Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
File:                     9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft (raw, json)
Hash identifier:          Urh7BqcHoIRrcDYzDJaPj8+cDOmq0rvpCbDSw4XJuDk=
Subject key identifier:   F6:BA:5A:ED:07:8E:8A:4D:E2:92:43:86:57:D8:DD:71:39:35:1F:3B
Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
Certificate issuer:       /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Certificate serial:       0194BD85A79F9DA3355BBE65DE8B352A4BAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
Manifest number:          0875
Signing time:             Fri 31 Jan 2025 18:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:40 +0000
Files and hashes:         1: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl (hash: U0MASZqMinLVDY1HUr1dLGK+4UpAx5wSBiuDqYlsRrA=)
                          2: Ecb-mPJB0EgEtmCxBO-R8Q4l8Pc.roa (hash: gJwQTQJlZO5UonEbd+MqbZuAtcvQedjepcRUTfg3vec=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:a7:9f:9d:a3:35:5b:be:65:de:8b:35:2a:4b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
        Validity
            Not Before: Jan 31 18:00:40 2025 GMT
            Not After : Feb  1 18:00:40 2025 GMT
        Subject: CN=f6ba5aed078e8a4de292438657d8dd7139351f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:53:ab:03:21:cb:0b:d1:af:bc:f6:1f:52:
                    d0:9c:12:11:bc:78:c6:50:1d:6b:0e:a8:aa:bf:99:
                    5a:8a:81:3f:0e:fe:ab:48:e4:40:8f:0b:17:a4:98:
                    c2:37:5d:37:40:87:5f:14:3f:9a:fa:eb:d1:09:c5:
                    65:95:78:97:76:91:3c:8f:43:8e:78:d3:bd:13:cb:
                    c2:f0:ee:d4:a3:10:34:b3:59:be:f0:ca:76:1a:90:
                    52:af:f2:e1:5d:c0:17:0f:8b:bf:bd:54:c0:c6:17:
                    c7:2b:2b:8f:22:58:5c:73:79:e0:b3:da:90:d4:e2:
                    65:19:cf:0d:cc:26:d4:7d:c7:bc:d9:aa:f8:48:62:
                    c8:0a:18:8b:01:45:c3:73:0f:07:a2:72:9a:ea:e2:
                    24:e8:1e:cd:06:17:52:d0:7e:6a:e1:e6:17:17:83:
                    54:3f:94:1d:dd:57:22:ee:6f:d8:af:e1:cc:c0:e5:
                    e5:57:2b:38:7b:62:54:d9:a5:34:10:16:27:3d:29:
                    22:57:06:e4:4c:86:1b:c6:ed:7a:ff:11:5e:c8:cd:
                    2c:77:73:34:c2:69:c9:37:0f:13:f1:9d:5c:13:5f:
                    ef:b6:07:dc:ac:ed:0a:93:10:7a:ad:86:05:de:36:
                    2d:9e:2d:62:32:f3:00:9e:82:df:20:41:f5:ad:98:
                    11:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BA:5A:ED:07:8E:8A:4D:E2:92:43:86:57:D8:DD:71:39:35:1F:3B
            X509v3 Authority Key Identifier:
                keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cf:6d:64:82:9a:0a:e7:ad:80:46:05:1c:a3:67:d9:32:52:
         98:69:55:f9:50:7f:3b:41:87:37:d5:ca:94:6d:d8:94:9d:31:
         bc:0b:ed:fd:b2:5d:fe:4b:bd:20:7d:e0:f2:e9:0c:9a:19:0f:
         89:0f:f8:4b:3e:74:bb:43:60:bc:73:bf:16:ab:b0:f9:90:d5:
         58:e1:8f:ea:db:71:64:30:3c:d5:a5:f2:7a:13:8f:30:97:d7:
         e8:76:48:ef:ac:a5:82:6d:eb:4a:67:5a:0c:58:d6:50:fc:cf:
         7e:5d:16:f0:0b:45:59:c8:45:06:41:6a:70:b1:a8:e9:8a:02:
         03:c3:c7:43:5f:e4:06:fd:a5:d9:56:6c:70:9c:09:25:8e:4b:
         b4:6e:c9:be:c7:26:f9:ea:68:31:63:61:af:8e:bd:df:91:0c:
         26:e4:c8:1f:ee:91:17:83:9d:1f:f2:a9:7d:96:a0:cc:9b:0e:
         30:6c:5c:e7:95:eb:89:e7:54:a0:23:a5:fd:d6:dd:3d:73:96:
         e2:54:75:d4:a8:e0:87:45:44:56:fd:1d:b5:6a:05:8a:a7:a9:
         fe:6f:06:03:f6:17:22:b0:18:1c:5f:25:7f:96:49:08:89:cc:
         e8:75:ef:90:50:36:61:0a:da:2d:7e:ed:44:3d:d1:be:d6:75:
         2b:6c:6b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:40 2025 by rpki-client