Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File:                     fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier:          J3WQ92s+Ykk5WyZd+AZW9DxLehC6tqQ+rzNk5G2czuA=
Subject key identifier:   A4:A6:A2:67:D1:E9:AD:77:79:7B:59:37:47:5F:A5:84:F7:CA:BC:97
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer:       /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial:       0194BBCED787F9D76FAE2F7B39C98EF5A4B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number:          13BA
Signing time:             Fri 31 Jan 2025 10:01:22 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:22 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:22 +0000
Files and hashes:         1: T65vqqQCj0Js7DJ85sBppVKxPcU.roa (hash: FL22UNhyCGLfnbVMSxPZxrBCfuIiaLb00z7Ca3ye/lo=)
                          2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: 68da7NBvRuA99LQifldqQTGxWEQidPN9jXp+ypBAEZE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:d7:87:f9:d7:6f:ae:2f:7b:39:c9:8e:f5:a4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
        Validity
            Not Before: Jan 31 10:01:22 2025 GMT
            Not After : Feb  1 10:01:22 2025 GMT
        Subject: CN=a4a6a267d1e9ad77797b5937475fa584f7cabc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:5e:b8:18:db:8d:60:70:83:26:ed:c2:1b:
                    05:5c:f4:61:d8:16:29:43:ab:a3:79:af:c8:ed:80:
                    43:1b:27:ac:6b:a3:60:7d:dc:84:54:b1:fe:a3:df:
                    9e:2a:1f:d4:fa:8c:54:30:a4:a4:51:17:dc:71:e3:
                    56:0a:26:4d:82:d1:5f:38:e5:f1:fb:ea:ad:80:f8:
                    4f:60:cd:dc:83:32:ed:af:b1:cd:1f:7a:e5:89:80:
                    1e:cc:21:9e:b8:fd:91:ed:05:02:3d:27:aa:01:fa:
                    47:70:8c:20:b2:59:46:f8:7b:21:9e:d5:1a:b0:58:
                    4b:37:fb:2c:40:b0:9b:97:5d:43:45:77:00:4a:b8:
                    a8:96:0b:8a:4b:b8:cb:88:d1:47:af:ae:93:ef:49:
                    e7:39:f3:b7:b1:f7:ba:94:a1:06:53:9d:b8:d2:c3:
                    ed:8a:c1:61:55:ed:70:07:3e:03:ad:5b:a3:4a:13:
                    b4:80:57:55:42:89:d3:0c:74:a8:09:36:a9:0e:b4:
                    fe:c2:ee:c8:7f:f3:11:3a:20:2c:54:a5:d9:e4:b3:
                    85:93:77:c5:1b:ff:b8:ec:1a:ce:c5:9a:4e:53:5e:
                    2e:89:78:b1:b8:4e:be:54:17:e2:8c:af:fd:75:63:
                    f8:61:f2:99:4d:de:93:6b:9a:92:fc:50:4d:c1:79:
                    4b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A6:A2:67:D1:E9:AD:77:79:7B:59:37:47:5F:A5:84:F7:CA:BC:97
            X509v3 Authority Key Identifier:
                keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3d:80:e6:b1:6f:c3:dd:78:60:d8:1e:3d:45:8c:60:45:f0:
         5e:be:66:2f:4c:f2:47:d5:2e:df:3e:44:f6:22:05:b1:9b:bf:
         9b:8c:f6:00:9e:3d:a4:84:83:21:44:68:84:c6:a8:55:eb:40:
         59:dd:07:88:3a:38:2d:1e:77:2f:40:82:44:29:db:f8:33:41:
         06:de:16:de:de:6d:44:d5:a3:9b:e9:90:2c:54:75:1d:c2:cd:
         30:52:74:63:47:71:45:97:c1:73:5c:db:32:16:70:80:4c:27:
         3c:5e:50:20:d4:05:0c:7e:24:bc:45:eb:84:49:43:8a:16:57:
         e2:e2:f6:f4:54:49:8c:93:0c:25:a5:c5:c6:e7:9c:54:70:b3:
         14:bf:fb:eb:c5:80:a1:86:f3:30:5a:b4:00:c1:ee:c3:d6:0e:
         0e:76:c3:03:83:9b:bf:a0:8c:d5:43:c2:97:b5:f5:7f:0f:96:
         32:9f:7f:f3:4a:ee:8b:c0:62:64:27:8e:b0:f5:80:71:8b:85:
         a1:a7:db:a7:c3:84:e4:0b:8d:9f:78:43:3c:0b:d7:de:12:ff:
         75:7c:f8:fa:84:26:f7:9a:28:a6:b9:63:73:27:99:7c:3b:87:
         af:be:a7:5e:ba:0b:4e:79:91:7a:cf:cc:ea:7d:fd:7a:9f:5d:
         97:87:47:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:31:03 2025 by rpki-client