Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
File:                     fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json)
Hash identifier:          4+qtXf/xXC6Lvc//ixCn6GkuB5kuYFvP/KxOqepk9p4=
Subject key identifier:   E2:11:76:07:EB:82:9B:42:6F:B2:EA:64:1B:51:B5:D5:C8:6A:3D:41
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Certificate issuer:       /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial:       0194BD85B549FBA8C4323AE992CC9529B6E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
Manifest number:          098C
Signing time:             Fri 31 Jan 2025 18:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:44 +0000
Files and hashes:         1: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: G+5ukiNsHmZYM/MXwDEehVXVlS5OvHd1q/ntG0OyanY=)
                          2: mXWmJZwIRdfowUzFV6EabzHZO1M.roa (hash: k+dckJef8uAl2tggOKFrpt5ypzOEodrfcc+zZEAtNyc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:b5:49:fb:a8:c4:32:3a:e9:92:cc:95:29:b6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d9656d5867b43ce506445290bba705722260586
        Validity
            Not Before: Jan 31 18:00:44 2025 GMT
            Not After : Feb  1 18:00:44 2025 GMT
        Subject: CN=e2117607eb829b426fb2ea641b51b5d5c86a3d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:5a:cc:ea:84:ee:aa:02:13:85:82:1a:d9:
                    57:cd:ab:0c:dd:fa:41:11:e9:27:28:c3:d9:a3:f5:
                    2b:8c:9b:ce:9f:b1:82:82:f4:42:9d:a6:67:34:69:
                    60:cd:ae:b5:f4:81:31:6d:47:b6:7b:a3:15:2d:23:
                    cd:bc:b6:51:d9:0a:4c:61:d0:bd:56:72:6b:9e:3f:
                    f2:9d:b8:06:26:98:bc:d3:a1:70:3a:d0:38:95:53:
                    3e:71:3c:d2:8a:09:28:68:9a:60:61:a8:91:f5:20:
                    0e:36:15:60:f0:b2:35:bf:4a:65:8f:56:3c:80:f9:
                    f8:34:09:c1:47:e1:79:d7:2b:e4:00:f6:a5:60:bb:
                    7d:95:41:13:e3:ae:68:a2:fe:8c:81:4c:15:31:2b:
                    af:94:e7:58:f4:d5:47:a3:b4:a9:82:ad:1c:14:36:
                    f2:22:60:e1:44:fe:1f:b6:70:2f:70:ba:7e:b4:a8:
                    b2:c6:94:2c:e9:2e:0c:95:be:74:c9:7a:1f:d3:83:
                    0d:5b:7e:8a:c9:1d:63:c8:e3:a8:c3:7b:2a:7b:47:
                    c8:03:c5:7e:bd:5a:c1:4d:89:d4:de:15:a2:9a:5b:
                    72:d6:34:28:dc:b2:5e:c7:87:77:0a:c0:d9:13:cf:
                    22:22:98:33:8b:a8:90:03:37:20:fa:dd:1e:b6:fc:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:11:76:07:EB:82:9B:42:6F:B2:EA:64:1B:51:B5:D5:C8:6A:3D:41
            X509v3 Authority Key Identifier:
                keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3a:85:ad:11:01:2e:d3:2e:68:1d:9a:68:ad:ce:5a:d0:ae:
         63:24:43:9c:8d:e6:86:c1:32:4c:2a:fb:9c:9b:b8:fb:66:b1:
         0f:00:d6:50:d0:98:76:1d:48:ad:e8:f1:e8:30:52:31:f5:d1:
         26:7d:17:36:11:12:93:e6:e8:07:86:8b:a8:38:be:54:36:15:
         70:85:99:3f:2d:bb:d7:a9:5c:c9:a7:f8:e7:9c:d7:87:dc:79:
         3a:20:e1:e0:97:12:7f:35:3d:d4:d7:a4:05:02:94:a7:7b:84:
         62:24:b7:0a:5a:e0:a3:a0:b6:dd:24:4e:a4:39:a8:98:53:97:
         6b:37:f3:ca:6c:16:5c:b4:1c:55:51:68:37:ed:5e:ea:65:49:
         eb:0e:78:fd:03:4d:4f:d2:f0:09:69:bb:a5:2b:12:2e:8a:37:
         17:43:a9:a5:3e:d6:97:ff:f2:ac:22:22:d0:b1:62:f0:0e:02:
         ff:1d:07:8c:f5:a8:43:98:e1:77:6a:c3:b7:94:ac:d9:66:5c:
         ad:28:15:0f:c3:a6:15:d7:c8:61:51:de:7f:46:f5:9b:d7:ab:
         7f:13:f5:4e:73:70:d8:46:f4:96:dc:06:2a:00:40:95:0f:bb:
         6f:db:5b:aa:17:e3:e7:cd:fa:59:25:4d:70:d9:22:da:ab:d8:
         8d:b0:e2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:39 2025 by rpki-client