Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File:                     FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier:          uySlDng5X+M8XsfzCLHGt3Z4GmLPylV5LmQcM0UDZH8=
Subject key identifier:   44:87:07:CC:04:C1:82:D0:B8:E2:C6:21:DF:B1:77:2E:7D:89:0B:D9
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer:       /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial:       0194BBCDB084E1556E59AB157B06E2665B2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number:          13BA
Signing time:             Fri 31 Jan 2025 10:00:06 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:06 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:06 +0000
Files and hashes:         1: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: itRW4hmsK+GP7zA5lcnZAPvTTwjdyTxzywGXdoCkR4A=)
                          2: _ryT7JJRyl2zbDlcHLiieOVaWDE.roa (hash: aYopHcEKoiKmgUw0u7ZqiunqjMA1+tPcCa/wAYiX86g=)
                          3: cmxdqS626N731JSDXMkhCrtA4_Q.roa (hash: LRekbyCIvJRl2MojJwg69VWuVHL2U6Aun+QU7GJY++E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:b0:84:e1:55:6e:59:ab:15:7b:06:e2:66:5b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
        Validity
            Not Before: Jan 31 10:00:06 2025 GMT
            Not After : Feb  1 10:00:06 2025 GMT
        Subject: CN=448707cc04c182d0b8e2c621dfb1772e7d890bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:11:62:93:4b:14:0a:16:2c:db:2a:ed:05:
                    82:b1:66:ae:de:6c:6d:4b:1a:c8:ea:99:3e:ce:be:
                    b4:21:2b:62:bd:d3:32:5b:2c:e8:01:24:e4:34:f8:
                    17:66:b1:e9:c2:01:ea:6c:2a:cf:02:6d:c2:ba:73:
                    2c:8d:36:41:d7:53:92:6f:43:3c:d4:e8:b8:be:2f:
                    d1:3c:07:54:7b:65:e0:04:27:0b:41:5f:b1:5b:2e:
                    a4:b8:14:14:50:d3:ca:d9:1a:15:a1:c6:d8:a4:17:
                    be:17:6c:46:d5:3b:67:4d:b9:54:06:06:c4:06:5b:
                    4f:d2:bd:9a:ca:30:ca:60:fd:83:54:a6:e5:c3:18:
                    32:15:1a:de:b7:60:ba:81:f6:f6:55:bf:34:47:a6:
                    82:d8:50:58:7a:5a:69:38:bf:9b:9b:6e:e6:a2:0a:
                    0f:1e:60:62:91:1e:4a:db:90:1e:7f:33:0f:c9:69:
                    4e:c8:b7:62:13:6f:8b:c0:80:01:1a:64:61:da:9d:
                    33:30:0d:d6:c3:f1:c9:a2:74:94:03:95:5d:e3:d5:
                    62:e3:60:de:68:01:8b:60:2f:13:f2:c0:02:ff:25:
                    60:d1:ae:3f:53:95:4c:02:13:90:56:10:3a:5e:92:
                    ba:e6:85:17:65:60:73:e6:71:fd:b2:0b:90:4f:7f:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:87:07:CC:04:C1:82:D0:B8:E2:C6:21:DF:B1:77:2E:7D:89:0B:D9
            X509v3 Authority Key Identifier:
                keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:24:86:4c:06:6b:f0:2b:dc:6b:e5:50:d1:f1:21:b4:9f:2f:
         3d:ac:3e:d2:2e:dc:61:e1:29:0d:52:3b:51:ad:37:f6:23:84:
         19:77:0a:8b:8c:83:29:36:83:55:ff:da:ea:74:aa:d4:95:01:
         2d:d5:f4:02:42:2a:5f:4c:75:77:fc:4a:7d:e0:47:7a:a3:b0:
         28:2e:a8:99:8e:7d:e7:bf:f0:4c:ad:31:bb:b3:51:65:93:80:
         bb:ed:30:5b:2c:cd:7b:4f:7d:03:88:55:ba:e9:de:81:03:1b:
         7d:ba:31:9a:51:89:a9:34:01:73:5d:87:dc:0b:39:61:34:36:
         f1:9c:4d:9e:fc:cb:98:c9:42:64:0d:61:a3:2f:e6:13:c4:72:
         7a:d5:60:4a:09:cc:1a:2e:14:73:e7:d1:b3:4a:93:90:aa:61:
         d5:f1:15:fb:c0:0f:3c:10:ae:59:45:a4:13:e5:96:cd:d9:74:
         22:ae:de:c0:7f:ce:6f:74:72:e2:0b:ed:83:f0:e0:29:ab:a3:
         23:4a:01:c1:0c:66:c7:18:9a:00:0f:b6:99:4b:24:fb:40:d4:
         d0:15:69:3c:b9:29:cb:4f:ba:86:38:71:ee:8a:e2:1e:db:de:
         e6:f4:7b:cf:ec:1d:c4:25:3d:d6:a3:39:d1:03:cf:ba:f6:59:
         67:39:ab:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:58:20 2025 by rpki-client