Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft
File:                     7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft (raw, json)
Hash identifier:          qTXrvBvAkW2MK6OYka+64CtdzyCd9kbC7AGOjgzlRLY=
Subject key identifier:   1A:97:70:F0:9C:62:8C:30:3D:01:3B:9C:B3:6C:7E:2C:E4:F1:AB:02
Authority key identifier: ED:FE:09:C9:CE:50:43:66:64:54:11:55:AC:FE:6D:5A:03:98:65:BA
Certificate issuer:       /CN=edfe09c9ce50436664541155acfe6d5a039865ba
Certificate serial:       0194BD17A46463C9F6ED7F6FAD49C71A5173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft
Manifest number:          089B
Signing time:             Fri 31 Jan 2025 16:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:30 +0000
Files and hashes:         1: 7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.crl (hash: dlyhWlBu5G8RHM0+jY48hPifjs4CVRN5emXSnWLOWYk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:a4:64:63:c9:f6:ed:7f:6f:ad:49:c7:1a:51:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfe09c9ce50436664541155acfe6d5a039865ba
        Validity
            Not Before: Jan 31 16:00:30 2025 GMT
            Not After : Feb  1 16:00:30 2025 GMT
        Subject: CN=1a9770f09c628c303d013b9cb36c7e2ce4f1ab02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:2c:8d:03:62:dd:53:b8:1a:23:4b:4a:5a:
                    ab:e8:16:2c:33:33:9e:9c:0b:25:fc:35:cc:aa:e2:
                    dc:67:74:16:73:b9:43:c2:ab:e5:8e:47:b7:98:8f:
                    d5:4d:2b:d7:6e:c9:ae:cf:54:7a:ae:ee:66:13:a4:
                    29:68:aa:99:a6:3c:66:e3:6f:be:29:51:86:7a:a1:
                    7b:ec:33:f5:9d:c5:ba:32:2c:8c:84:1a:ae:02:9f:
                    b0:be:1e:2d:61:46:88:77:1c:d7:57:da:38:48:b5:
                    e2:b9:86:d2:c5:fe:f7:06:e2:89:e0:af:1d:d2:c2:
                    45:90:33:cd:d7:a6:8a:c6:e2:c7:a8:ae:0d:8f:59:
                    af:5d:43:1d:5e:d3:b9:51:2c:7d:a2:bc:bb:6f:84:
                    c7:30:d2:fd:b3:86:61:ae:98:6a:8f:80:5f:7c:a9:
                    42:9e:04:d8:75:40:f2:42:c3:f5:cf:82:92:82:35:
                    82:89:4d:3a:d4:45:f9:f2:4b:94:6c:64:a9:d2:d2:
                    f1:76:31:fa:ee:8f:0f:2f:6b:66:bf:53:49:5d:ee:
                    6c:21:18:a5:03:bb:82:00:a1:48:61:23:4a:da:78:
                    22:91:40:bc:d3:af:b5:48:2d:99:53:e9:af:d0:37:
                    63:7a:65:c6:01:f2:b1:bb:58:f2:16:6d:05:83:7f:
                    23:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:97:70:F0:9C:62:8C:30:3D:01:3B:9C:B3:6C:7E:2C:E4:F1:AB:02
            X509v3 Authority Key Identifier:
                keyid:ED:FE:09:C9:CE:50:43:66:64:54:11:55:AC:FE:6D:5A:03:98:65:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/913c3e-1b69-4629-aed5-dc1e34e8da03/1/7f4Jyc5QQ2ZkVBFVrP5tWgOYZbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:96:ee:f9:f2:7c:06:97:32:d7:3d:a0:0a:c8:48:b5:16:5b:
         d1:af:96:57:23:58:77:fe:97:42:db:cf:ff:61:bc:c4:a6:21:
         09:37:26:ba:b9:26:0e:1d:bc:a4:1d:39:03:ca:66:20:db:3d:
         e2:fe:02:64:77:f8:76:74:90:6a:3a:68:5c:91:90:54:1f:6a:
         5d:e8:20:85:10:ef:2c:89:16:0e:c3:22:94:b0:69:4d:cc:dc:
         5c:db:6b:31:24:af:42:3b:9c:83:f6:a2:8a:8d:fc:65:38:94:
         1d:f8:9b:63:74:c5:c7:82:f2:e3:db:42:b0:13:c1:c9:d5:25:
         34:f7:d0:3a:bf:55:b9:43:09:31:39:29:08:6f:bf:f7:71:ed:
         88:bf:53:56:64:d4:e4:58:da:ea:96:27:c7:5f:fd:d4:91:fb:
         05:83:26:d2:a7:e4:3d:84:6a:7c:2c:92:d7:41:ca:df:04:5a:
         2a:69:a8:37:ca:d7:6e:23:b7:16:28:72:57:1f:4b:06:7d:5b:
         37:ef:79:62:cb:d6:3a:ab:4c:82:78:e5:6e:3b:68:eb:c3:80:
         ad:b7:c3:72:ba:41:aa:0e:5f:d2:a2:09:c6:4a:96:55:19:5b:
         62:4c:77:b2:2b:ab:f1:49:33:96:5f:dd:21:2b:3d:25:9a:2b:
         9d:47:2a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:05:07 2025 by rpki-client