Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
File:                     eXqQW0595YVil_bgOmViXeIsQvM.mft (raw, json)
Hash identifier:          6TwzE0BsodyGwrhV8ToDo9nhdE1wIbPnJcwQHl67lcM=
Subject key identifier:   79:8B:10:52:EF:00:BD:34:9B:F4:B8:B2:AB:D3:A4:F0:C2:D6:41:E1
Authority key identifier: 79:7A:90:5B:4E:7D:E5:85:62:97:F6:E0:3A:65:62:5D:E2:2C:42:F3
Certificate issuer:       /CN=797a905b4e7de5856297f6e03a65625de22c42f3
Certificate serial:       0194BBCEA76F402C713041E54BDE2A270D0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft
Manifest number:          0BF5
Signing time:             Fri 31 Jan 2025 10:01:10 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:10 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:10 +0000
Files and hashes:         1: eXqQW0595YVil_bgOmViXeIsQvM.crl (hash: 5h2/QK9CpJ5MIc/HGN4mkcTJ0RmvJJiB4/fw+Rja60c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:a7:6f:40:2c:71:30:41:e5:4b:de:2a:27:0d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797a905b4e7de5856297f6e03a65625de22c42f3
        Validity
            Not Before: Jan 31 10:01:10 2025 GMT
            Not After : Feb  1 10:01:10 2025 GMT
        Subject: CN=798b1052ef00bd349bf4b8b2abd3a4f0c2d641e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4f:87:ae:3c:cc:1f:61:0d:9a:44:8b:e8:eb:
                    6e:aa:84:7d:5a:b7:97:6d:e7:5a:2f:5a:9d:03:49:
                    09:a7:b6:a9:75:47:b9:a0:d9:7a:21:3f:86:c8:f1:
                    e8:22:07:35:31:0d:cc:ba:44:38:64:6a:55:15:7e:
                    63:81:58:93:5f:09:02:9a:19:d0:04:fd:d9:22:47:
                    42:af:17:89:b7:36:e9:da:8e:f3:29:dc:34:71:d0:
                    c3:34:ac:12:19:92:24:85:3e:c7:d6:1a:80:0a:59:
                    cf:b2:2f:fa:2d:47:7f:70:ea:d0:b8:89:6f:17:2a:
                    ec:da:82:bf:fb:66:9f:7c:c2:dd:ab:47:ab:ae:a2:
                    84:bf:68:94:f9:bc:20:3f:44:b0:48:46:aa:88:e6:
                    76:0b:63:de:99:57:45:5a:84:09:76:d2:4b:14:3d:
                    01:65:79:34:a1:5a:aa:30:09:97:ef:c7:e3:3a:95:
                    31:44:a4:9f:fe:90:14:f6:b5:c1:ae:9f:40:a7:ee:
                    10:8e:96:f2:21:90:d3:63:95:35:ac:08:25:44:b4:
                    5f:2b:8b:c8:9c:14:d7:f3:8f:6e:89:d5:a8:24:d6:
                    bf:3e:09:53:6d:ab:90:82:ea:ea:fd:51:91:4d:70:
                    6b:a3:12:4b:1a:62:ca:b6:98:d5:1f:74:c9:d7:f7:
                    a0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8B:10:52:EF:00:BD:34:9B:F4:B8:B2:AB:D3:A4:F0:C2:D6:41:E1
            X509v3 Authority Key Identifier:
                keyid:79:7A:90:5B:4E:7D:E5:85:62:97:F6:E0:3A:65:62:5D:E2:2C:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXqQW0595YVil_bgOmViXeIsQvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/069be4-41c0-4312-94dd-f697c2ea6767/1/eXqQW0595YVil_bgOmViXeIsQvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:1c:5b:c8:d4:2f:38:67:87:66:b5:c3:66:92:8c:cb:91:a7:
         b3:b4:05:c0:1d:c7:0f:87:f9:24:6f:cc:d9:00:82:dc:f8:f3:
         3d:64:9b:8f:00:28:02:c4:50:a7:94:f5:f2:a6:02:a8:e1:2c:
         be:71:14:5d:1f:fa:da:e3:35:87:9f:a3:1e:ea:c2:d4:68:f5:
         72:1e:cf:3a:fd:83:8c:2a:62:a5:e3:d8:99:95:8e:6b:de:74:
         4c:13:77:1a:a4:32:63:76:01:19:61:0a:1c:c9:f6:34:1c:80:
         cf:92:23:5c:d1:09:9b:93:99:8f:10:c3:5b:06:6b:22:c6:78:
         4a:68:25:f2:ab:cd:1b:d5:80:c9:81:e3:27:99:b6:0a:70:8d:
         ad:c4:8b:71:ca:a8:a2:68:4f:5a:47:26:93:45:31:0c:a2:94:
         0e:b4:01:04:b3:6c:d3:c5:fe:d8:90:c0:bb:ab:94:86:69:31:
         34:5a:18:85:fe:b1:ea:9d:be:76:55:a4:fe:5f:e3:43:02:d2:
         9b:64:23:ef:3c:73:57:da:36:29:f2:51:72:ab:4f:1a:d5:0c:
         51:7c:9e:ea:86:61:c1:b4:46:de:fe:ed:57:c5:0a:0d:c2:00:
         03:27:a5:8f:79:5a:63:3f:25:94:9f:ab:75:25:43:c5:76:0d:
         17:a8:6c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:11 2025 by rpki-client