Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
File:                     flL6ttMgbrYKMduWxy2U_CQsCgg.mft (raw, json)
Hash identifier:          ghQ66mjECsmkvu0ndHbX4bJkVT0VQlp6p+mM8S5Tycs=
Subject key identifier:   F7:3D:DA:D6:83:43:9E:A6:28:AC:FA:8B:B6:1D:DF:B3:65:0B:5B:BE
Authority key identifier: 7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
Certificate issuer:       /CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Certificate serial:       0194BC72D445E2F8E5CBE76B6570D974734A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 13:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:29 +0000
Files and hashes:         1: flL6ttMgbrYKMduWxy2U_CQsCgg.crl (hash: 8dJ3h81l1rEmHClI99sKVaEwHS8i/syycsJZIEK+FWg=)
                          2: oR70fW7uVwWXm6EKAN8uqrlQkQ4.roa (hash: 0R/vI9KhNQCuJ8a8jzLTXA2DiQsUAT+t0yjMQ7W3gak=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:d4:45:e2:f8:e5:cb:e7:6b:65:70:d9:74:73:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
        Validity
            Not Before: Jan 31 13:00:29 2025 GMT
            Not After : Feb  1 13:00:29 2025 GMT
        Subject: CN=f73ddad683439ea628acfa8bb61ddfb3650b5bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:64:16:da:44:5a:53:21:67:78:31:86:d3:6c:
                    ca:53:59:bc:f2:eb:3d:ae:ac:b0:07:1f:41:6e:d7:
                    af:46:b7:14:9b:e3:61:0c:38:41:b9:36:45:3f:dc:
                    11:2c:a8:b5:e9:b0:4b:2d:3b:86:4f:2c:f0:ef:ee:
                    5b:84:4a:5d:bf:55:cb:92:15:e1:0c:e4:9b:aa:ff:
                    40:54:d1:60:a7:90:c2:a2:cf:67:56:9d:9c:07:9b:
                    ab:0d:ec:6d:7f:01:69:9c:2e:8d:f1:f1:37:2e:60:
                    01:17:60:83:f7:cb:d0:72:9e:b4:a5:bd:40:5d:1d:
                    bd:f4:d4:37:b1:f1:65:3a:a7:34:00:d7:90:1b:af:
                    79:70:4e:78:8e:3f:51:3e:fa:b6:40:17:b2:51:08:
                    c4:0a:d1:87:a0:d1:eb:c0:2f:10:28:02:6e:36:46:
                    ce:e6:5f:c6:f7:df:fa:1f:84:ab:fe:bf:5f:06:ba:
                    8a:68:f9:b2:9d:9c:3c:90:88:fa:a6:96:94:77:77:
                    07:7f:71:85:cd:de:0c:18:93:89:a9:6a:29:67:9a:
                    3e:cf:66:df:0c:e8:82:90:4e:94:ee:17:f3:eb:19:
                    00:b5:74:70:72:e5:89:c1:38:0d:2d:af:ee:97:3e:
                    ac:99:03:a9:e7:c5:ff:15:de:0c:cb:02:b3:9e:34:
                    cf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3D:DA:D6:83:43:9E:A6:28:AC:FA:8B:B6:1D:DF:B3:65:0B:5B:BE
            X509v3 Authority Key Identifier:
                keyid:7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3e:bb:d2:a4:63:b2:95:82:b7:e6:80:44:c8:3a:cb:12:6f:
         9e:64:92:f0:86:82:36:31:e6:31:51:d5:e0:47:78:a5:6d:00:
         25:49:f5:9d:9e:da:d0:f0:d1:70:a9:19:07:86:00:de:8d:71:
         91:cb:18:fc:e0:98:10:f3:8c:3f:ca:50:b0:49:5d:62:06:61:
         b8:8b:3c:6b:5d:cb:8d:bc:4b:2d:0c:56:0a:90:bc:80:c4:cc:
         0d:de:80:d9:d8:0b:83:4b:96:0e:56:fd:b5:1a:4a:8a:23:26:
         f4:60:83:80:af:10:18:ff:6c:03:c7:80:73:ff:d9:6e:30:0b:
         6a:57:97:ff:0f:03:c9:ca:6f:f8:cc:69:67:a3:af:5b:83:d7:
         b8:a0:0d:14:f7:30:ce:b2:81:8b:5f:2f:df:a7:f0:42:6a:66:
         06:b8:9d:c1:9f:d8:91:7f:6c:4c:cd:c3:ad:77:47:6d:7b:98:
         5f:ee:d8:ae:09:ed:25:6f:22:b4:ae:80:52:db:51:35:f6:a7:
         71:d7:af:03:64:3e:cc:15:6a:40:77:a3:37:a1:42:45:d9:80:
         35:b6:b8:21:3f:ca:b5:e6:91:48:80:f2:87:9c:53:7e:67:12:
         16:1e:ea:fd:2d:03:7e:2c:a1:d2:bc:2b:90:97:27:10:61:09:
         80:cc:f0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:50 2025 by rpki-client