Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
File:                     M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft (raw, json)
Hash identifier:          q5jgC2J8gwf5E381LqTpP173CV0JtmeasXdsZirVl7U=
Subject key identifier:   92:F0:8C:14:5B:10:03:43:B6:BC:60:E1:29:BD:D2:82:86:E4:1B:49
Authority key identifier: 33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
Certificate issuer:       /CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Certificate serial:       0194BBCDF6321AD82BFF253D9771DCA6104B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:24 +0000
Files and hashes:         1: 2vNXSPhqGzkcVvfumaqzoQwZMt0.roa (hash: eL4GW0LkIf6gTx0hvW09DQfbQa9hDU0uyvNBC0IgCZw=)
                          2: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl (hash: e4ipIwPygAOcBijLkqPYnOtyVvJTyztQZduMHMxv3/Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:f6:32:1a:d8:2b:ff:25:3d:97:71:dc:a6:10:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
        Validity
            Not Before: Jan 31 10:00:24 2025 GMT
            Not After : Feb  1 10:00:24 2025 GMT
        Subject: CN=92f08c145b100343b6bc60e129bdd28286e41b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c5:a3:8d:8f:9b:98:4a:84:3c:e1:06:0a:36:
                    ea:3f:4e:0b:72:a2:96:4a:1a:2b:e4:40:d6:76:cf:
                    b9:58:44:ab:58:29:87:0d:08:9a:01:11:07:88:fb:
                    5c:06:0b:fa:f2:93:c9:5f:d2:4f:de:25:1c:c3:a1:
                    d8:14:88:56:e1:0e:dd:83:c3:9d:fd:bf:02:c0:02:
                    4e:31:c1:3a:d0:25:0e:ee:3c:45:60:66:d6:bc:a5:
                    93:3c:35:f4:82:94:20:d4:63:1a:9e:4c:46:cd:22:
                    0f:9e:4c:e8:f8:4f:eb:7b:7e:09:a3:8a:b1:f5:fe:
                    71:32:61:c5:7f:79:49:5c:35:06:8a:5e:67:a1:e9:
                    7b:01:a1:f7:7d:c4:0d:57:94:10:c4:a3:ac:44:56:
                    f0:e7:18:50:66:b8:57:10:57:7a:58:c5:81:60:5d:
                    8e:ee:1c:82:11:92:c0:33:e9:a2:0e:84:3d:48:fa:
                    dd:2f:2a:71:63:5c:36:96:e8:73:44:8c:68:2a:cf:
                    64:fd:ff:49:39:01:a5:d8:c3:94:69:55:ed:6f:b4:
                    e8:66:69:8d:b1:c9:90:cc:aa:aa:a1:92:fb:d9:f9:
                    b0:44:bb:65:be:2e:c1:84:89:b1:42:f5:a7:81:c8:
                    09:04:0b:e2:e4:a2:7f:78:b5:50:9f:de:f3:71:e5:
                    66:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F0:8C:14:5B:10:03:43:B6:BC:60:E1:29:BD:D2:82:86:E4:1B:49
            X509v3 Authority Key Identifier:
                keyid:33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:10:79:02:30:ff:5c:fc:56:41:cd:d3:27:9f:59:f9:dd:37:
         0a:60:9f:a8:b7:41:ee:f7:60:2c:a0:d5:00:18:88:41:54:27:
         50:07:a7:4b:19:80:74:ec:44:72:66:29:87:af:a3:d9:9f:48:
         bf:ba:f8:89:64:a5:86:3c:c3:1d:32:10:ad:9f:14:c2:ca:73:
         5a:a8:d0:3a:cb:1a:44:44:bb:cb:79:67:7f:13:2a:a9:b9:23:
         cd:cf:49:54:df:72:da:02:2a:d4:e4:f8:aa:7d:0d:5f:e8:dd:
         cf:16:3e:12:f5:31:8b:92:1b:1d:9e:66:4c:b3:89:00:e3:29:
         88:69:82:8e:09:ac:e5:f2:6c:a0:45:51:af:61:a5:60:d1:a1:
         a3:f7:a0:02:0c:51:1f:5c:9c:a8:08:fc:3a:77:4b:02:66:db:
         48:60:03:ea:d3:73:06:f3:e3:1a:1d:a3:6d:b2:2e:9d:a9:1f:
         c9:7d:3b:7c:36:f6:5c:f7:b4:73:40:62:2c:50:6c:ca:24:7e:
         4a:da:6f:a9:82:bd:79:0c:92:6a:f2:3a:93:40:2b:23:94:04:
         3b:13:87:8c:5a:98:76:ff:11:2a:01:68:e3:ca:2f:e1:83:63:
         83:08:b1:a2:d7:60:33:1a:7b:f8:a1:1f:a6:9d:9f:44:09:e8:
         94:44:02:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:52:28 2025 by rpki-client