Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
File:                     7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft (raw, json)
Hash identifier:          kwJlUckblmrgZkISNyTbU/kWvYz67lY8Zt/AqdNZr50=
Subject key identifier:   29:20:57:1A:1E:2F:7F:E4:51:68:F2:16:8A:60:87:0C:72:75:8D:99
Authority key identifier: EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C
Certificate issuer:       /CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
Certificate serial:       0194BD858892EF182D735B3B531EC1D833A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 18:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:32 +0000
Files and hashes:         1: 7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl (hash: 9yUs9tIAy2f9eRWgNKHfNTea+YnoztqbmtB+Cm1XceA=)
                          2: iwLZFs5miznhcY2Sn-yJxvK-W5Q.roa (hash: xdKq+/ODUXejhJKyI2Ol9rOhJg9XTGoQZtrMhSTgxpw=)
                          3: pVu2j0EJCMMdBZE3gYcjdze0MJw.roa (hash: smTFngwmoe2BMrTIAR1rWR3m1Bo7KfOKZGk2cxj/sgk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:88:92:ef:18:2d:73:5b:3b:53:1e:c1:d8:33:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeac122a92917cf953ff5c5de6a1ffe1199f122c
        Validity
            Not Before: Jan 31 18:00:32 2025 GMT
            Not After : Feb  1 18:00:32 2025 GMT
        Subject: CN=2920571a1e2f7fe45168f2168a60870c72758d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:3e:f0:3d:27:1a:fe:61:05:3e:f5:0b:f4:
                    b4:9b:b9:0c:f3:62:1f:b4:62:76:b1:eb:1b:ab:36:
                    59:a1:fb:0f:69:d9:be:64:76:84:a1:ee:78:92:6a:
                    bf:66:57:77:d8:0c:71:b2:7a:c8:29:06:1a:11:7d:
                    7c:1d:30:99:0c:8e:97:d8:7f:3a:fc:89:37:55:a1:
                    b0:f1:73:4f:bc:1f:00:51:50:9a:26:1f:ce:eb:fb:
                    22:2e:27:99:8a:7e:1e:79:f4:5b:00:17:fa:2a:ed:
                    16:6d:24:05:18:da:3b:1a:61:92:e9:6b:69:86:93:
                    6b:63:e1:c7:1f:c8:8e:5a:d1:44:ec:1a:14:49:31:
                    e0:a4:bb:27:fe:e8:62:ee:95:7e:1e:c2:7b:40:12:
                    f2:85:b7:55:c5:6c:0b:98:f7:ee:3b:f5:3d:6d:46:
                    f1:a6:cb:b2:55:75:5b:97:a2:19:7a:e4:b6:1b:32:
                    82:57:60:e6:7b:55:0e:c4:40:72:b7:eb:58:9f:e7:
                    a2:b6:f0:f7:ef:6c:b9:43:3f:95:1a:9e:49:6e:71:
                    72:b7:b2:58:41:98:63:48:3a:b7:bb:67:a6:ec:6f:
                    df:09:49:b6:9c:31:2c:28:18:13:41:f3:51:ae:ec:
                    29:35:6e:19:91:52:2a:d4:03:e3:16:ac:9f:39:13:
                    a1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:20:57:1A:1E:2F:7F:E4:51:68:F2:16:8A:60:87:0C:72:75:8D:99
            X509v3 Authority Key Identifier:
                keyid:EE:AC:12:2A:92:91:7C:F9:53:FF:5C:5D:E6:A1:FF:E1:19:9F:12:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qwSKpKRfPlT_1xd5qH_4RmfEiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ee451-f626-4324-98fe-41d2cc7b7034/1/7qwSKpKRfPlT_1xd5qH_4RmfEiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:78:56:f5:b3:ae:f8:9b:b1:37:a8:30:f6:48:ea:93:65:ac:
         21:d2:0a:e4:09:33:8e:12:85:a6:67:60:4b:42:a0:dd:20:0e:
         e7:59:dd:e1:e2:e2:fa:18:b6:56:5f:f7:0a:e5:64:7e:1f:37:
         4e:20:ff:bd:87:22:e4:98:0b:75:2a:c0:48:6b:f3:74:d5:0e:
         19:f0:87:0b:52:10:cf:ab:58:40:29:9d:c7:50:3c:1b:27:b5:
         0d:62:50:ea:fe:aa:72:0b:30:d9:23:9e:d4:12:cc:47:4c:a8:
         6e:dc:a1:06:56:18:77:99:02:a2:b0:ac:31:12:26:22:75:6b:
         01:51:75:3c:02:f8:30:67:06:ab:84:36:e4:ad:0b:aa:e4:0b:
         61:ca:8e:bb:7d:f0:f3:d7:40:ba:cd:a7:6a:82:6b:ed:27:81:
         fb:0e:7b:0a:71:0f:5b:30:f0:3a:f3:b1:79:55:f3:aa:27:7e:
         c9:58:d2:e6:f0:a9:d7:92:8c:36:a3:92:12:40:1d:4e:2e:44:
         e7:dd:f5:40:bd:54:7f:70:00:99:93:be:14:75:a3:82:2a:b2:
         ac:33:c6:f5:78:1d:b9:49:60:f1:79:05:b1:92:78:aa:0a:64:
         83:a8:80:91:f9:3b:d9:20:62:b2:84:5a:4f:ba:80:79:79:16:
         95:04:91:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:16:52 2025 by rpki-client