Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File:                     fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier:          Ii5CVsxuTbZjUiajTbFZ38zDvi7XFMvUPFm0Q/3XlvQ=
Subject key identifier:   F4:4A:97:6B:DA:12:9F:4D:3D:7D:C9:EC:33:08:6F:6A:5E:F0:B8:16
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer:       /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial:       0194BCA9DE7A76124F6367328F7745CC21F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number:          127F
Signing time:             Fri 31 Jan 2025 14:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:36 +0000
Files and hashes:         1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: CGdi5CzbmoMJBafe5mw7Zn+sc89/oJiVMrT2f+Fo3uw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:de:7a:76:12:4f:63:67:32:8f:77:45:cc:21:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
        Validity
            Not Before: Jan 31 14:00:36 2025 GMT
            Not After : Feb  1 14:00:36 2025 GMT
        Subject: CN=f44a976bda129f4d3d7dc9ec33086f6a5ef0b816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:f0:b6:fe:f6:4a:e0:9f:ea:b9:ea:55:7a:
                    2f:3b:2a:54:49:ae:59:fc:08:22:49:4a:31:20:71:
                    d7:94:97:ea:47:9c:ae:30:97:1c:df:cb:95:9d:1c:
                    63:0c:e5:a9:bb:03:24:eb:5a:83:86:8e:5b:e7:4e:
                    3f:14:df:a6:c3:4a:f3:f2:3c:ef:c2:5f:16:05:98:
                    94:56:da:f5:97:4c:fe:5e:57:85:d0:c4:ae:ea:0c:
                    26:54:14:5f:67:87:f2:44:c8:90:eb:7b:76:2a:90:
                    b7:e1:d1:73:9b:68:63:fd:a5:e1:bd:25:72:24:ad:
                    8d:f6:c1:32:07:40:a0:38:d9:39:5e:09:1a:b7:17:
                    db:16:e9:33:53:2d:c5:35:82:b8:cc:cd:c2:8d:e0:
                    56:71:bb:8e:01:1a:19:9f:ee:39:b8:32:d5:1d:d4:
                    f1:fd:b0:c3:56:46:04:c1:cf:8e:cb:ac:04:ad:71:
                    b5:74:1c:e9:95:5b:4c:4c:24:75:b8:de:e9:2c:74:
                    91:2a:c9:38:95:6a:64:8d:c3:fe:ff:e8:90:ba:a0:
                    a4:77:cd:11:8a:70:98:6e:6f:cf:89:43:ee:fa:74:
                    67:8e:e5:20:59:cf:4d:ac:0f:2c:4c:b6:a7:9d:9b:
                    ba:c1:56:1e:0c:3e:f0:39:f6:64:0a:02:3e:76:0f:
                    46:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4A:97:6B:DA:12:9F:4D:3D:7D:C9:EC:33:08:6F:6A:5E:F0:B8:16
            X509v3 Authority Key Identifier:
                keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:65:12:e3:a1:bc:6e:d7:1a:35:94:a1:1d:4b:b6:84:35:89:
         ac:90:ec:90:39:be:af:63:42:3a:ee:33:a1:c6:3a:e7:8e:fd:
         c0:22:e4:09:3c:c3:f8:58:ed:5e:00:ed:36:76:2c:e8:4f:cd:
         9e:a7:57:96:10:e7:48:62:1e:63:9e:1f:52:eb:76:f1:da:38:
         d5:77:8d:6c:4e:1b:a3:da:15:d6:e7:ae:47:e3:c2:07:2f:68:
         57:af:c6:ee:34:7c:b9:e8:de:1b:a8:b8:2d:aa:0c:c2:69:f3:
         cc:61:8f:60:f5:ba:ff:7f:27:97:0b:a1:88:2b:b3:b5:cc:81:
         03:b1:0f:a0:1f:25:18:78:6b:aa:fd:64:cb:f4:1d:22:b0:9e:
         1c:cb:52:38:80:0f:d5:d8:44:5a:88:47:8f:f9:48:7d:82:68:
         3d:97:3b:20:b4:f2:e7:4f:18:9c:f6:96:0b:04:94:a8:ab:9d:
         fa:64:d1:05:50:12:5d:82:3e:95:0c:a8:78:db:ba:49:5b:42:
         4d:ae:68:b1:6c:52:aa:e3:a1:1e:7c:99:ff:85:a7:06:26:e2:
         ca:f1:b3:1f:ea:44:a3:ef:39:02:d9:84:85:f1:28:9e:84:a8:
         d9:65:f3:00:f5:f6:15:cb:8c:48:e0:fd:d6:a9:fd:4a:f1:33:
         b3:6b:2b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:24 2025 by rpki-client