Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File:                     7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier:          pF1u0OodYCn7magsypNP3ACyS5Fz9HDvcMufGNrdmEY=
Subject key identifier:   49:50:93:9F:14:B3:8F:26:0B:77:B9:81:E3:DD:5A:95:EE:DB:85:7F
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer:       /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial:       0194BC3C942B7DC6F84AD776DBA52124DD33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number:          0F6F
Signing time:             Fri 31 Jan 2025 12:01:14 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:14 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:14 +0000
Files and hashes:         1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: 8Fu+R6OWZztEIhgHbgfZOz6DJAqIoAv4K6JckRDo9Y4=)
                          2: Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa (hash: mDlSiJmg0BY9JeNZWlLLq7LDLb9jKGHM+mo1bQwoBt0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:94:2b:7d:c6:f8:4a:d7:76:db:a5:21:24:dd:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
        Validity
            Not Before: Jan 31 12:01:14 2025 GMT
            Not After : Feb  1 12:01:14 2025 GMT
        Subject: CN=4950939f14b38f260b77b981e3dd5a95eedb857f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:26:44:ad:e8:3d:0e:be:f9:e8:c7:02:c1:19:
                    6a:eb:ec:2a:a7:37:53:b5:17:6e:e0:63:9e:ac:97:
                    5d:2e:81:89:03:8f:6f:1b:d8:de:8b:54:01:8b:ca:
                    32:1b:cd:9f:4f:cd:e1:7b:bb:4c:69:a0:ba:a5:bc:
                    11:39:ee:d6:62:20:89:f7:0a:9b:84:a9:58:9f:b0:
                    e7:e7:1b:21:5c:36:73:e0:aa:8c:89:1d:10:04:5f:
                    dc:01:31:77:fb:92:82:ea:5f:31:e1:a0:62:89:82:
                    8a:30:eb:04:db:a7:5c:83:2c:3a:20:96:fd:0d:99:
                    a9:60:ff:3c:ed:93:1e:06:cb:44:43:26:9a:b1:79:
                    d0:53:e9:8a:dc:c1:2b:65:d7:99:e1:16:0b:75:14:
                    4f:f3:45:ab:33:13:48:b9:02:fc:56:df:86:34:85:
                    21:15:25:17:48:a2:2b:4a:d5:e5:7b:60:fd:6b:a8:
                    d8:3e:4c:a9:29:22:68:4d:d1:c8:06:4f:c0:23:b2:
                    e8:54:e3:e8:0d:d2:f6:18:63:ce:79:26:28:8e:1a:
                    d2:f8:ac:64:1a:c0:05:58:0d:63:d5:39:9e:b0:a3:
                    d4:e5:85:6b:5a:10:46:9c:dc:f1:9c:80:80:25:9b:
                    fd:95:cc:23:25:5a:c7:55:6b:fb:b3:97:f1:61:15:
                    f8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:50:93:9F:14:B3:8F:26:0B:77:B9:81:E3:DD:5A:95:EE:DB:85:7F
            X509v3 Authority Key Identifier:
                keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:c3:b2:1d:26:5b:0f:14:55:0c:52:6a:a4:a8:c1:85:48:
         85:6b:56:3b:6c:90:7a:e6:4a:8c:3b:8f:aa:35:f7:1a:fb:83:
         11:e3:4c:4a:e4:19:fe:94:a6:77:b7:76:e9:dc:99:f3:07:18:
         ff:f0:ff:f1:46:6c:bd:9b:94:e3:39:2c:18:b8:df:d7:3f:a0:
         be:c2:32:36:90:66:55:29:53:e5:e8:bd:04:72:97:83:20:8b:
         ba:87:a0:4a:9e:b9:a2:16:4d:cd:bf:9f:0e:c5:bd:f2:ca:e5:
         55:a9:c8:a5:07:a3:2f:58:27:6e:68:d6:d7:67:42:19:f7:9d:
         e4:31:e1:b1:ec:5d:1f:bb:0f:8e:3f:ca:5e:7a:58:f0:73:35:
         d9:d8:46:84:05:53:c9:da:c6:6d:c9:8a:31:b4:58:2e:a8:a1:
         18:47:cf:4b:b0:ac:19:b9:45:f3:02:65:8d:62:1d:fc:08:a1:
         70:2c:5e:09:ab:68:2a:2f:f9:c7:a4:70:1a:c2:c1:df:e6:7f:
         4a:45:83:9f:51:31:b8:37:3b:d7:f5:7d:5d:e8:55:65:fe:10:
         be:ca:22:e6:c2:97:ba:e1:a0:f5:e2:b5:0c:40:13:78:f9:2a:
         eb:ea:7c:14:3a:ba:68:a0:bb:54:b6:5e:a9:ca:37:c0:89:6f:
         e8:31:04:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:17 2025 by rpki-client