Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e4b869-d18d-4c20-8ab6-e74a9d40441e/1/EehpsPlTmbxvPNXuXrMzFp5ccsY.mft
File:                     EehpsPlTmbxvPNXuXrMzFp5ccsY.mft (raw, json)
Hash identifier:          QVhaPOoUdgsSz5lmYZE7D3QwEgMxe8FA7e5CYTLBpNo=
Subject key identifier:   2B:D5:78:5A:B2:CB:E6:17:07:62:CA:FF:26:24:4D:7B:33:1E:17:0B
Authority key identifier: 11:E8:69:B0:F9:53:99:BC:6F:3C:D5:EE:5E:B3:33:16:9E:5C:72:C6
Certificate issuer:       /CN=11e869b0f95399bc6f3cd5ee5eb333169e5c72c6
Certificate serial:       0194BBCE2D14A77055F299C71162175526D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EehpsPlTmbxvPNXuXrMzFp5ccsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e4b869-d18d-4c20-8ab6-e74a9d40441e/1/EehpsPlTmbxvPNXuXrMzFp5ccsY.mft
Manifest number:          087A
Signing time:             Fri 31 Jan 2025 10:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:38 +0000
Files and hashes:         1: EehpsPlTmbxvPNXuXrMzFp5ccsY.crl (hash: Cq8JJEE1/2KnAqd8YUVS2XE+IVdLNYLSyeio1nJV+9o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:2d:14:a7:70:55:f2:99:c7:11:62:17:55:26:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e869b0f95399bc6f3cd5ee5eb333169e5c72c6
        Validity
            Not Before: Jan 31 10:00:38 2025 GMT
            Not After : Feb  1 10:00:38 2025 GMT
        Subject: CN=2bd5785ab2cbe6170762caff26244d7b331e170b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:4e:e9:52:41:5f:bc:3c:15:cf:e6:a0:d6:
                    ae:04:52:55:a4:db:eb:3e:47:80:75:80:38:78:b6:
                    dd:37:7d:fb:cc:42:4b:3f:13:18:df:2a:96:0c:0c:
                    59:68:a2:8b:40:65:78:b0:2d:68:73:e1:16:43:7f:
                    d0:03:8b:16:a2:e6:0f:8a:f3:9e:c9:34:9b:1f:11:
                    25:cb:bc:8a:08:a2:b4:9b:f1:3c:06:43:8e:53:69:
                    38:09:ba:87:aa:14:5c:a6:3c:0e:a5:67:61:ce:43:
                    4f:b7:5c:44:35:7f:11:d9:9a:71:e4:ae:28:bb:74:
                    0a:b2:ed:da:c4:ca:8a:99:f3:23:f2:a7:89:21:bd:
                    b2:c2:b5:ed:b9:ed:8d:5b:c6:27:6f:9b:78:99:fb:
                    73:b6:a5:18:80:ba:fe:9c:24:1c:5b:da:24:be:d7:
                    de:84:f2:7d:10:9d:24:6d:af:80:d2:ce:c6:62:ac:
                    f8:9a:04:59:ff:50:db:70:5f:d7:1b:18:98:c3:be:
                    e8:58:fe:de:9e:2f:65:25:ca:60:ae:37:4d:15:20:
                    4e:83:13:07:16:34:81:2a:e1:10:09:11:3f:ba:5e:
                    e8:9b:98:4b:5e:91:f7:8b:c0:4a:cc:01:49:7f:a2:
                    bd:f3:d3:a0:62:b5:7d:52:72:15:32:86:40:25:54:
                    0f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D5:78:5A:B2:CB:E6:17:07:62:CA:FF:26:24:4D:7B:33:1E:17:0B
            X509v3 Authority Key Identifier:
                keyid:11:E8:69:B0:F9:53:99:BC:6F:3C:D5:EE:5E:B3:33:16:9E:5C:72:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EehpsPlTmbxvPNXuXrMzFp5ccsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e4b869-d18d-4c20-8ab6-e74a9d40441e/1/EehpsPlTmbxvPNXuXrMzFp5ccsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e4b869-d18d-4c20-8ab6-e74a9d40441e/1/EehpsPlTmbxvPNXuXrMzFp5ccsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a1:ee:21:4f:b8:b1:66:d2:93:71:38:4c:a6:6b:65:c7:5f:
         56:b6:e7:bb:1b:1b:b5:c0:6f:d4:26:83:5c:d4:0b:ff:7e:ec:
         fb:6b:ee:65:44:ca:2b:86:26:92:9b:7c:1e:b9:3b:cb:f7:2a:
         d3:9a:6a:0a:4b:87:ca:4c:6f:b9:bf:d4:74:fe:fd:7c:c5:34:
         56:e0:28:d8:5a:65:16:0d:46:2d:44:4d:cc:20:c4:86:5e:81:
         ad:3e:5f:93:c2:90:5d:cf:3b:e0:bb:1f:24:f4:f9:81:e3:89:
         cf:e1:0a:4d:09:d4:94:d0:97:e5:28:74:ed:db:d2:23:49:57:
         65:d4:aa:ae:af:3b:bc:ed:ef:84:9e:1a:58:c0:cf:91:59:f4:
         33:17:dc:87:4a:c2:91:9b:ac:17:59:44:57:94:97:7d:92:0d:
         94:1c:ac:dd:ab:d1:3a:90:9a:d4:c5:ee:f4:19:a8:ab:60:b2:
         1e:3c:6a:e2:f8:88:62:b5:19:6f:57:d0:c6:c1:38:98:81:50:
         d8:61:ed:15:c9:80:ee:d2:65:14:0a:ff:fa:49:a4:ab:1c:da:
         69:63:7f:2a:44:16:23:c7:fe:6c:65:38:a2:41:3b:07:b9:bc:
         88:08:6f:96:5f:f8:c7:b1:45:c8:c2:35:db:fd:ac:9c:42:23:
         75:6d:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:23 2025 by rpki-client