Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
File:                     63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json)
Hash identifier:          7/fd3fZOQLdSb8b//Ne25UOYQXWkKOl+C4HaGlFFqt0=
Subject key identifier:   8A:08:92:FF:FE:0C:01:30:CA:E3:9E:82:0A:6F:A5:07:AB:86:1C:62
Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D
Certificate issuer:       /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
Certificate serial:       0194BC72879305F40CD4C655AC47A4BEB6AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
Manifest number:          0F32
Signing time:             Fri 31 Jan 2025 13:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:09 +0000
Files and hashes:         1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: enGd7RbAZdvTF0t/0KVgXCg43e3Vq5+3/fGDcGmDaMM=)
                          2: fA_2P2jt8DuWvjRgi0qDLxLu8Uw.roa (hash: SzZb8wCnKFHeHDxJHKqTuj/wLWWWWYz/mnokDgrqWtg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:87:93:05:f4:0c:d4:c6:55:ac:47:a4:be:b6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
        Validity
            Not Before: Jan 31 13:00:09 2025 GMT
            Not After : Feb  1 13:00:09 2025 GMT
        Subject: CN=8a0892fffe0c0130cae39e820a6fa507ab861c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:20:12:c8:a7:58:50:c9:d2:92:b5:57:78:
                    34:98:9f:73:25:1d:fc:48:d2:d9:cc:04:01:f7:5b:
                    02:ad:f0:da:ac:ca:3a:ee:3d:33:34:24:91:45:26:
                    9c:3d:0b:c0:ca:0f:52:78:ea:b1:8b:6e:c9:19:d5:
                    67:76:ef:f0:e2:45:ad:82:4f:6b:cb:73:08:f0:2e:
                    f9:cc:b4:87:ef:4f:74:44:41:0e:7c:8f:96:09:cf:
                    db:23:dd:64:4a:6c:9f:0b:01:58:75:7b:f0:b5:f1:
                    da:96:cd:af:63:da:75:fd:4c:42:84:ae:8c:fb:a8:
                    67:55:ce:fd:3f:ca:c6:92:f2:c2:c4:42:6c:5c:31:
                    3a:45:94:cd:fd:d0:76:87:4a:2a:12:c0:e9:24:f3:
                    6c:a4:3e:68:53:a4:cd:19:77:93:ad:18:3e:40:a9:
                    9e:5e:53:e1:30:53:b0:1d:2a:23:74:47:a4:7d:a3:
                    0a:bb:29:52:f4:62:9e:5a:30:d1:50:2d:b8:a3:3b:
                    8d:93:af:31:5f:49:47:59:d0:fa:c0:54:ef:cd:79:
                    c8:be:b4:ff:f6:69:c6:18:f5:6e:e1:79:35:76:a9:
                    49:b4:bc:8d:91:33:bd:20:5c:6a:b8:02:3c:c2:46:
                    fb:ae:ce:e9:ec:c7:7a:8d:9e:ef:b4:92:09:14:66:
                    d9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:08:92:FF:FE:0C:01:30:CA:E3:9E:82:0A:6F:A5:07:AB:86:1C:62
            X509v3 Authority Key Identifier:
                keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4d:ad:7d:f6:c1:90:ac:0a:3b:52:31:bb:04:83:8e:68:f0:
         09:d4:95:13:f1:13:71:3d:e8:10:60:50:e7:bb:45:ec:be:57:
         b6:b1:64:bf:ba:60:64:4c:94:82:23:84:66:c7:bc:39:4c:b3:
         61:b5:3b:1c:e7:39:47:78:3f:46:72:3f:fe:80:af:1b:66:23:
         5b:c8:73:cd:cb:ca:cb:87:96:5f:7a:d8:53:c5:67:34:1f:a8:
         68:8c:63:df:9b:46:53:d5:ac:29:64:7d:c7:9d:8a:86:37:e4:
         16:14:72:2b:03:9a:b2:dd:92:db:2d:aa:ef:34:ea:c3:d7:5d:
         49:e7:49:9f:6c:2d:22:d2:a2:7e:e1:1d:99:f5:1b:27:f2:b8:
         d2:ec:95:6b:71:a6:46:63:c1:5c:ad:20:a0:ea:44:74:be:79:
         e3:2b:8f:56:41:2f:0b:91:68:0b:81:dc:bb:12:15:c4:c3:53:
         7a:9b:dc:1b:69:ac:db:cc:15:26:cf:16:db:59:79:44:c3:e2:
         b8:d2:3f:3c:05:cc:e6:7c:6c:ee:13:fc:6f:43:3a:c4:60:46:
         7c:ab:5f:03:57:df:26:46:49:1a:30:46:62:d2:23:3d:62:26:
         3d:bb:51:96:3e:f7:f2:f8:f5:1a:f6:e1:99:cb:59:ad:ac:44:
         ff:12:2c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:02:34 2025 by rpki-client