Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
File:                     ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft (raw, json)
Hash identifier:          peTULIjR2IHVehTOqyvjxcg/FmMOvEPnBIwZkTT0Bqc=
Subject key identifier:   4C:E4:CE:A2:34:FD:07:C8:8F:15:93:68:06:11:17:FC:B0:48:15:42
Authority key identifier: 7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
Certificate issuer:       /CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Certificate serial:       0194BBCDB581E8886C05BE8498E714BE6F2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 10:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:08 +0000
Files and hashes:         1: ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl (hash: vV1alAA8qlSlC6+kFhIrsuaboGOEEW9+Cc+gWf094B8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:b5:81:e8:88:6c:05:be:84:98:e7:14:be:6f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
        Validity
            Not Before: Jan 31 10:00:08 2025 GMT
            Not After : Feb  1 10:00:08 2025 GMT
        Subject: CN=4ce4cea234fd07c88f159368061117fcb0481542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:50:0e:9c:68:58:7b:c1:10:83:b6:ec:03:
                    6a:2e:a8:01:de:f0:59:a0:cc:a5:fb:66:3c:4f:3b:
                    9b:d4:ea:de:b7:35:b0:6d:e2:4b:01:44:22:a2:e1:
                    ca:94:6d:08:c2:ba:62:0c:3c:e3:ea:cc:55:4b:7d:
                    52:21:b1:cc:5c:ae:97:8c:6c:be:79:3a:c9:a0:d5:
                    7a:a7:e4:b0:c7:d7:76:38:37:9b:03:55:8f:55:4b:
                    e5:21:04:19:3c:aa:e7:f9:53:73:70:07:7c:bb:6c:
                    44:81:05:cd:a3:d5:69:4b:40:33:67:c1:bc:85:6c:
                    ba:51:1f:fc:6d:37:08:96:54:80:73:a8:96:46:54:
                    35:be:68:72:dd:56:91:2c:ba:2a:23:9f:ae:dc:61:
                    e8:e7:58:83:7a:8c:93:53:99:da:28:71:cc:8f:ae:
                    c4:ee:11:ae:3e:16:fb:16:1f:5a:3d:f7:62:9b:df:
                    ea:51:4c:8b:6f:ad:72:fb:d2:eb:65:a3:23:52:3a:
                    ce:a4:86:70:bf:af:ad:a0:bb:8c:11:d2:58:20:8c:
                    0f:9d:1d:61:ea:c8:f6:9d:8d:07:be:fe:82:92:c8:
                    c1:82:37:ec:a3:c9:a4:b9:52:6c:1b:ec:89:0b:0f:
                    7c:f6:f5:fe:93:ec:eb:96:b4:21:d7:cb:bb:2e:a4:
                    c3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E4:CE:A2:34:FD:07:C8:8F:15:93:68:06:11:17:FC:B0:48:15:42
            X509v3 Authority Key Identifier:
                keyid:7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:fa:78:28:81:b1:29:bd:46:97:18:f1:a0:37:77:51:72:8f:
         91:c2:d1:8c:0a:82:fe:4a:74:8b:e7:0e:b5:27:6f:95:20:37:
         e5:0a:84:4f:9c:2b:9c:06:fc:99:53:91:60:46:25:0a:5b:7f:
         5f:95:8b:0f:d0:e4:07:61:fa:98:84:33:63:7b:7c:cc:dd:db:
         f5:dc:16:22:00:88:aa:36:05:75:9b:46:b6:30:57:b8:72:2d:
         e1:d3:c9:c9:6f:52:08:e6:48:bc:8d:d8:a9:26:9a:9d:bb:b8:
         68:5b:3d:67:c6:0f:8d:8d:a5:f5:41:dd:b5:b8:e2:f2:8c:a4:
         6b:0f:ce:41:c5:97:62:cf:34:fb:a7:eb:27:ed:60:19:d6:bc:
         24:55:2d:38:89:13:87:25:2c:2e:f8:ea:d0:27:84:15:a2:0d:
         22:12:fe:fb:13:11:52:d2:88:05:ab:f7:34:96:79:aa:8d:c2:
         70:6d:99:1b:88:f4:4d:60:56:83:4d:2b:37:65:3c:4e:12:56:
         c5:ba:c9:82:3e:bc:8f:53:ce:b0:23:dd:5e:c2:0f:0d:cb:8e:
         37:38:dc:fe:59:d1:35:c5:d4:86:81:de:a5:ac:2d:23:c9:4e:
         c2:bb:5b:79:b7:cc:7d:7d:42:89:9c:8b:64:46:14:ae:5e:57:
         25:4a:c6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:24 2025 by rpki-client