Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
File:                     FocxkXFwxLgb7jUdBFXDLLrWOyY.mft (raw, json)
Hash identifier:          T20N+swGrp5B2ay8qHCbI+/omEiUuy683EEZvTLLb/0=
Subject key identifier:   C4:7F:83:13:CB:EC:37:9A:87:8D:4F:4E:8F:BF:14:99:E7:AA:C7:F3
Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26
Certificate issuer:       /CN=168731917170c4b81bee351d0455c32cbad63b26
Certificate serial:       0194BD17A8BF6F369769E9E6C96C174281C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft
Manifest number:          0B20
Signing time:             Fri 31 Jan 2025 16:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:31 +0000
Files and hashes:         1: FocxkXFwxLgb7jUdBFXDLLrWOyY.crl (hash: JG5nN5RHpofo5sSVmM2VPomghhJ8qlQLA+6bdtNYOjQ=)
                          2: LhUj1mCFxgCVgOclN_x_EPQsaaM.roa (hash: TwspggDMx9eKuIFMwLPIl1QzksuuFso9cmuKcnRQwY4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:a8:bf:6f:36:97:69:e9:e6:c9:6c:17:42:81:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26
        Validity
            Not Before: Jan 31 16:00:31 2025 GMT
            Not After : Feb  1 16:00:31 2025 GMT
        Subject: CN=c47f8313cbec379a878d4f4e8fbf1499e7aac7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:36:cb:87:ae:ed:80:52:15:d6:47:f1:10:
                    89:54:6e:1d:9e:f5:34:33:9c:a6:78:d3:5f:28:b9:
                    a3:56:79:83:44:6e:40:e5:6d:eb:1c:98:3c:23:ae:
                    48:e4:6a:e8:f6:04:59:fb:b5:9d:4c:33:2a:b9:e9:
                    4b:81:d6:c0:6a:a5:dd:95:c1:ba:f1:f8:4f:06:86:
                    a4:d8:4f:8b:a6:88:91:e3:08:c2:5e:d2:8f:93:26:
                    1d:46:45:4b:78:30:94:3d:95:8c:20:9d:58:58:c4:
                    cf:07:25:be:95:d5:21:cb:48:c1:b1:91:22:8e:83:
                    2b:81:51:2d:cf:41:83:59:98:92:21:f1:af:09:b8:
                    87:2a:d7:33:35:4b:24:a2:26:3d:87:46:26:2d:ea:
                    8e:5f:e8:d6:6e:1e:c5:da:4a:f2:5c:03:62:41:40:
                    f3:6b:2c:49:6b:2a:66:74:a6:05:b9:bf:19:a5:35:
                    e2:29:c3:82:6a:48:aa:0f:55:ee:73:a0:d4:71:13:
                    96:34:3b:70:56:6e:39:9f:0c:fd:40:01:d2:30:8e:
                    9b:f0:85:3d:3e:10:74:a0:b8:ff:87:2c:0e:78:56:
                    a2:66:61:11:7f:9f:5d:3b:a2:00:b2:8d:de:19:e5:
                    00:76:a4:f8:5d:14:76:1e:a6:9e:94:64:e5:58:28:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7F:83:13:CB:EC:37:9A:87:8D:4F:4E:8F:BF:14:99:E7:AA:C7:F3
            X509v3 Authority Key Identifier:
                keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:db:2e:2a:ba:87:c1:1e:93:9d:8c:f1:95:69:73:36:26:2f:
         f9:36:de:75:50:38:de:83:54:14:2f:c9:aa:55:00:1d:00:44:
         92:16:e5:72:25:ac:f6:6c:25:a4:69:91:4c:07:e1:15:fe:2a:
         9f:8c:20:3e:5a:60:9f:7b:9d:cb:23:6b:49:2d:e6:f9:69:75:
         f6:72:bc:55:91:ed:f0:dd:c0:bd:ce:cc:e0:30:aa:7b:1e:79:
         74:c0:34:26:3d:4b:2e:a5:32:b0:5e:9a:4a:25:0e:e1:f3:20:
         64:ac:97:d1:90:5e:42:3c:8e:ff:ac:4b:b5:94:2a:9e:62:00:
         3a:2a:8b:02:33:d6:66:70:c0:31:b0:30:82:92:6a:39:24:77:
         61:d8:70:ca:f4:86:bb:f2:15:f2:f7:6b:45:8d:3a:c0:a8:20:
         4b:58:0c:76:56:d6:c9:0a:b7:38:b1:a4:0f:2c:32:90:69:f9:
         91:48:f4:8d:af:5b:55:ce:c2:ce:19:5d:80:1d:cc:f6:85:38:
         48:28:57:5c:10:61:e3:47:d4:fc:0e:21:7f:35:bf:10:cb:db:
         54:89:67:08:1b:48:d7:02:0d:ef:5d:d6:84:4b:5d:b0:76:c8:
         24:b5:a2:8b:02:59:3f:c7:8e:2c:42:c1:a5:3c:4b:12:4d:64:
         89:a4:27:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:48 2025 by rpki-client