Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File:                     7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier:          Q69bTa+aTcImbkDBvVcYooXlrb4J5S809+KHsNo3KKs=
Subject key identifier:   C2:AC:32:F2:92:D7:77:8A:08:C1:68:7F:57:5C:B2:92:64:8F:E5:15
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer:       /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial:       0194BC3BD2AD91ABC3F1D1AF08B103339196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 12:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:24 +0000
Files and hashes:         1: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: lXitbTbM3477PexET9GCp9wjK6y5XYyVcV9UYCkJKb0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:d2:ad:91:ab:c3:f1:d1:af:08:b1:03:33:91:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
        Validity
            Not Before: Jan 31 12:00:24 2025 GMT
            Not After : Feb  1 12:00:24 2025 GMT
        Subject: CN=c2ac32f292d7778a08c1687f575cb292648fe515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:06:ef:69:17:ad:a7:38:00:28:b2:e4:10:
                    54:37:6a:2d:83:e0:a5:14:d6:36:81:e4:93:cf:45:
                    f5:d8:d3:b7:ad:97:57:63:b3:b6:d2:6a:ec:a7:83:
                    b8:f2:02:8f:36:22:98:98:23:1c:c0:bc:9e:8e:a4:
                    b6:31:e5:89:31:b1:1b:a9:0f:a2:c0:23:db:a8:14:
                    3d:63:3e:82:b1:ca:7a:17:9d:c0:b1:ac:e7:ef:d2:
                    ca:65:44:f1:25:2b:d2:64:31:83:75:a1:03:14:41:
                    e9:dd:4f:77:ca:69:6e:2e:af:4d:65:67:e9:0e:42:
                    09:45:1e:78:6d:c8:e5:1e:1f:e6:f1:02:56:0b:1a:
                    b6:c9:30:3c:17:f2:23:2b:f4:8a:50:12:f4:da:05:
                    95:e0:66:ec:29:91:e4:ec:1e:12:13:4c:2a:cb:c0:
                    78:05:bc:43:02:f8:15:8d:99:97:f7:ab:a0:36:72:
                    24:ec:ca:a8:0d:62:32:70:df:b9:da:43:71:82:f0:
                    d9:b3:2e:1c:e0:13:1b:4a:bf:3f:c6:62:c4:de:92:
                    ad:1a:38:50:28:9a:50:62:b7:d9:84:19:1d:f7:55:
                    14:8b:ee:f9:20:5e:ae:af:a3:38:8f:24:da:4d:eb:
                    3b:fb:16:c3:1a:3d:36:92:69:62:eb:37:2d:21:3b:
                    1e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AC:32:F2:92:D7:77:8A:08:C1:68:7F:57:5C:B2:92:64:8F:E5:15
            X509v3 Authority Key Identifier:
                keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:00:d9:aa:ab:1e:4d:b6:20:4e:55:c4:2d:03:01:33:2e:27:
         8f:93:8c:77:e6:06:f4:08:c1:19:88:bd:b0:cb:bc:3d:82:9c:
         7d:a3:7e:e3:a2:cd:94:89:d9:94:c8:c6:ee:3b:59:f2:79:ed:
         1a:2f:30:e5:9f:0e:c5:6b:65:49:b4:fb:bc:7b:d3:48:9a:5f:
         67:df:83:80:86:3f:ff:7c:eb:1a:dd:c7:de:eb:1e:23:1f:22:
         77:8b:1b:d8:00:c4:62:0f:1b:a6:42:fb:04:ba:cd:bb:00:0b:
         0d:2a:f7:5d:1e:8b:cc:d7:ed:82:eb:53:b2:10:a5:d1:b7:a4:
         8c:c9:75:07:e4:f9:b4:17:69:f5:04:d5:3e:13:90:ee:98:cb:
         ca:4f:a5:7c:e6:8c:fd:21:fc:58:eb:8f:d3:7d:a6:e9:1f:27:
         ff:11:a1:c1:04:a0:bf:63:a9:48:e6:b7:29:d9:b0:88:66:bd:
         15:06:a2:bc:f8:a6:9c:2f:cd:41:49:ad:04:10:80:62:b5:43:
         8b:83:21:1f:b4:9f:10:6c:00:46:7e:fd:f6:b9:a5:82:06:e6:
         4a:ed:29:5d:04:91:68:eb:fd:8a:a6:5c:bd:c5:31:33:e8:21:
         e1:0a:8c:7a:7f:4a:29:65:e0:6f:f7:29:dd:58:66:c4:8a:18:
         06:e7:17:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:09 2025 by rpki-client