Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
File:                     flrIG7zPhS8irI7VLS6S2zHY1gY.mft (raw, json)
Hash identifier:          5yqPRVa19zoH701dqwm5XDlgRXs128iTzLHiR3LNJZE=
Subject key identifier:   43:2B:65:CB:BF:39:D7:CF:F9:D4:8B:3D:E3:23:32:7A:F6:3C:3D:D6
Authority key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
Certificate issuer:       /CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Certificate serial:       0194BC72932C9333CFD5C580E79700766899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
Manifest number:          01F3
Signing time:             Fri 31 Jan 2025 13:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:12 +0000
Files and hashes:         1: flrIG7zPhS8irI7VLS6S2zHY1gY.crl (hash: BeD4EhBEH/s9kHCAqT0CsUtG+C+laLomubFHhWYb7hU=)
                          2: yWx6-5ROTfngpbWofjIrovB2Q6E.roa (hash: v3rtNkszsHfCVuw51qTsQgDiQ2kYX2tvZDcMhV4gxJA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:93:2c:93:33:cf:d5:c5:80:e7:97:00:76:68:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
        Validity
            Not Before: Jan 31 13:00:12 2025 GMT
            Not After : Feb  1 13:00:12 2025 GMT
        Subject: CN=432b65cbbf39d7cff9d48b3de323327af63c3dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:62:f8:81:2c:98:e7:49:f2:f7:59:0a:c6:51:
                    c9:15:97:68:3a:d4:d9:76:b6:a6:85:f3:84:77:1b:
                    fc:b6:b6:46:90:e1:85:1e:ce:9c:40:d6:6e:35:f0:
                    be:46:95:9d:fd:4f:80:1b:33:84:0e:63:96:95:f5:
                    57:08:60:0a:ae:39:4c:92:5b:9c:42:8d:f0:de:ba:
                    d8:d2:aa:98:fc:e6:f3:8a:d5:ec:0e:73:23:4c:95:
                    c0:1c:d3:be:46:7b:ac:6d:a9:6b:e7:6f:4b:c6:08:
                    27:8a:6a:89:68:e4:a2:ce:b5:46:51:ce:bf:c1:1c:
                    d4:c8:c2:a7:62:6a:35:ed:98:39:97:10:3c:d5:a0:
                    50:c2:bb:75:0c:50:5a:a7:a1:02:d1:31:fc:3b:a6:
                    4c:e7:1b:0b:4a:cd:d9:d6:66:1b:bd:ca:67:1e:6d:
                    75:76:84:a0:0d:20:d5:23:33:aa:07:2c:a8:6e:f6:
                    aa:f5:e4:a6:6a:43:85:41:bf:fe:cb:52:1d:8b:c9:
                    d0:4a:f3:26:ca:65:e0:99:12:cb:ef:28:b2:e8:d8:
                    d9:b6:6b:26:29:f6:e2:98:74:0f:96:a6:d8:2e:b4:
                    96:34:c7:00:d1:61:7a:db:94:ae:f5:7e:eb:d5:7b:
                    4d:22:4b:4b:56:1a:b7:11:c0:60:2e:02:60:8c:35:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2B:65:CB:BF:39:D7:CF:F9:D4:8B:3D:E3:23:32:7A:F6:3C:3D:D6
            X509v3 Authority Key Identifier:
                keyid:7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:07:9c:a6:81:f3:26:b4:e7:f8:78:97:e9:46:30:3e:f3:50:
         ff:f2:bd:b5:32:34:43:d3:eb:cd:40:01:30:65:bb:4d:18:46:
         1e:26:71:be:39:7e:c5:bf:49:b3:d5:4a:21:89:50:bd:ab:51:
         e4:c2:00:46:0f:1b:b6:4f:92:c3:c8:6b:b2:7d:7f:92:8d:64:
         91:a5:74:2f:7b:d7:e6:c0:2d:43:d4:ad:47:de:b8:ef:26:e1:
         be:b1:ac:d6:29:bd:e8:9c:ec:a1:ef:c9:32:4c:04:94:4c:5e:
         fd:b8:f3:15:06:44:2c:1e:ae:c2:b3:80:01:01:db:26:ae:7d:
         ac:fb:0b:f4:a5:03:e7:f2:21:21:58:54:5b:7c:74:a8:28:e4:
         88:c4:02:90:d7:e5:3e:5d:84:df:87:e2:ce:db:64:ed:1b:d0:
         09:12:cc:14:cc:6b:95:94:25:b5:22:d5:03:70:6d:db:99:7c:
         2c:27:e1:ed:8b:54:52:b0:9a:7d:6a:c9:2f:11:14:b0:9b:fb:
         e1:e1:ed:75:46:31:1f:c2:3d:4b:55:79:14:a2:e4:a5:f2:e6:
         90:48:51:58:31:3d:c2:29:4a:36:1e:9c:2a:be:eb:ec:d5:36:
         b8:0d:a9:52:16:0e:62:00:b2:d3:bf:57:f4:05:1a:d8:ce:29:
         af:ca:86:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:25 2025 by rpki-client