Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
File:                     RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft (raw, json)
Hash identifier:          Di757vUnZYkdtdQRaqKbAbLqABhiQOIdsvdBMZFGGn4=
Subject key identifier:   76:83:25:8B:9F:C3:AD:95:EF:53:66:C5:58:33:EF:B2:60:A6:41:7F
Authority key identifier: 44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD
Certificate issuer:       /CN=440586c54614b96edb84709524a334b31c9999fd
Certificate serial:       0194BBCE5D61950A3697DD898963E62E31D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft
Manifest number:          0732
Signing time:             Fri 31 Jan 2025 10:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:51 +0000
Files and hashes:         1: RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl (hash: xGLoOK4His0XwTWBpv2vLC+3WGRrjd9+uSPeF/76fvM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:5d:61:95:0a:36:97:dd:89:89:63:e6:2e:31:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=440586c54614b96edb84709524a334b31c9999fd
        Validity
            Not Before: Jan 31 10:00:51 2025 GMT
            Not After : Feb  1 10:00:51 2025 GMT
        Subject: CN=7683258b9fc3ad95ef5366c55833efb260a6417f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:02:05:f1:ad:8e:a2:29:2a:12:7e:56:c3:d5:
                    d5:07:6b:60:cd:c1:35:51:cb:9c:33:d4:31:f2:b5:
                    cf:e8:97:45:f0:78:4d:da:92:fe:f0:d3:48:67:3e:
                    45:4c:79:83:a6:44:da:d5:83:18:14:42:dc:59:19:
                    7e:bf:f1:22:08:5e:3b:22:3f:06:6d:86:c2:7c:ec:
                    04:4c:67:9d:35:e9:a0:2a:11:4d:ef:2e:49:39:0e:
                    85:40:4e:fa:c8:59:3f:30:ce:bb:7e:f3:13:76:48:
                    a7:f6:5a:3b:33:59:a1:08:e9:ab:b7:96:92:25:33:
                    89:15:7a:8c:55:2f:12:77:10:7f:31:55:67:f1:cf:
                    15:db:f6:24:c3:8c:7a:f7:f0:c8:08:2b:a5:8b:4d:
                    f0:33:9d:83:32:dd:bb:c5:a2:dc:5d:75:88:15:8a:
                    0e:11:56:18:b5:68:e9:a8:e2:eb:e8:16:17:6f:c8:
                    58:07:2d:2e:e2:5c:fb:28:92:7e:7e:c4:2d:45:7e:
                    7f:82:f5:50:f9:51:9e:25:eb:66:36:70:3a:b0:87:
                    6d:07:de:3f:22:19:2d:a6:39:84:0d:18:97:f4:09:
                    01:95:2f:6e:1b:73:93:dc:b2:d3:16:08:6f:d0:0c:
                    d0:6c:d3:c3:bf:c1:cf:5c:f9:db:ba:d3:07:8e:81:
                    8e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:83:25:8B:9F:C3:AD:95:EF:53:66:C5:58:33:EF:B2:60:A6:41:7F
            X509v3 Authority Key Identifier:
                keyid:44:05:86:C5:46:14:B9:6E:DB:84:70:95:24:A3:34:B3:1C:99:99:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAWGxUYUuW7bhHCVJKM0sxyZmf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6bc0c8-1ad7-46ed-8ec2-c74cc54a7e85/1/RAWGxUYUuW7bhHCVJKM0sxyZmf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:80:19:a4:d9:c6:47:a7:93:36:44:c1:77:af:fb:72:88:9c:
         ae:a3:80:cb:d0:e5:68:ce:56:04:7f:46:22:9b:79:28:ff:34:
         1e:81:3f:15:39:fb:d6:49:cf:1a:d4:02:ef:88:d7:4b:e0:74:
         99:3c:f6:5d:ec:1a:76:64:02:85:99:6c:c8:69:c8:0a:aa:7b:
         0d:25:69:5b:1d:76:90:55:51:8c:4e:d9:27:52:5e:c3:91:d5:
         fc:41:5a:42:98:5c:26:bf:70:13:0b:22:cb:dd:b9:0a:0e:5a:
         1e:b7:a8:c9:a8:78:6f:9e:6e:5c:04:8f:a5:c0:12:4e:e3:09:
         66:09:4a:1e:66:1c:ca:3c:d6:06:f8:8b:91:31:46:d4:a6:54:
         0b:7e:4d:03:a8:82:6e:84:61:ca:01:85:c3:05:83:68:c4:5d:
         bd:00:0f:04:c2:f5:19:73:63:f3:65:04:c9:33:69:eb:55:4f:
         fe:03:12:9b:4c:54:ac:7f:79:11:63:d0:ae:20:9d:87:8c:b8:
         3d:16:a5:84:aa:ed:c2:75:8f:d3:ae:31:f3:4c:43:5d:68:ea:
         07:62:37:31:f9:17:25:3b:b0:df:47:34:7a:d9:2d:3a:0d:ea:
         56:fe:50:53:38:64:40:66:c4:8e:cf:61:06:1a:e4:32:cf:22:
         63:5f:4f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:45 2025 by rpki-client