Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft
File:                     EqosHuQ0mghsdpATpC6LSsK6Gb8.mft (raw, json)
Hash identifier:          Uxjshh128JkVNYRVyHhOZIzv/iTWDh/OC8LciluuXZU=
Subject key identifier:   4F:70:D1:16:FB:C1:07:44:B0:E7:BA:F2:3A:AF:66:34:EC:C5:14:13
Authority key identifier: 12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF
Certificate issuer:       /CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
Certificate serial:       0194BC73227081DD821FA353A439537E987E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft
Manifest number:          13BC
Signing time:             Fri 31 Jan 2025 13:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:49 +0000
Files and hashes:         1: EqosHuQ0mghsdpATpC6LSsK6Gb8.crl (hash: 5hs/Y5z9XpVSTlLpvTedzxDAFKtIOY7glG5SbmTZhDE=)
                          2: dHkrhJd3NT0_kYIKw0jfO38dXYQ.roa (hash: 2ty1voZTaeGxLdtc1mMuAWwNMar29AXn22fPjzO6Bio=)
                          3: iaMRdP2RyDT-6nSIejme8ejtlz0.roa (hash: w6co8/yr5pK0Ot58oo5ftwFcerLdy7XppbhZMwkZj3M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:22:70:81:dd:82:1f:a3:53:a4:39:53:7e:98:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
        Validity
            Not Before: Jan 31 13:00:49 2025 GMT
            Not After : Feb  1 13:00:49 2025 GMT
        Subject: CN=4f70d116fbc10744b0e7baf23aaf6634ecc51413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:c7:c4:5a:14:74:94:fa:0e:a3:9f:a0:5f:
                    e7:f6:50:d7:d5:68:a2:7e:aa:37:1f:e0:07:0c:4c:
                    5b:92:ec:58:ea:7b:d2:9b:15:1c:f8:ac:d2:e5:dd:
                    78:6d:08:37:ef:62:dd:88:0f:5f:d9:f5:90:6d:e6:
                    41:f0:87:a0:30:d2:da:25:c5:13:3f:ef:cb:61:c8:
                    71:75:19:03:ae:49:e5:3e:3c:84:a0:4a:10:6d:60:
                    7c:35:74:cf:98:28:81:da:20:f5:11:d9:69:4e:72:
                    1c:62:d7:b2:7c:54:20:f6:f4:6a:18:4b:ba:0f:44:
                    da:f0:c1:bd:ab:70:f5:de:8d:90:c3:e3:d6:c1:91:
                    41:8b:76:cf:61:bf:a4:34:65:32:9a:fb:2a:59:88:
                    e5:a2:13:9f:6d:7b:8f:70:0e:34:92:19:4b:f9:6f:
                    08:a3:20:44:c4:5f:f0:65:20:bb:e1:f5:ba:6a:19:
                    d1:7f:d1:57:b5:b6:ea:e4:33:cf:8e:c6:61:79:65:
                    16:91:55:b4:25:0f:87:1a:86:ef:33:e7:48:55:d8:
                    6c:ef:3a:e4:ad:b4:db:13:7a:4b:f6:88:31:92:fa:
                    c3:be:8d:50:8f:99:ef:f7:23:59:a1:8a:ad:88:c7:
                    03:b2:84:d6:4e:79:54:c1:d8:01:05:69:0f:86:0b:
                    c9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:70:D1:16:FB:C1:07:44:B0:E7:BA:F2:3A:AF:66:34:EC:C5:14:13
            X509v3 Authority Key Identifier:
                keyid:12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:22:ce:4c:6c:c9:f5:96:07:60:10:18:5c:ba:fc:6b:d9:65:
         c2:5e:9a:3f:22:1c:61:c3:26:75:a1:df:df:9d:e2:d2:d0:85:
         5e:02:f5:40:ad:72:11:88:74:4c:94:bb:59:43:3d:ee:54:5c:
         ea:88:fd:f4:86:8f:40:22:96:6a:81:bc:47:81:cb:39:aa:f6:
         c3:e9:3e:e4:81:1d:c5:a1:0b:7c:81:e0:11:95:4a:6d:f8:0b:
         b5:b2:20:e7:b0:1a:fa:0f:db:41:d0:12:0b:39:4e:cc:61:5b:
         6d:c7:33:5d:3a:43:03:34:76:14:d1:31:31:8c:54:01:29:d1:
         01:cc:e0:5f:7a:59:29:79:5a:80:25:8f:f8:bf:65:7c:e2:ce:
         e5:12:e9:bb:da:5f:28:91:57:06:f7:62:1f:8d:1e:69:19:cc:
         ef:8c:73:15:0c:07:53:e2:08:ff:1e:3b:0b:99:48:15:a2:a9:
         d5:f4:a2:48:4d:aa:9a:79:6f:3e:4d:a4:19:ef:24:18:14:7c:
         1f:36:c5:92:27:a7:29:bf:06:d1:67:f8:e7:60:c8:4b:8c:d1:
         b8:b7:77:df:5b:ce:a3:f6:8b:b2:bc:49:c9:58:76:5b:f4:2f:
         78:a1:c9:fb:1c:45:24:8c:67:c1:c3:cb:aa:12:e0:d3:98:43:
         71:fc:ca:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:53:16 2025 by rpki-client