Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File:                     7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier:          otVgDcPpOIVcmUcG5OcdQUR6i/bwgM0w/rV6xTpoTBE=
Subject key identifier:   1D:A2:D0:52:43:D8:7E:C2:BE:F7:7B:B2:65:A6:E6:B9:B6:1B:D6:11
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer:       /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial:       0194BC72A687CDCBF8CC6523B27EE91145B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number:          01AE
Signing time:             Fri 31 Jan 2025 13:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:17 +0000
Files and hashes:         1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: yB7Ajz4sZ1uG2kcO7RXGWFcGwFG2BOPuKCwSVz3A6V8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:a6:87:cd:cb:f8:cc:65:23:b2:7e:e9:11:45:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
        Validity
            Not Before: Jan 31 13:00:17 2025 GMT
            Not After : Feb  1 13:00:17 2025 GMT
        Subject: CN=1da2d05243d87ec2bef77bb265a6e6b9b61bd611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:9d:47:16:9a:62:cb:f8:a8:4a:7c:61:74:
                    be:9e:08:15:ad:02:85:60:94:e4:f2:a6:40:f6:e6:
                    7b:4e:82:cf:9b:0c:fd:2e:f8:89:33:0a:a9:af:3f:
                    8b:6d:7a:17:a1:8e:f6:15:31:66:42:52:b9:d0:ca:
                    e0:cc:f1:0b:77:86:80:4b:e7:bd:96:91:46:2b:80:
                    de:1b:30:85:b2:2e:62:f9:23:94:af:a8:15:d8:05:
                    09:2e:e9:9a:55:b4:87:65:f9:11:c2:be:15:55:20:
                    18:40:73:b0:55:9f:d7:de:61:b4:d4:2f:70:ba:83:
                    0b:6f:6f:34:3c:eb:cd:31:57:0b:d5:a0:ff:f9:da:
                    e5:30:f1:45:7d:25:94:7f:fe:b0:bf:58:4c:9a:df:
                    c6:a9:e2:6a:8d:08:aa:e9:98:30:84:61:0d:16:fe:
                    d2:3a:7c:a6:58:7d:22:00:5c:d6:7c:b8:00:ec:e1:
                    9e:28:cc:d5:50:0f:77:2b:31:ef:8d:3e:92:92:50:
                    4f:ab:0c:ab:3c:f4:77:f3:fb:a5:a8:6e:e9:58:dc:
                    d7:43:c6:96:ae:7d:f1:ac:43:b6:77:d4:50:b5:7b:
                    30:38:8b:09:0a:92:e3:4e:7b:6b:d0:64:a5:ef:7e:
                    d9:07:11:03:b2:cc:72:45:93:6d:a2:80:24:c1:0a:
                    92:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A2:D0:52:43:D8:7E:C2:BE:F7:7B:B2:65:A6:E6:B9:B6:1B:D6:11
            X509v3 Authority Key Identifier:
                keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b5:33:d9:bc:9f:5f:84:18:9a:cc:9f:8c:7f:10:6b:3d:4e:
         d6:8b:c6:e9:72:00:33:ef:bf:52:1d:a4:ed:7c:c5:0e:3f:35:
         55:66:d6:fc:0d:8f:2b:73:dc:78:b4:b7:23:1b:09:c0:8a:b3:
         58:ce:3c:c9:9b:55:c2:ce:8b:69:00:23:f7:10:a0:a1:be:8a:
         98:8b:5c:cf:c1:5a:d6:99:c4:57:36:f6:72:98:47:eb:aa:2d:
         28:08:f1:5e:bc:ab:55:43:ed:74:98:86:e4:56:bc:a0:5c:56:
         e5:1f:b1:66:37:42:e3:3f:89:5d:e2:0f:8e:12:67:9c:32:a2:
         f6:a6:18:99:16:cb:a1:83:0a:d0:ae:10:ae:d1:1d:a0:64:a9:
         53:21:7d:10:db:73:8e:cc:d0:a4:d0:b5:b6:a2:f7:51:26:59:
         f2:be:8e:f9:ec:56:e9:1e:33:f0:79:89:fd:1f:7c:ce:f5:47:
         9a:b1:be:ed:7b:02:68:9c:ee:01:b6:da:51:e7:79:05:80:e2:
         e9:8d:c7:b8:62:5a:87:b2:93:72:c1:99:d4:d1:71:91:f7:85:
         0f:88:00:12:fd:4f:da:94:f8:8d:12:c0:07:5e:4b:8b:7a:af:
         1a:41:6c:b4:6b:90:a3:30:de:af:f9:39:9d:07:5d:23:5a:7e:
         69:dd:4a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:13 2025 by rpki-client