Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
File:                     fXrxi3mJleFLOBNhoGu2aEm36Fo.mft (raw, json)
Hash identifier:          Wk8/Fu+LoNP3LblNNcXBs/ISiGJaPsgxEbXm+uf30w4=
Subject key identifier:   54:88:A4:BE:65:82:95:CD:B6:42:BA:B2:12:47:56:27:25:C5:2E:FE
Authority key identifier: 7D:7A:F1:8B:79:89:95:E1:4B:38:13:61:A0:6B:B6:68:49:B7:E8:5A
Certificate issuer:       /CN=7d7af18b798995e14b381361a06bb66849b7e85a
Certificate serial:       0194BC72D87180683E3BCEBBE6B966312B29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft
Manifest number:          0555
Signing time:             Fri 31 Jan 2025 13:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:30 +0000
Files and hashes:         1: fXrxi3mJleFLOBNhoGu2aEm36Fo.crl (hash: l4SidPga14ISkw4/S5HGz4O1OeMYOl7XzszeDEqtG6o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:d8:71:80:68:3e:3b:ce:bb:e6:b9:66:31:2b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7af18b798995e14b381361a06bb66849b7e85a
        Validity
            Not Before: Jan 31 13:00:30 2025 GMT
            Not After : Feb  1 13:00:30 2025 GMT
        Subject: CN=5488a4be658295cdb642bab21247562725c52efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:33:9c:b5:4b:e0:ab:0b:86:51:40:b1:c6:77:
                    81:ab:63:8d:9f:67:3b:33:8f:52:0a:ba:a1:30:ad:
                    ff:51:12:64:a6:ea:57:b8:49:81:5c:ec:24:9b:7e:
                    b8:a7:ab:f6:7b:44:cf:57:72:0c:5a:cd:ae:08:4d:
                    4d:fd:86:1e:60:c7:ad:46:72:60:21:a5:56:f0:31:
                    4f:aa:d8:6f:82:3d:51:a2:47:e3:60:13:6e:7d:59:
                    25:5c:33:1b:e1:05:d6:e7:3b:f0:8c:b2:2f:29:65:
                    9b:34:25:0f:e7:f5:15:90:50:94:f0:59:c2:21:3b:
                    29:ef:98:6c:73:8b:89:72:94:de:d4:ed:f4:34:6d:
                    12:97:3e:81:48:0d:ee:fc:d2:6c:67:54:47:0e:9b:
                    3e:32:47:31:dc:fd:bd:b4:07:a3:c3:a7:a7:88:58:
                    43:81:3b:e7:3c:e9:b0:c7:fe:9b:ac:ac:4b:78:8b:
                    40:e9:13:00:f8:c5:86:c7:48:21:43:b1:b8:88:13:
                    8e:7c:a6:d7:52:3f:cf:a1:a1:ac:bb:c2:fc:25:6e:
                    37:3a:c7:c5:8e:26:61:89:7a:d6:16:3e:35:4d:fc:
                    76:91:d1:29:0b:aa:a4:92:7a:17:f8:7f:e2:2f:bc:
                    4c:91:5b:fd:57:4c:24:9b:a9:5e:46:69:93:3e:1d:
                    3e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:88:A4:BE:65:82:95:CD:B6:42:BA:B2:12:47:56:27:25:C5:2E:FE
            X509v3 Authority Key Identifier:
                keyid:7D:7A:F1:8B:79:89:95:E1:4B:38:13:61:A0:6B:B6:68:49:B7:E8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:85:ac:56:d9:32:8d:95:07:47:87:84:d3:ec:8c:a2:39:4c:
         e7:70:31:1e:b8:f6:2e:c2:8f:c9:17:cf:7f:ec:a0:fc:cd:28:
         c3:17:df:d9:84:5a:d6:d2:3c:ca:a7:b7:64:f5:18:f4:a8:26:
         50:ca:03:f5:20:ab:d5:81:fb:2b:c0:56:a3:5a:e3:ec:7c:bb:
         ce:76:7b:b2:38:0c:f5:9d:ca:ef:7e:43:be:2e:d0:c2:77:9e:
         99:c5:c0:11:47:a3:5f:39:7b:65:26:65:f3:47:c3:5a:ea:6b:
         39:28:71:eb:37:09:eb:42:9d:29:89:1b:1d:7b:c5:34:c7:d6:
         f1:b3:04:09:2b:cd:88:bf:41:f7:b7:41:92:a2:5e:20:18:df:
         80:f8:a1:f7:c7:71:1e:32:04:2a:cf:71:a5:61:94:e5:e3:09:
         47:ed:7e:2c:3b:d9:5c:09:8c:df:a8:7d:7e:89:fc:e7:14:69:
         ad:ed:82:57:b3:94:17:0c:66:f0:21:e2:f5:01:a4:9b:c7:1b:
         da:0d:e9:16:e4:59:2a:62:9b:42:0d:79:46:04:6b:ee:8c:ee:
         52:e9:bd:9b:c4:ea:48:4c:e9:05:97:24:5d:be:6c:8c:a6:70:
         d0:79:2f:c1:10:65:a8:bd:38:86:9e:4a:15:12:0e:ee:49:3c:
         59:6b:1e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:11 2025 by rpki-client