Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
File:                     _z73u2pGuvTbG6633ySkDB1MFU8.mft (raw, json)
Hash identifier:          rwMWjVmAGtQjzOM5k0Tgr3aumS4zNPc34TgJGEXREPQ=
Subject key identifier:   D7:87:41:C9:C1:52:03:37:EA:A9:20:3A:E1:6D:86:CB:C3:FB:80:2B
Authority key identifier: FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F
Certificate issuer:       /CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
Certificate serial:       0194BD854CC017DE3E06CFB71A53BC9CDFA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
Manifest number:          D8
Signing time:             Fri 31 Jan 2025 18:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:17 +0000
Files and hashes:         1: CyralhGuX94DIISxgcLaFGkuwEE.roa (hash: jbaQiBUIOwYyUUxeUd5k0D2sxSHilcS8Ozj2S6lNjj0=)
                          2: _z73u2pGuvTbG6633ySkDB1MFU8.crl (hash: nAeXUyFSMzX18ji4LURNePaoEPmzCuD7Ak2INpPKSvQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:4c:c0:17:de:3e:06:cf:b7:1a:53:bc:9c:df:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
        Validity
            Not Before: Jan 31 18:00:17 2025 GMT
            Not After : Feb  1 18:00:17 2025 GMT
        Subject: CN=d78741c9c1520337eaa9203ae16d86cbc3fb802b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e6:60:72:92:bd:dd:60:13:7b:6d:df:8b:94:
                    98:d3:62:54:ac:c4:55:b6:ba:9b:da:39:8b:d2:e4:
                    c2:3e:80:24:53:1f:c4:6f:ea:8d:1e:8e:f4:76:df:
                    41:22:7f:63:1c:bb:8f:a3:6f:3c:65:91:eb:d9:9c:
                    49:19:90:04:a1:b1:39:88:5e:10:0f:2b:92:a1:70:
                    1f:59:29:bf:e6:13:5a:e3:f7:a4:25:22:9d:81:77:
                    64:4c:61:08:78:f4:90:d8:f7:ea:c5:f4:d5:f4:13:
                    ea:8b:2a:92:b0:6b:98:2d:73:87:a4:54:fe:37:64:
                    95:36:79:ef:fc:74:aa:3f:ca:b2:eb:78:81:31:48:
                    0c:a5:c6:9c:07:46:3e:81:05:81:90:ce:27:87:af:
                    f2:e3:6d:01:b4:82:fd:b8:b0:10:b4:dc:4b:07:74:
                    98:26:b6:48:b5:8b:6f:36:47:f9:70:b3:94:a0:60:
                    5b:62:da:32:14:da:f2:ba:ae:25:4d:81:a8:ac:b9:
                    95:c3:71:74:fc:a8:cb:90:5e:b7:1c:9a:d5:31:52:
                    f6:81:5d:84:d6:17:d5:59:6f:ea:89:73:04:fa:15:
                    12:de:e4:18:de:9c:67:46:77:4c:ed:6c:b1:e6:14:
                    bc:0f:74:ee:b4:f5:be:ed:04:71:28:7a:a5:7f:67:
                    02:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:87:41:C9:C1:52:03:37:EA:A9:20:3A:E1:6D:86:CB:C3:FB:80:2B
            X509v3 Authority Key Identifier:
                keyid:FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f1:0c:1e:18:13:9f:7a:fb:99:5d:46:39:61:9a:53:77:b3:
         f1:6f:5a:68:28:b5:b8:4c:e6:bd:4e:2f:41:06:d3:b6:54:af:
         be:f4:e2:c0:9a:c1:a4:00:b6:9c:fd:84:81:34:fc:eb:f6:b2:
         49:72:02:37:ea:92:f0:9f:00:07:be:bf:47:b0:25:68:53:75:
         51:b1:2f:3c:93:10:3e:19:04:3d:de:d4:8a:07:25:77:ab:c4:
         c9:07:80:cb:25:56:72:5a:7c:32:06:22:d2:f9:b6:c0:48:ca:
         d4:7a:5e:26:37:ce:3c:49:dc:83:a8:64:75:50:56:42:55:5b:
         8c:bc:a6:26:eb:d3:d8:5e:c9:1a:2b:4a:12:ad:c4:98:02:48:
         0f:d7:90:85:2a:ee:90:7e:b4:b0:6a:e1:93:00:36:18:90:b5:
         e4:14:f9:70:96:b9:83:15:52:14:1a:58:cc:c9:0f:9e:07:b4:
         7a:77:81:f3:7b:4f:68:1e:f0:c9:82:bd:69:53:29:b8:40:b2:
         35:ec:ae:60:3b:2f:b5:54:41:b8:e1:c8:e1:df:01:6b:9c:6e:
         70:dd:0a:8f:53:cd:bb:7e:a0:88:40:46:af:15:5d:d4:97:4f:
         95:65:56:aa:9b:fa:9c:cd:e6:02:03:18:2a:8e:ad:aa:ca:fb:
         45:97:f5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:43:18 2025 by rpki-client