Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
File:                     _9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft (raw, json)
Hash identifier:          k6NSYjleZyuZySSAFefEEX+FuOLQp+LmHrRiwv0YYmQ=
Subject key identifier:   7C:7E:D9:51:88:63:38:DB:25:30:F0:09:64:83:5C:D0:98:E7:D1:80
Authority key identifier: FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94
Certificate issuer:       /CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
Certificate serial:       0194BCA9FEAAFDD5C73348C415961C1B823D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft
Manifest number:          13BB
Signing time:             Fri 31 Jan 2025 14:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:44 +0000
Files and hashes:         1: GDYfoKKG3yFaIjJkJ3YCAK8hLqA.roa (hash: erb5aM2h7W5I1XqnWYG/lDx7/8zDPLRd0RbZw0dE/qs=)
                          2: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl (hash: AEbkUKOAJ8/yLjoVQG7ai+m20vbvVCwYYtoHBOo4iag=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:fe:aa:fd:d5:c7:33:48:c4:15:96:1c:1b:82:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94
        Validity
            Not Before: Jan 31 14:00:44 2025 GMT
            Not After : Feb  1 14:00:44 2025 GMT
        Subject: CN=7c7ed951886338db2530f00964835cd098e7d180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f5:4a:6d:cd:d7:b3:a6:c1:d3:93:44:f3:2d:
                    46:c7:33:8c:76:e9:99:1e:4b:db:94:19:ad:ab:bf:
                    b6:9d:f9:05:ca:61:0e:b7:a0:be:85:d6:bb:7f:59:
                    ba:8c:b9:0e:e2:8b:1a:e4:7d:a3:64:78:a5:98:02:
                    b6:b9:ce:5f:8a:4a:cc:c8:ac:f8:44:83:b2:1c:64:
                    20:0b:1f:aa:2c:df:21:8d:ed:c3:0a:06:a8:9c:5b:
                    4c:8b:46:41:ba:03:8e:22:ca:65:8e:8f:99:99:3d:
                    ce:3a:2b:19:93:6f:8f:1b:aa:cb:be:ba:eb:c2:8e:
                    20:46:16:c2:ba:6c:56:f9:fc:f0:73:44:3a:7d:64:
                    a7:f9:d0:08:85:ca:35:2d:ca:cc:ab:61:81:aa:34:
                    d5:d6:67:ec:42:06:cf:24:2d:8f:ce:8a:43:58:92:
                    d4:73:15:f9:27:d7:34:a6:cc:7b:0f:4a:37:79:50:
                    a2:95:c2:df:93:bf:3b:df:ad:91:34:fc:36:bb:d2:
                    d6:ae:bf:8d:97:2e:be:22:a4:31:4a:ba:1f:ce:d9:
                    85:d1:a4:87:13:07:07:26:fc:db:0d:0f:ae:88:f1:
                    65:1d:88:bb:cb:b0:e0:66:87:58:06:1c:67:cc:a8:
                    37:73:4d:53:2e:ed:f5:ea:1c:ab:93:b8:d9:85:78:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7E:D9:51:88:63:38:DB:25:30:F0:09:64:83:5C:D0:98:E7:D1:80
            X509v3 Authority Key Identifier:
                keyid:FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b1:5c:73:55:94:f9:f3:5e:07:a4:54:4f:29:eb:13:84:49:
         b8:a6:e7:01:84:51:99:2c:07:47:a8:25:fc:b7:3b:d2:54:ed:
         e4:79:5e:f4:35:6a:f8:2e:03:8e:43:23:d1:7f:bc:8b:2c:66:
         e1:a8:8d:1e:87:84:d9:6d:4d:c2:ef:b3:1e:9a:73:93:96:68:
         eb:9a:78:26:d9:ea:43:89:51:c0:d5:0e:32:09:f6:e9:9d:99:
         89:a1:ca:07:00:3d:65:9b:55:b7:cc:1c:c5:2c:a1:99:4a:c8:
         c4:a7:06:f3:b8:78:c3:69:ac:cf:62:94:43:c6:9e:26:09:e8:
         03:c6:de:9e:81:98:6a:1d:fd:94:37:9e:a9:8e:92:87:c9:27:
         10:57:5c:66:4f:6d:0d:68:6c:5c:1f:55:b6:7e:ad:79:67:0d:
         fa:25:01:a8:87:13:b3:61:ee:78:d8:9e:ee:c3:59:7d:93:d9:
         7f:53:5d:92:c1:e5:60:b6:b8:47:68:47:a7:9b:68:9a:7b:e7:
         d8:96:5a:5a:82:56:d2:33:cd:5c:7b:be:08:f8:77:59:96:89:
         5e:f5:f5:d4:a5:9f:a0:08:d6:44:81:fe:32:24:57:0c:61:d3:
         e2:0c:60:19:6a:17:2d:f3:19:2b:cd:8f:0d:e8:51:a6:d2:ec:
         09:6b:10:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:06 2025 by rpki-client