Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
File:                     QZV-DXwo4yonWu2yD4AjYbRb_1E.mft (raw, json)
Hash identifier:          /p7B30GTqlJoVwfENBElIpiCYRG+QseffDYHjFVZru4=
Subject key identifier:   84:81:AB:DB:2A:91:A1:11:90:8E:B7:DC:42:59:22:F7:5F:1B:C6:19
Authority key identifier: 41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51
Certificate issuer:       /CN=41957e0d7c28e32a275aedb20f802361b45bff51
Certificate serial:       0194BBCEDFD1846CA63779CFB16E74F433E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
Manifest number:          10BC
Signing time:             Fri 31 Jan 2025 10:01:24 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:24 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:24 +0000
Files and hashes:         1: QZV-DXwo4yonWu2yD4AjYbRb_1E.crl (hash: 9ZE5KjOucs2jSwj0Ya7rIKNy0PFqTrEqNM9UWqVTKDQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:df:d1:84:6c:a6:37:79:cf:b1:6e:74:f4:33:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41957e0d7c28e32a275aedb20f802361b45bff51
        Validity
            Not Before: Jan 31 10:01:24 2025 GMT
            Not After : Feb  1 10:01:24 2025 GMT
        Subject: CN=8481abdb2a91a111908eb7dc425922f75f1bc619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:81:56:46:93:90:87:bd:cf:36:cf:52:98:
                    6c:9e:b3:c8:cf:92:12:2f:16:88:51:d1:17:3e:4e:
                    6d:97:2b:02:8e:e2:4e:9a:71:94:a2:cd:70:a3:2a:
                    28:88:3c:42:76:3e:9b:00:8f:b1:75:7d:79:30:01:
                    ac:7a:e2:fc:46:c0:8b:66:a4:d8:5a:9b:51:e5:e0:
                    6f:b2:28:4d:a3:de:19:42:ac:e5:21:f9:fe:22:eb:
                    e9:74:17:2e:59:43:f6:02:78:67:23:b0:38:62:45:
                    0e:88:5a:36:f8:9d:54:6a:27:ba:51:2b:32:f1:9d:
                    23:9d:fa:40:1b:27:11:1e:0c:bf:82:f7:4b:77:25:
                    a2:84:af:f6:dd:84:ab:3f:b5:da:c2:5e:29:d9:63:
                    f6:6d:03:ac:64:e8:5d:ba:9f:dd:3e:cd:56:0a:cc:
                    05:c1:b4:ec:7f:fb:25:10:37:f2:12:fd:cf:68:42:
                    ef:8f:78:ac:c2:57:e5:3f:9d:6c:69:72:a5:13:ae:
                    a0:3a:ab:cc:3d:19:20:04:41:1e:d6:8a:ae:bc:73:
                    23:f3:11:81:2e:a6:04:3a:74:f0:89:93:4c:6e:82:
                    d8:58:00:dc:e4:bd:ec:24:ed:ba:b7:af:ca:a2:29:
                    d8:24:c4:a6:59:11:55:36:ff:bc:75:9c:c2:09:d8:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:81:AB:DB:2A:91:A1:11:90:8E:B7:DC:42:59:22:F7:5F:1B:C6:19
            X509v3 Authority Key Identifier:
                keyid:41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:33:7f:a1:52:45:8b:f2:18:f8:9b:c5:39:6d:46:bc:1b:0e:
         db:15:28:bf:36:cd:9c:ca:df:c3:9d:4b:09:6a:70:19:2c:01:
         c5:e3:b9:15:0e:74:14:27:eb:84:72:6e:1a:59:67:78:65:25:
         46:84:26:4e:67:4c:7d:d8:5d:b4:ec:64:14:12:ae:26:61:9d:
         06:df:c0:76:13:b6:36:47:bc:cb:26:08:2e:6f:82:63:cc:aa:
         44:27:1e:8e:12:b5:fd:1c:46:79:45:74:fd:a1:0f:d0:bd:24:
         dd:7d:db:72:b1:ef:6c:1f:32:7a:79:4a:0f:00:10:96:32:06:
         67:ff:26:a9:50:b6:ac:9f:01:51:6c:22:2f:f5:6c:c4:22:af:
         2d:86:e6:13:ad:65:19:43:54:79:3a:00:1f:d5:a0:dc:71:56:
         91:32:fa:a1:09:44:95:43:44:ee:0b:b0:6c:be:99:f5:61:1f:
         ba:aa:cf:4a:30:41:75:3e:1d:2a:ce:ff:8f:30:79:3b:0a:7b:
         33:db:65:e0:5f:76:76:d4:d7:39:4e:75:f7:ee:68:92:60:8f:
         c1:5f:01:04:6f:3c:76:ad:53:f0:2b:a2:7a:6d:e4:2d:d5:d7:
         46:8f:92:ec:90:fb:bb:e5:af:8c:3a:b4:57:04:a7:eb:6e:41:
         87:78:b2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:54 2025 by rpki-client