Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
File:                     f1HfHfTohn5B5ef5Lef50foMFU0.mft (raw, json)
Hash identifier:          0IfXI6CNG+i+gJGmVyRhsYnV+YXrCWdZePTc7c0I6os=
Subject key identifier:   31:D4:98:51:DC:60:52:62:3A:2D:A1:77:32:8A:49:EB:36:93:64:BB
Authority key identifier: 7F:51:DF:1D:F4:E8:86:7E:41:E5:E7:F9:2D:E7:F9:D1:FA:0C:15:4D
Certificate issuer:       /CN=7f51df1df4e8867e41e5e7f92de7f9d1fa0c154d
Certificate serial:       0194BC3BD83BB4839D7D0A6C51D0D3BF95FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft
Manifest number:          090F
Signing time:             Fri 31 Jan 2025 12:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:26 +0000
Files and hashes:         1: f1HfHfTohn5B5ef5Lef50foMFU0.crl (hash: MVX/jU2IP9selInPDqf15OWN2JpitFM+iM+FRBEQkOA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:d8:3b:b4:83:9d:7d:0a:6c:51:d0:d3:bf:95:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f51df1df4e8867e41e5e7f92de7f9d1fa0c154d
        Validity
            Not Before: Jan 31 12:00:26 2025 GMT
            Not After : Feb  1 12:00:26 2025 GMT
        Subject: CN=31d49851dc6052623a2da177328a49eb369364bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:20:0b:34:7f:e8:1b:b8:f9:82:41:c9:a0:
                    ae:0c:9f:87:46:5a:72:d4:6b:8f:c4:93:30:c2:97:
                    21:76:2c:2b:5f:db:91:11:96:c1:ee:fb:17:7b:18:
                    b5:0c:dc:a1:d8:ba:72:96:da:da:2f:5f:4d:89:9e:
                    3a:61:c0:b5:01:1b:c2:4c:d1:9f:5f:6c:95:43:1f:
                    b1:50:11:f9:b8:ac:79:da:c0:88:93:7b:3b:9c:9c:
                    35:cb:1b:5b:14:d2:32:5b:86:9d:60:fa:99:90:16:
                    76:75:13:cd:62:2f:12:f7:c2:cf:94:0e:19:60:fe:
                    0b:d6:d8:d0:dc:dd:a5:b6:29:55:e1:b6:b5:96:34:
                    6b:3e:7e:58:8b:db:3a:48:96:02:09:50:ef:7e:85:
                    98:3f:db:7a:10:7b:50:0d:26:33:b9:d2:a1:6f:7f:
                    1e:e0:28:69:7b:9a:7b:5c:67:f6:0a:eb:8f:a2:b0:
                    bf:e9:cf:32:ae:6f:dd:56:a6:67:7d:8e:bd:3f:d7:
                    53:cc:67:bf:6f:77:02:88:01:29:65:55:9b:8b:c8:
                    11:12:67:a4:dc:28:c6:bd:02:77:80:84:50:5d:d4:
                    46:45:cc:ba:64:70:7a:e0:a3:54:63:7a:ea:58:da:
                    7f:1d:0b:82:78:73:26:7b:37:fb:07:93:99:05:7f:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D4:98:51:DC:60:52:62:3A:2D:A1:77:32:8A:49:EB:36:93:64:BB
            X509v3 Authority Key Identifier:
                keyid:7F:51:DF:1D:F4:E8:86:7E:41:E5:E7:F9:2D:E7:F9:D1:FA:0C:15:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:32:b4:a7:06:3f:d9:66:a3:ef:9c:a2:bc:f0:63:80:03:00:
         58:59:f7:a6:25:24:ff:05:ae:23:dc:42:f7:ec:71:e4:7e:61:
         c0:98:7a:04:57:44:27:48:10:57:42:48:9d:7e:d3:56:bb:1d:
         6a:91:9e:53:b5:1c:3e:3d:7c:0f:c5:3f:2b:39:d0:dc:00:52:
         52:a7:78:bc:96:89:f2:64:d8:5f:60:dc:cc:93:27:39:c8:46:
         1b:2d:2c:a7:6c:b8:19:d8:b9:a7:96:c0:33:09:d8:39:04:34:
         76:56:7e:e8:b4:c7:fe:35:45:fe:58:3f:b7:d9:88:64:e8:90:
         9b:92:5a:97:c6:1b:b1:cc:71:7e:ec:e1:c6:a7:6a:bd:70:58:
         0e:1c:68:33:38:9a:94:ef:db:39:e8:30:4b:07:82:22:a3:cc:
         dc:5a:a5:f9:9b:c7:b2:b2:a1:87:fc:db:34:34:29:fd:fd:1b:
         91:8c:45:af:5e:81:99:f2:3f:d0:7b:5b:ed:ac:9f:10:c7:10:
         a0:a0:81:26:06:11:e2:26:bf:cd:f1:b6:ae:a5:60:6f:ae:7e:
         a5:3d:c4:5f:59:0b:e5:9b:64:e2:a5:34:44:be:c2:3f:0b:da:
         33:20:3e:4b:08:3d:3d:b8:94:ad:fb:f1:e4:bd:35:ce:f1:80:
         74:c3:c2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:05:02 2025 by rpki-client