ad:
         79:7a:d7:fd:ae:66:73:fb:81:b0:ba:d8:21:9a:86:87:c8:53:
         2c:95:dd:6e:14:90:5d:d5:a4:44:c0:ad:7c:a2:b7:8f:fb:23:
         ac:32:75:67:6e:3d:b9:70:22:81:02:ca:54:cc:8d:0e:8b:8d:
         65:de:d8:80:e4:f5:55:f3:d7:3d:6b:6c:4a:48:94:4f:d0:c5:
         12:69:82:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:35 2025 by rpki-client