Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
File:                     eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft (raw, json)
Hash identifier:          HlR6PK5j+gMno+uCrox0qmIu9f1yOLMusLxwog2eZsg=
Subject key identifier:   35:B2:7E:8D:94:ED:9C:3F:43:F2:DD:A3:46:37:5F:1C:A9:12:0C:A5
Authority key identifier: 7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A
Certificate issuer:       /CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
Certificate serial:       0194BD17D234ACD0AA4A215074C09632CFF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
Manifest number:          045E
Signing time:             Fri 31 Jan 2025 16:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:42 +0000
Files and hashes:         1: eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl (hash: kn6/LDnsyBARzq0tIiKgRo5JL3V0895AX7dcCXu7r8s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:d2:34:ac:d0:aa:4a:21:50:74:c0:96:32:cf:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
        Validity
            Not Before: Jan 31 16:00:42 2025 GMT
            Not After : Feb  1 16:00:42 2025 GMT
        Subject: CN=35b27e8d94ed9c3f43f2dda346375f1ca9120ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:62:80:15:46:21:ea:1c:64:0a:de:e2:34:
                    7d:94:7f:99:ef:3c:19:75:a3:cc:66:f2:ec:87:8b:
                    f8:40:42:08:93:d3:6e:58:6f:3b:93:12:66:e4:3e:
                    b3:84:c0:17:a6:6d:de:61:c3:07:5a:9c:62:52:0f:
                    0c:6c:de:9b:bc:1b:08:68:98:6a:fa:23:19:85:82:
                    f2:b7:85:6f:7f:a7:11:ef:65:c0:c3:1d:05:00:fc:
                    15:17:02:4a:38:4f:ef:90:8c:c1:7a:70:e3:a9:8d:
                    b3:04:75:b6:5a:97:b6:3b:74:37:81:06:95:50:18:
                    03:94:f2:70:a0:7d:b0:57:f9:2e:e3:d4:ab:53:9f:
                    05:32:88:56:75:ba:fe:e0:6b:da:12:fa:e7:85:7f:
                    d3:0b:bc:17:47:98:10:95:f7:84:23:7b:08:2d:20:
                    bc:90:22:57:0e:97:41:42:31:53:1a:a3:b3:4c:0a:
                    1e:09:c9:23:29:f2:d3:67:67:5b:6a:9e:55:6d:07:
                    59:f7:20:50:a2:8e:9d:7f:3d:49:69:f8:1d:27:67:
                    71:c3:5a:f2:51:43:b7:0e:ab:86:f0:f0:f1:cc:6d:
                    74:85:34:03:e2:d5:7f:1b:13:05:ca:7b:0d:2d:62:
                    a3:1f:50:f0:8b:29:69:3e:4b:df:19:c9:e1:c8:5a:
                    26:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B2:7E:8D:94:ED:9C:3F:43:F2:DD:A3:46:37:5F:1C:A9:12:0C:A5
            X509v3 Authority Key Identifier:
                keyid:7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:12:ef:df:68:f5:0e:5e:89:a9:c0:28:59:28:03:bd:42:41:
         a0:f3:e1:10:fa:13:61:b0:be:b1:a9:c4:6e:dc:47:fb:1b:b0:
         b7:66:b7:33:4c:2e:14:db:f7:18:19:0d:c8:3b:cf:8a:4c:c3:
         d3:08:b4:c7:43:36:07:3b:74:2c:a7:47:b8:e4:36:7f:88:2c:
         60:87:af:f7:dc:7b:40:5b:f1:33:92:94:8e:60:d5:d0:b3:4e:
         6c:1e:38:5c:41:1b:af:cf:18:fb:2b:d4:84:56:f3:f3:eb:2b:
         c2:1c:dd:39:9b:26:a5:9c:80:fb:5a:4c:2c:a2:28:a3:5a:f7:
         ab:cf:20:9b:c1:68:ef:99:3b:33:a6:34:37:c4:44:45:3f:df:
         fb:ea:3d:5d:1c:be:be:3b:76:58:cc:ee:53:0a:f2:33:a8:48:
         fd:e6:a8:97:f5:0e:ee:e1:44:06:c0:60:66:38:4d:99:32:34:
         f5:38:91:fb:d5:aa:d3:2b:a2:6d:68:51:0f:e9:b4:6e:ed:03:
         b8:ea:36:02:25:26:f2:d8:a6:84:6c:9c:e9:7d:e9:09:db:a6:
         6f:9d:de:3d:05:d5:b2:1c:1f:db:42:74:35:90:df:35:cd:67:
         9d:b4:83:44:ed:42:16:8f:20:44:e4:2a:58:cf:0a:5c:77:61:
         63:b3:26:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:06 2025 by rpki-client