Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
File:                     eO-oRu6OjAecoehyv-BfngT3_-8.mft (raw, json)
Hash identifier:          qXlTmp9eK19uldfT4i/V4sEUyOXtuZ/JobrqDyQuIko=
Subject key identifier:   06:A1:E5:28:2D:17:05:D6:CF:F1:77:B9:98:DD:74:F9:47:07:B8:D0
Authority key identifier: 78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF
Certificate issuer:       /CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
Certificate serial:       0194BBCE5583B07477AB757D02A334F51CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
Manifest number:          0FB7
Signing time:             Fri 31 Jan 2025 10:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:49 +0000
Files and hashes:         1: eO-oRu6OjAecoehyv-BfngT3_-8.crl (hash: XHjHY1GKpu8JE3bFB01N2qKL2OjpO8LALCJRvd49Ylw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:55:83:b0:74:77:ab:75:7d:02:a3:34:f5:1c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
        Validity
            Not Before: Jan 31 10:00:49 2025 GMT
            Not After : Feb  1 10:00:49 2025 GMT
        Subject: CN=06a1e5282d1705d6cff177b998dd74f94707b8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6f:0f:80:21:a2:a3:72:fb:24:66:f8:5d:ca:
                    7c:77:20:86:21:85:9b:f4:0f:14:1b:0d:d7:93:e3:
                    8e:5f:2d:70:14:c6:f4:e0:d6:9e:d5:47:37:2f:63:
                    52:9e:10:c7:2f:e9:53:0f:6a:30:c6:c3:d6:56:72:
                    5b:59:36:96:94:b5:1e:8d:46:92:85:fa:7f:a5:b5:
                    ad:32:3b:19:45:7a:51:a9:ed:df:e1:5c:cc:43:62:
                    8c:83:92:71:6e:0f:2c:03:9d:15:c9:62:36:6b:88:
                    fb:2d:e2:97:20:d5:6c:54:4a:e5:d1:68:a3:da:db:
                    d3:8e:99:50:f7:8e:65:0b:14:dd:4d:37:f3:d9:b7:
                    45:c2:28:e5:14:62:52:aa:30:13:9a:f8:6b:af:61:
                    c7:9a:3e:f9:0f:31:2f:24:0c:d5:14:86:95:d0:7f:
                    9c:b2:03:3f:92:4d:cf:92:b8:10:41:08:b4:0e:99:
                    39:f4:56:db:fd:9f:bf:ca:44:b6:52:ba:3b:28:fa:
                    62:fc:6d:99:90:e6:0b:b7:c8:ac:b2:1e:f7:ef:c2:
                    ce:b1:ba:a7:16:63:f1:f5:11:df:0f:31:62:9b:27:
                    ad:fa:40:39:fc:fc:ca:55:1d:5d:45:a8:e6:19:90:
                    74:b8:15:ee:7d:36:fe:c4:44:fc:ed:f8:77:dd:38:
                    8f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A1:E5:28:2D:17:05:D6:CF:F1:77:B9:98:DD:74:F9:47:07:B8:D0
            X509v3 Authority Key Identifier:
                keyid:78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:cd:d7:39:64:1d:45:2a:ae:3a:35:dc:52:1b:8e:a0:8f:36:
         e9:b2:ba:5b:b6:c2:c8:5f:08:1d:ed:62:b0:e8:ec:6d:05:1f:
         9f:af:06:cd:82:fe:cb:7c:3d:8c:97:e1:e2:56:b3:f5:36:fc:
         76:8e:be:9e:0f:53:36:91:36:f9:4a:4d:00:6f:bf:e0:da:4a:
         4d:a9:7b:d5:44:10:5b:4d:05:15:a3:19:a3:90:4b:85:92:a7:
         7a:47:07:b6:cc:fd:a0:05:06:e1:bd:82:91:a0:90:02:de:43:
         d3:c3:fa:c6:0a:0b:58:52:f4:e5:a2:71:d2:f9:d5:46:20:e5:
         92:f4:2b:2a:1a:22:e7:75:b0:c4:67:f5:e9:b8:a9:49:4e:ac:
         b1:d2:b7:6b:eb:89:f6:9e:ac:f0:73:95:cc:87:57:1a:bb:75:
         56:f3:59:85:3d:cf:d4:7d:64:dd:46:2f:9d:b9:50:10:46:f9:
         99:8d:aa:bf:d4:18:3f:f5:8f:42:ad:db:0d:ad:d2:a1:d6:23:
         3e:45:6c:26:0c:33:a2:3b:fe:a2:83:62:28:e5:7c:dc:1e:18:
         0f:f8:72:83:82:49:b0:6c:58:0b:fc:6b:34:68:37:8b:24:eb:
         4e:9c:2d:b8:84:a6:e7:3b:b7:2f:13:13:1e:6b:70:53:fe:d4:
         75:53:44:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:28 2025 by rpki-client