Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
File:                     z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft (raw, json)
Hash identifier:          FVy7Wb+t3i4a6+VruViH/XIOJQ2bVn6aTOkXDRd5ggE=
Subject key identifier:   CE:51:13:44:35:14:B8:D9:8C:EF:C4:98:49:1D:12:A1:13:C0:DF:64
Authority key identifier: CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06
Certificate issuer:       /CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
Certificate serial:       0194BCA9D62CE8F979201DFF78DE227149D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
Manifest number:          02C9
Signing time:             Fri 31 Jan 2025 14:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:34 +0000
Files and hashes:         1: z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl (hash: EEmaxEx4ehPuVrPXfwbe6CKKgQtWqutVx+mopOIx1EY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d6:2c:e8:f9:79:20:1d:ff:78:de:22:71:49:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
        Validity
            Not Before: Jan 31 14:00:34 2025 GMT
            Not After : Feb  1 14:00:34 2025 GMT
        Subject: CN=ce5113443514b8d98cefc498491d12a113c0df64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:67:2c:b6:8f:28:96:fe:ec:54:cf:5d:3c:
                    8a:7e:26:3b:8c:50:d9:a3:c6:ce:f8:f6:9f:a4:0e:
                    d3:40:88:ba:60:8b:8d:f4:1b:08:52:f9:8b:0b:67:
                    ed:0b:dc:62:89:81:de:4e:fe:e2:38:97:d3:ee:a5:
                    a3:cf:7e:7a:fd:83:1e:22:0b:03:7c:3c:b5:be:e6:
                    95:eb:95:0d:da:2a:80:0d:ce:e6:fb:1d:7f:c1:35:
                    64:ae:02:ad:e9:15:40:38:cb:80:c6:a2:5f:91:d2:
                    28:f0:2a:98:5b:93:fe:d0:d7:8a:7a:3b:26:54:5a:
                    ae:41:f6:b9:4f:11:23:49:79:ae:9c:60:23:a0:15:
                    fe:6a:8a:14:60:37:fb:fd:09:b6:10:ad:50:30:e7:
                    31:f4:3a:8d:a9:34:ac:c2:5e:50:12:aa:09:8e:40:
                    8b:22:31:3a:34:e0:ec:8f:f5:01:71:2b:e6:79:b5:
                    18:67:49:ff:af:d1:b1:53:35:c6:aa:3d:9b:e7:14:
                    5d:f2:52:4c:6f:1a:65:e2:eb:e6:2b:1e:b1:28:28:
                    dc:dd:73:1b:4c:7f:77:84:e8:0b:7b:cc:f2:75:7a:
                    a2:ef:84:f4:e5:02:2b:4a:c7:38:6e:8e:ab:83:50:
                    17:67:46:32:ee:ba:a1:68:83:ca:c3:43:4f:d1:30:
                    dc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:51:13:44:35:14:B8:D9:8C:EF:C4:98:49:1D:12:A1:13:C0:DF:64
            X509v3 Authority Key Identifier:
                keyid:CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:65:62:26:2c:82:dd:dd:1d:ed:82:70:bb:c7:f8:be:eb:2f:
         05:22:e8:03:dc:5e:a3:d7:3d:15:9a:47:46:0f:97:13:27:7c:
         1a:65:14:32:01:a9:92:a6:a1:ec:4f:41:86:42:c1:1c:52:31:
         2b:c6:68:2e:3a:30:d9:13:f5:94:88:8a:2b:4a:3d:58:11:2f:
         b4:51:dd:eb:23:8c:3a:19:38:00:13:2c:c2:b0:83:fd:b9:dc:
         b7:d4:e4:d3:db:7e:7e:fe:5d:af:52:2f:cc:c2:b8:52:98:a2:
         a7:b9:4b:b5:8e:da:23:58:aa:7d:26:65:00:39:46:e1:3c:15:
         ea:90:95:c0:17:68:9a:4d:2f:62:9c:5a:67:15:4f:b5:8d:18:
         8b:fd:20:3a:bc:2c:72:b7:3a:f5:21:fd:83:d8:12:0a:9b:9e:
         2a:83:a2:06:a8:5e:b0:ca:de:e2:4f:93:a4:96:0d:b6:40:63:
         fe:92:90:ce:19:9f:ac:75:67:ac:f6:dc:a3:bb:5e:84:30:57:
         c2:a9:43:7a:f5:ec:93:1e:96:2c:03:c1:d3:50:6f:bb:29:b6:
         f4:b3:c7:ec:ff:21:6b:ca:8c:dd:53:28:2a:60:c4:dc:97:64:
         b8:07:b0:66:70:52:90:38:5d:02:90:77:7e:37:c8:7c:1c:a9:
         a5:ab:7f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:43:22 2025 by rpki-client