Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
File:                     eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft (raw, json)
Hash identifier:          bl0DI2cHaDtFyCvzEQ2+npEzFlGvIbfNtVp5HRlqoNM=
Subject key identifier:   8F:5A:88:4B:C9:49:0E:3C:DD:8A:47:8F:55:B8:7C:21:25:77:53:8E
Authority key identifier: 78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C
Certificate issuer:       /CN=78d403d938d71bdc5a3acb076d32af8283be627c
Certificate serial:       0194BBCEDBA4A49958EACF33F403F62F9560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
Manifest number:          0547
Signing time:             Fri 31 Jan 2025 10:01:23 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:23 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:23 +0000
Files and hashes:         1: eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl (hash: FmFh57Oz6KkXA0LqrZ7bECVOvKSiazLBvzzZeb/PkOw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:db:a4:a4:99:58:ea:cf:33:f4:03:f6:2f:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d403d938d71bdc5a3acb076d32af8283be627c
        Validity
            Not Before: Jan 31 10:01:23 2025 GMT
            Not After : Feb  1 10:01:23 2025 GMT
        Subject: CN=8f5a884bc9490e3cdd8a478f55b87c212577538e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:78:68:34:d5:23:d5:1c:20:58:0b:af:fd:
                    6d:98:e8:72:7e:eb:d9:0c:4a:b0:28:69:39:dc:a1:
                    6b:39:6e:ac:fb:eb:64:2c:30:f5:2a:80:e1:c1:24:
                    df:ad:8b:7b:af:ea:66:40:99:28:3f:9f:1d:8f:e6:
                    ff:c4:c6:f9:6d:91:ef:9a:3b:92:7f:99:0c:9d:06:
                    6b:03:41:8c:b2:e7:e4:e7:18:ae:94:db:f4:27:79:
                    04:5c:cc:3d:9f:af:b3:46:75:7c:12:f1:15:a3:e3:
                    ed:23:a6:72:4f:53:38:87:61:e1:b2:91:1a:da:5e:
                    82:fa:35:74:8d:1a:64:be:46:d3:c2:00:9a:c6:9b:
                    5f:f7:23:20:4b:97:47:5a:b6:7b:66:30:be:f0:f4:
                    0c:e0:15:4f:ba:4e:ae:1c:ad:79:39:5e:36:06:43:
                    3e:0b:2c:83:88:ff:bd:e3:30:91:a0:7a:9e:72:94:
                    56:fc:68:9f:d2:66:18:f1:e8:bb:ba:3f:df:e8:59:
                    8e:73:1c:d2:9d:22:b4:46:e6:ba:98:53:f4:8a:0e:
                    50:c3:a4:51:92:94:7e:59:de:20:cc:bd:49:2e:4a:
                    84:6f:3a:99:03:54:33:e5:ad:e4:c8:79:41:f6:83:
                    c1:b1:3f:d8:b6:b3:aa:79:5d:70:19:55:d9:16:4d:
                    2e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5A:88:4B:C9:49:0E:3C:DD:8A:47:8F:55:B8:7C:21:25:77:53:8E
            X509v3 Authority Key Identifier:
                keyid:78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:0f:d0:59:be:52:5e:6f:f5:30:e2:c5:8c:85:80:3f:e7:f6:
         43:14:18:c2:fe:c1:05:d8:d8:5f:d4:ab:f3:77:82:ab:25:ff:
         f2:c9:c3:04:92:0b:ab:04:e4:94:90:3f:26:e8:c8:7f:83:f3:
         66:06:b8:99:fc:05:54:fe:47:fd:31:60:64:d0:14:a1:9f:bd:
         fb:4e:5c:f3:cf:8a:ed:90:ea:df:ff:23:a0:8f:13:c2:d1:18:
         9e:ee:84:f5:12:a1:68:80:3e:77:1b:aa:9b:c3:7a:4e:b5:b4:
         a7:5f:0f:f4:55:03:5b:36:31:5b:a3:21:e4:6e:41:46:cf:5d:
         a2:8d:f9:17:99:eb:57:81:95:09:8b:c5:56:9a:9d:d8:e1:b9:
         ce:75:e0:03:6a:85:91:a6:62:65:3a:63:d5:82:5a:03:96:2b:
         21:3e:7d:56:1e:6a:4f:30:19:b4:95:0e:d4:ed:42:d3:77:33:
         2a:dd:09:81:c1:d9:13:44:6a:a7:82:c5:56:9c:cc:3c:2b:3a:
         f9:7c:54:48:ae:65:59:79:cb:20:fb:33:be:3c:52:cb:d0:13:
         39:99:30:2c:2a:f1:b1:95:fe:1a:4d:49:f4:9e:53:57:7e:fa:
         3c:6c:77:11:b7:74:03:70:8e:46:89:a5:c2:2e:1a:de:94:be:
         9c:b4:4e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:38 2025 by rpki-client