Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
File:                     eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft (raw, json)
Hash identifier:          sNKJykjla7Fb/3O0dw6Rb9Nk03EMkt0/FUETeQkwxY4=
Subject key identifier:   DE:57:50:EF:0A:1F:0F:30:97:B6:3E:E0:CA:A0:47:CA:02:71:91:2C
Authority key identifier: 79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC
Certificate issuer:       /CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
Certificate serial:       0194BCAA31C7173AAF8DAD6833426F3B78F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
Manifest number:          12AF
Signing time:             Fri 31 Jan 2025 14:00:57 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:57 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:57 +0000
Files and hashes:         1: eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl (hash: AXTdMNfkIW3Fqd1vnJoCGem/SCzvtUQlN6qIQh4WcjE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:31:c7:17:3a:af:8d:ad:68:33:42:6f:3b:78:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
        Validity
            Not Before: Jan 31 14:00:57 2025 GMT
            Not After : Feb  1 14:00:57 2025 GMT
        Subject: CN=de5750ef0a1f0f3097b63ee0caa047ca0271912c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2c:57:6c:84:4e:06:88:c0:bc:aa:0d:cf:d1:
                    30:b2:77:b4:8c:15:50:83:32:d6:d0:77:40:76:6c:
                    50:62:3a:df:36:a0:5d:f5:95:8b:b3:94:bb:9e:79:
                    8f:96:93:16:2f:91:07:21:83:84:b8:1e:b4:2e:1a:
                    08:4d:00:d8:81:df:c8:1a:24:9d:e1:f0:cf:43:0f:
                    29:a3:b4:80:53:e1:21:48:eb:a9:1e:70:40:02:b9:
                    63:5b:1f:1f:37:c2:f3:7a:50:52:d9:a2:92:59:3d:
                    42:7e:fc:64:36:79:c3:24:c0:78:b8:f8:e7:f0:d8:
                    37:65:74:52:29:64:b6:ce:cb:45:f4:cf:75:94:28:
                    ac:40:b3:9c:19:d5:5d:b0:27:c7:79:7d:d5:96:23:
                    64:c8:a6:b7:c5:1b:2c:28:05:80:ae:e9:1c:03:f5:
                    09:7c:6c:f6:93:98:e6:21:2d:50:fa:69:82:3d:c8:
                    fa:69:83:fb:b3:31:bc:11:50:86:25:45:33:bc:36:
                    59:b5:2c:61:26:f7:16:12:0b:ae:3d:3e:53:65:f5:
                    2f:8f:13:28:8f:b4:59:fd:b6:cf:95:5d:8a:41:8c:
                    9e:c2:ff:80:58:d2:73:e6:70:78:31:4d:20:b0:60:
                    f4:e3:42:1a:1a:75:fb:99:2f:8d:34:84:ba:e0:7d:
                    59:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:57:50:EF:0A:1F:0F:30:97:B6:3E:E0:CA:A0:47:CA:02:71:91:2C
            X509v3 Authority Key Identifier:
                keyid:79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:33:c0:ec:78:36:3c:85:d0:8d:d2:5c:a9:d8:f6:13:b2:22:
         21:81:d4:a7:76:35:34:1b:aa:7a:65:d7:c7:2f:8b:f4:25:d5:
         0d:32:86:2a:be:b7:d8:09:c2:b0:96:06:ac:f7:48:75:f5:71:
         7e:3e:22:77:29:b9:b8:89:7e:91:36:0c:8c:8e:54:70:78:df:
         b0:a2:fc:40:13:69:fb:f5:6a:38:fa:74:70:0e:a8:5e:0f:51:
         3e:77:d5:73:6d:91:8b:e6:5c:78:17:af:3e:70:53:ea:31:3e:
         43:ff:66:16:57:be:09:49:32:12:ce:24:c8:39:32:3c:92:fd:
         05:ed:12:6c:92:a0:0f:50:13:1a:4c:c2:51:35:db:9a:67:a0:
         f2:fc:23:43:8f:49:26:f9:83:7f:27:b9:fe:3d:f7:bf:fc:d7:
         95:ca:c8:34:f7:04:9a:cf:48:68:4b:4a:e2:18:92:ce:6d:64:
         22:84:32:f8:91:44:66:a6:65:34:11:c6:fc:75:19:98:4d:41:
         0c:ab:06:ac:97:43:04:a9:1b:f2:1c:bd:f3:ec:1b:a4:53:14:
         49:2e:6d:93:47:ff:99:e9:99:9e:84:3b:9b:21:79:70:b4:7d:
         05:8d:e3:56:83:d2:0c:93:41:f2:0c:6b:ec:e6:6a:3a:9d:d3:
         45:f6:53:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:06 2025 by rpki-client