Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft
File:                     FPsZA22DNH9Rl66gLaSmlbkYlYw.mft (raw, json)
Hash identifier:          Vh8xpMqSd7Ne8YTE/ZRPBCilFX0hrf8d6KLasH7G3Ns=
Subject key identifier:   4B:E2:51:85:87:AC:58:C5:05:EB:DF:E7:16:44:B9:F8:FF:E5:0C:DF
Authority key identifier: 14:FB:19:03:6D:83:34:7F:51:97:AE:A0:2D:A4:A6:95:B9:18:95:8C
Certificate issuer:       /CN=14fb19036d83347f5197aea02da4a695b918958c
Certificate serial:       019714D616335A35BB7D816DEF09B950FE81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FPsZA22DNH9Rl66gLaSmlbkYlYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft
Manifest number:          0435
Signing time:             Wed 28 May 2025 03:01:04 +0000
Manifest this update:     Wed 28 May 2025 03:01:04 +0000
Manifest next update:     Thu 29 May 2025 03:01:04 +0000
Files and hashes:         1: FPsZA22DNH9Rl66gLaSmlbkYlYw.crl (hash: TCa7m7oy/Us9ga0461lxsGP3cpBPBA1Ii8sPQTNdkAc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:14:d6:16:33:5a:35:bb:7d:81:6d:ef:09:b9:50:fe:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14fb19036d83347f5197aea02da4a695b918958c
        Validity
            Not Before: May 28 03:01:04 2025 GMT
            Not After : May 29 03:01:04 2025 GMT
        Subject: CN=4be2518587ac58c505ebdfe71644b9f8ffe50cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:81:c4:47:01:d0:a1:bc:af:39:76:38:59:
                    5e:66:57:c0:dd:62:68:10:55:d9:ee:f4:ff:2e:83:
                    4c:36:bb:97:85:3b:40:a0:47:e3:41:15:60:9d:e5:
                    98:e6:9d:a8:4a:2d:d7:26:72:37:f1:b2:da:8f:61:
                    58:72:0a:de:79:68:85:14:a1:9e:d2:96:f9:1c:cc:
                    fe:25:e7:07:a4:27:e5:70:a5:b7:dc:1c:bf:91:7c:
                    f6:00:dd:72:0d:11:0a:23:02:ec:d5:3d:d8:c2:31:
                    4a:77:ca:e2:29:ee:f3:6d:bb:6f:08:38:c9:8a:cf:
                    59:7f:bc:eb:77:c3:5d:8b:3b:bd:0e:de:dd:fe:4d:
                    4c:90:d6:bb:8b:e2:b8:f2:99:87:a5:95:47:d2:91:
                    77:d6:93:01:a5:33:5f:d5:7c:5c:5d:4e:d9:01:4b:
                    c8:07:b7:02:05:c5:83:c3:84:08:2d:0d:5a:48:bb:
                    2e:0b:b3:29:b9:99:b5:0b:f1:c6:0d:21:29:09:5d:
                    db:79:7e:6e:97:32:c8:84:63:49:09:d8:e2:ea:dc:
                    7a:eb:08:86:4f:d4:c6:e4:28:5a:99:e0:80:8c:8f:
                    82:d2:01:7c:3d:23:bd:ab:18:7e:37:5d:67:e8:c3:
                    eb:70:d0:46:5e:38:e2:71:88:14:d9:15:3b:b5:3e:
                    ef:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E2:51:85:87:AC:58:C5:05:EB:DF:E7:16:44:B9:F8:FF:E5:0C:DF
            X509v3 Authority Key Identifier:
                keyid:14:FB:19:03:6D:83:34:7F:51:97:AE:A0:2D:A4:A6:95:B9:18:95:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPsZA22DNH9Rl66gLaSmlbkYlYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d1d7da-edc2-4674-ae8d-29e663edddde/1/FPsZA22DNH9Rl66gLaSmlbkYlYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:15:a7:72:f6:b1:1d:87:e8:6c:f6:93:bd:5e:ca:5b:1c:5b:
         08:c2:b7:8a:06:88:1f:77:5d:87:bb:72:33:03:64:46:10:4b:
         d7:cf:78:ee:78:14:02:25:e5:9d:3d:07:1e:7e:b5:dc:76:e7:
         b8:88:d7:ba:82:e0:a5:61:08:8d:65:8d:90:85:11:11:d5:20:
         30:93:29:f3:d0:e4:2c:96:14:16:17:88:d4:79:22:03:84:51:
         a7:87:38:7a:50:b7:19:2d:f1:37:d5:78:41:37:67:51:08:e7:
         e0:ff:1f:ac:18:fe:e2:92:aa:4e:d1:d8:d1:0f:05:7c:83:f2:
         db:14:38:d6:45:6b:e8:3e:30:da:b4:1d:67:3e:c7:37:5d:b2:
         da:b5:11:26:e6:be:92:bd:8b:0b:45:b9:1e:8c:18:72:6b:d9:
         f1:6c:7e:d0:67:71:79:4c:76:3f:a2:5e:f3:e4:16:fd:48:3e:
         48:2c:ac:77:05:fa:da:9e:d2:5c:8f:29:4a:ad:23:f5:b5:f3:
         fb:72:f7:62:53:b0:ab:b2:e4:78:7c:7f:ca:ed:db:08:77:62:
         0e:42:cd:46:41:6b:ed:65:8a:b1:98:ad:28:26:b4:74:47:6b:
         30:8b:bd:f1:a7:99:e2:80:33:f2:d1:38:cc:60:1b:fe:8f:90:
         20:eb:30:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:27:20 2025 by rpki-client