Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
File:                     FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft (raw, json)
Hash identifier:          UxTsXVwitqCnl7NAGY3guUy8YLdebNyrrHV9skbi+zE=
Subject key identifier:   DB:A9:25:36:E1:CF:29:64:D5:52:14:47:8C:90:DE:C2:02:9F:98:EF
Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
Certificate issuer:       /CN=16914c51d031411c1340171593603163c3d4a08e
Certificate serial:       0194BD4E90A88E7775282240F0F1FAF0C4A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
Manifest number:          DD
Signing time:             Fri 31 Jan 2025 17:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:30 +0000
Files and hashes:         1: 8ERPvpxKfVBfAUigys2-PiTFfqA.roa (hash: KAiZ9xkRQ32j6xO0jLEnhDznPnUl1zJBNWjMk46qfE0=)
                          2: FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl (hash: 14A0Jfih2+5f9FNzBuvf5DYQDysNr9GrkdJHMbZ0O1E=)
                          3: gJVc1ED6fXAztZrZVaBt7sRVw7s.roa (hash: NuxZCt7HFtHNaqj3vrIg4m4RXf+ibNz9HPakUOz5CxM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:90:a8:8e:77:75:28:22:40:f0:f1:fa:f0:c4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16914c51d031411c1340171593603163c3d4a08e
        Validity
            Not Before: Jan 31 17:00:30 2025 GMT
            Not After : Feb  1 17:00:30 2025 GMT
        Subject: CN=dba92536e1cf2964d55214478c90dec2029f98ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:83:7f:6f:2e:e2:aa:42:3d:bd:3e:0d:7e:57:
                    88:fe:60:16:9b:d1:ab:a1:82:ef:a8:c9:93:d0:ef:
                    ee:93:2e:be:2c:dd:82:d3:1a:04:33:af:fe:e9:3b:
                    8b:87:9a:79:ef:a0:1d:a0:c7:fb:46:39:97:c5:0b:
                    59:da:68:95:c7:01:5f:04:f6:ea:93:6f:b1:cd:4b:
                    df:30:b4:7c:fa:fd:68:05:0f:6d:7e:2d:86:5e:67:
                    90:e5:99:65:76:64:de:7e:f5:25:0c:45:1f:94:76:
                    93:3f:78:8a:0f:cb:15:3e:a1:84:79:38:75:b2:22:
                    29:7c:31:18:a4:ac:e4:1f:be:05:c9:b6:05:69:d8:
                    ab:12:3f:76:a8:4c:11:75:c0:02:a0:85:21:f2:bd:
                    83:b3:75:4f:45:13:62:49:d8:97:9c:6f:9a:49:53:
                    d9:a5:75:a7:04:52:99:56:3d:0f:4d:77:e7:1e:19:
                    c2:9c:b0:83:b3:9c:a3:62:3f:e8:41:b0:66:97:09:
                    80:66:ab:a4:a8:a0:f4:a1:c6:91:d1:13:8e:35:fd:
                    23:63:38:40:7e:cd:3a:9c:58:5f:0f:a8:7a:e7:49:
                    22:74:4b:91:81:60:fe:ed:06:1c:2f:c1:9d:19:30:
                    da:84:7e:9a:31:f8:bd:4d:49:7a:20:59:dc:34:ea:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A9:25:36:E1:CF:29:64:D5:52:14:47:8C:90:DE:C2:02:9F:98:EF
            X509v3 Authority Key Identifier:
                keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:72:89:80:29:09:b5:42:1e:a8:a1:85:4d:56:6f:9a:cb:ce:
         65:be:34:f5:80:42:66:d7:4e:05:58:12:e3:ad:7b:2f:4a:25:
         ec:bc:e3:dc:7a:d6:fe:d8:05:e3:ef:ad:47:43:52:5b:b4:6a:
         cb:06:3a:b7:01:72:47:78:ee:bd:c2:49:7b:36:b8:8f:ec:bb:
         94:b4:82:e8:a8:45:2b:83:61:68:c5:34:7c:0d:da:9c:83:6e:
         d7:b9:0f:4f:ba:30:43:a5:b0:22:cb:15:14:d3:12:8a:26:b0:
         e5:cb:b3:33:8f:4a:b1:ec:29:f8:c0:11:8e:d1:da:3e:02:b3:
         31:87:19:fd:8f:62:a4:7d:6f:48:5a:e8:3a:4b:02:e1:d9:a0:
         b4:4e:07:0d:43:6b:d9:f6:9c:f8:d0:e6:62:bd:62:ed:65:ba:
         63:f6:74:c1:8f:fa:5c:da:3c:41:2e:9e:80:4d:03:d1:4a:e5:
         bc:83:f6:74:22:da:f3:1f:e2:10:c5:d1:2e:c6:6c:f5:3d:a7:
         01:9e:50:e0:18:3d:39:c1:5b:3f:b2:14:71:59:dd:17:4a:19:
         ea:b4:80:b2:97:62:44:b6:06:36:d3:9a:39:f2:49:b1:a3:e1:
         da:15:66:da:3b:1f:dc:75:1e:5e:5b:ed:37:20:70:e2:32:d8:
         7f:d3:5f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:18 2025 by rpki-client