Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
File:                     fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft (raw, json)
Hash identifier:          YWcIwWI37hG7ozttNJ0l/dS6BGnplJmJdd4YWsaazq0=
Subject key identifier:   5C:51:56:1A:B0:9F:3F:CD:9B:53:5F:94:D1:A1:AD:79:F1:8F:A6:4E
Authority key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
Certificate issuer:       /CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Certificate serial:       0195E159CFB49A34A4E953DC121001A5D379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
Manifest number:          0803
Signing time:             Sat 29 Mar 2025 10:01:54 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:54 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:54 +0000
Files and hashes:         1: WdmL2O8VPrkR42ZOw2QephNcMKQ.roa (hash: hlVVES8UOIZDvKYVagg5Nkh0JVEcOtJVFmlV0ra9F/8=)
                          2: fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl (hash: fmQCNvRuAu7599PWUZRuqPY9IK0w6SMcVinibzPuO5I=)
                          3: lujy_B0CgE3UQHNrtRpIDknhG84.roa (hash: HhEZYonW06tw2KSs5U9keAqL3PO1g1AoWXaLns6T1aM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:cf:b4:9a:34:a4:e9:53:dc:12:10:01:a5:d3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
        Validity
            Not Before: Mar 29 10:01:54 2025 GMT
            Not After : Mar 30 10:01:54 2025 GMT
        Subject: CN=5c51561ab09f3fcd9b535f94d1a1ad79f18fa64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:47:cc:1d:92:81:4d:ee:d8:c2:32:dc:84:
                    46:fc:3d:64:9b:09:fe:3b:14:81:06:5b:92:5e:fd:
                    9e:4a:4c:55:13:62:90:d8:eb:14:b5:b9:1a:04:df:
                    c6:29:5e:0e:1c:b7:c7:e9:b1:20:b9:11:0d:b4:b9:
                    78:b3:1e:56:0b:3f:9b:aa:4e:19:bf:e1:fa:3d:f4:
                    03:e4:ac:8d:75:5f:61:ca:16:bd:7b:1c:10:fc:fc:
                    83:19:ca:e8:00:ab:63:74:6f:93:98:56:a3:3c:cf:
                    72:3d:e1:b7:4f:18:1d:61:6e:21:fb:1d:4c:74:f6:
                    62:3b:81:87:b8:2f:d1:ee:08:84:aa:06:e2:8a:84:
                    8c:90:bf:a1:e2:e7:7d:1f:fe:79:72:0d:42:ea:a2:
                    4f:44:b1:ad:31:0f:62:7a:ba:70:eb:f8:b4:f0:6b:
                    ed:25:da:01:db:42:c4:39:0d:c5:55:88:c0:a1:14:
                    52:a5:06:b9:b9:5e:39:33:48:46:75:e3:36:f1:e6:
                    31:89:44:b1:9d:49:e1:48:1e:3c:b9:b4:32:18:99:
                    7b:d2:72:2b:73:20:42:49:44:bb:e4:58:2b:8c:79:
                    f3:d8:7c:f1:4b:00:2f:e1:af:84:0f:35:4c:a6:de:
                    d6:78:c6:4f:ce:02:c1:03:e2:0f:54:4d:6c:21:58:
                    0d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:51:56:1A:B0:9F:3F:CD:9B:53:5F:94:D1:A1:AD:79:F1:8F:A6:4E
            X509v3 Authority Key Identifier:
                keyid:7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:10:14:66:82:f3:6c:fd:96:28:e6:c3:4d:94:58:3f:e0:28:
         76:31:85:00:66:c4:de:34:58:07:e9:2d:17:0f:8a:ac:1f:04:
         13:62:45:81:26:94:2b:67:49:e1:ed:70:d8:93:0f:30:10:ec:
         3c:10:57:df:63:7f:5e:21:cc:70:4e:ce:24:d6:c6:24:fe:0f:
         f9:47:49:68:be:2e:71:d0:6c:20:61:1f:43:dd:2a:0f:12:de:
         0f:cb:27:11:28:0d:80:5d:f3:6d:46:ef:ad:b1:5a:9c:db:51:
         2a:90:d0:c9:6d:3c:26:ac:47:f6:3b:4c:45:0d:58:b5:00:9f:
         7b:26:38:6f:37:d7:44:14:93:d6:47:49:ad:0b:c5:85:ab:2f:
         c3:f3:ec:19:26:45:7b:2f:61:04:50:c7:25:c4:48:7e:19:c9:
         e9:31:05:4e:12:67:f4:40:2b:48:13:1c:16:c0:c8:50:c6:ee:
         7c:32:b0:e8:2b:6e:f8:99:13:e6:fe:09:d5:9e:f7:0d:2e:3a:
         e8:b5:cd:b2:d4:ce:db:a8:3e:44:70:da:3e:2e:e0:47:57:e9:
         e9:22:77:0b:21:ba:5c:8f:26:02:d7:0c:bf:8d:50:cb:9d:d5:
         8c:f2:b5:f8:02:db:4d:01:f1:36:8d:eb:04:81:66:2d:14:2c:
         bf:1c:82:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:10 2025 by rpki-client