Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
File:                     eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft (raw, json)
Hash identifier:          KQDHJABINv9f6Bdjcr7/G7I4c264V9N/iXJ2zW0f15Y=
Subject key identifier:   E8:52:61:0A:22:4F:CD:13:21:B2:07:1B:28:DB:C1:41:EB:E3:66:F3
Authority key identifier: 79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57
Certificate issuer:       /CN=7968c4d3ffca8e737868a45696a198fde09fd457
Certificate serial:       0194BD857E5E482397EF6D3340733A324A81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
Manifest number:          3C
Signing time:             Fri 31 Jan 2025 18:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:29 +0000
Files and hashes:         1: eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl (hash: blg521ZdYx3H1NM+L7hT7BHXFHjf0ZJ8dLRQPg2S+44=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:7e:5e:48:23:97:ef:6d:33:40:73:3a:32:4a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7968c4d3ffca8e737868a45696a198fde09fd457
        Validity
            Not Before: Jan 31 18:00:29 2025 GMT
            Not After : Feb  1 18:00:29 2025 GMT
        Subject: CN=e852610a224fcd1321b2071b28dbc141ebe366f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:b7:99:86:cf:b8:b0:43:a8:f1:86:5d:6e:
                    43:7f:36:6f:d6:be:b9:9b:c1:98:24:39:aa:45:d2:
                    35:2e:a3:f5:4a:be:3d:5e:70:d1:0d:fa:75:9b:b7:
                    81:c3:1f:25:35:fc:90:ba:09:f3:1b:5c:47:66:35:
                    97:f7:20:cf:e0:16:e6:e1:da:7a:5d:8a:83:60:ca:
                    d2:79:d0:9d:b6:ed:ce:39:53:6d:83:a6:6c:44:b0:
                    74:17:00:42:a2:51:46:a0:61:5a:89:97:c9:5a:84:
                    08:b6:aa:d1:25:21:a8:df:2a:a0:c0:51:e5:e5:34:
                    0b:5d:53:a3:d7:5d:35:13:59:7d:a2:71:f3:95:cb:
                    63:66:ca:06:a9:e8:b8:0d:58:9f:3a:a6:c0:d5:51:
                    46:11:67:05:6c:5f:03:3b:f7:5a:c3:01:71:c4:e3:
                    b7:ec:3d:e0:95:28:07:10:b9:47:24:d7:74:9b:1a:
                    1c:a2:c8:1f:f6:5f:45:ce:37:5f:36:c9:c7:e8:04:
                    ab:5f:a4:b1:41:12:e1:7c:31:14:a8:fa:f1:8f:1c:
                    34:c1:ee:48:e2:a6:25:3f:36:b4:2d:5f:09:3e:b9:
                    3f:b5:0e:90:79:e0:6f:c1:35:07:1e:e4:9a:a0:55:
                    5b:68:d3:92:49:40:51:3a:ef:f9:0b:79:52:33:05:
                    41:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:52:61:0A:22:4F:CD:13:21:B2:07:1B:28:DB:C1:41:EB:E3:66:F3
            X509v3 Authority Key Identifier:
                keyid:79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8e:af:ba:be:39:fe:11:04:03:51:a5:39:22:da:2e:16:7e:
         b0:8c:5b:1a:68:f7:9f:89:5c:38:6b:f1:d8:7c:7b:d1:15:66:
         23:29:29:69:05:15:5f:42:53:81:08:c2:25:aa:44:3b:f0:ab:
         6d:c5:21:90:b5:63:da:59:ca:55:7f:1c:b1:a5:05:5d:d1:99:
         05:39:73:e0:52:d5:b8:5c:a3:ea:2c:9f:62:9e:9d:3d:d2:e3:
         4b:eb:34:5c:5a:61:9f:0c:a2:6f:02:13:98:fd:b2:42:32:38:
         46:3f:69:b6:3b:b1:a2:93:0b:7c:71:75:42:48:bd:0d:9d:78:
         c1:ef:de:6b:a1:c4:bd:35:4a:b4:d4:e9:83:66:cf:95:d8:48:
         48:bc:37:89:56:73:b3:ab:e6:8d:13:5b:53:77:95:be:d7:d9:
         0f:a7:f5:48:44:ae:f6:e4:32:18:c0:d3:fa:5e:2a:cc:b8:7d:
         62:35:82:dc:4d:7c:b9:18:50:29:f3:96:91:c0:af:7d:22:c0:
         85:99:b3:23:e4:8b:01:b4:f5:4b:ab:49:00:39:06:32:4a:9f:
         7a:90:b8:23:20:c8:a9:26:cc:33:da:76:ca:a5:14:3d:3f:d2:
         03:d1:1d:a6:6f:b4:9d:22:39:67:29:2c:18:10:f5:44:90:29:
         b2:7f:9e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:18:03 2025 by rpki-client