Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/32a7fc-cc0d-48b5-99f7-1af13f6e4e3f/1/eI1IhmqC--F3h2FBES9bqYVc36I.mft
File:                     eI1IhmqC--F3h2FBES9bqYVc36I.mft (raw, json)
Hash identifier:          FiajbdtWpsRtCSdKw3wqqFteGYe8kOj1DbYQ1AaoDi8=
Subject key identifier:   34:B2:70:11:28:FA:78:7D:F5:68:E1:AC:2C:26:72:F0:4A:6D:36:06
Authority key identifier: 78:8D:48:86:6A:82:FB:E1:77:87:61:41:11:2F:5B:A9:85:5C:DF:A2
Certificate issuer:       /CN=788d48866a82fbe177876141112f5ba9855cdfa2
Certificate serial:       0194B5952DC0137AC891991ECE5733892EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eI1IhmqC--F3h2FBES9bqYVc36I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/32a7fc-cc0d-48b5-99f7-1af13f6e4e3f/1/eI1IhmqC--F3h2FBES9bqYVc36I.mft
Manifest number:          1B
Signing time:             Thu 30 Jan 2025 05:00:40 +0000
Manifest this update:     Thu 30 Jan 2025 05:00:40 +0000
Manifest next update:     Fri 31 Jan 2025 05:00:40 +0000
Files and hashes:         1: eI1IhmqC--F3h2FBES9bqYVc36I.crl (hash: oMMbo+1qSyXiLk8KhoiEJ1VbpplM2MdKRAUztMferIk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:b5:95:2d:c0:13:7a:c8:91:99:1e:ce:57:33:89:2e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d48866a82fbe177876141112f5ba9855cdfa2
        Validity
            Not Before: Jan 30 05:00:40 2025 GMT
            Not After : Jan 31 05:00:40 2025 GMT
        Subject: CN=34b2701128fa787df568e1ac2c2672f04a6d3606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d5:9d:3e:5d:53:24:2e:04:cb:8d:ba:85:4e:
                    6d:58:60:b9:a3:e8:f6:99:6b:c0:30:ed:14:ea:3c:
                    38:66:e5:9e:05:f9:50:6e:84:e2:e1:3b:c0:7e:1f:
                    bf:b3:f4:5a:b0:35:6d:71:0c:47:36:29:0a:a2:16:
                    17:19:36:ab:56:95:99:ab:28:05:04:b5:e7:7c:b1:
                    ef:8a:05:c1:1e:ee:1c:b2:02:36:49:c9:33:8d:cc:
                    5a:8d:49:7c:dc:1d:38:29:93:d6:2f:9f:88:c1:f5:
                    a7:85:56:0b:a5:5f:17:28:47:a7:d2:45:37:64:e8:
                    36:70:0b:72:bc:d1:27:35:5c:1a:ef:cd:88:9a:11:
                    f9:6d:d5:53:77:b9:20:2a:75:21:e8:c3:9e:7c:38:
                    72:04:98:89:16:5c:cf:4b:81:b3:94:fd:b4:32:a3:
                    34:b0:4d:2d:52:80:0f:da:2a:42:cd:11:a5:1e:ca:
                    a1:db:11:58:80:11:2e:3d:04:41:43:e5:77:df:62:
                    d1:94:19:59:02:e2:8b:06:b6:2d:5d:4a:73:9a:54:
                    dd:2c:f4:71:4d:33:10:fc:db:39:ff:b5:64:33:cd:
                    a5:78:d7:c9:d2:46:0d:b2:a2:b5:af:a2:b7:be:9e:
                    51:fe:f2:02:97:08:29:97:3e:15:2a:78:c1:84:b2:
                    28:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B2:70:11:28:FA:78:7D:F5:68:E1:AC:2C:26:72:F0:4A:6D:36:06
            X509v3 Authority Key Identifier:
                keyid:78:8D:48:86:6A:82:FB:E1:77:87:61:41:11:2F:5B:A9:85:5C:DF:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI1IhmqC--F3h2FBES9bqYVc36I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/32a7fc-cc0d-48b5-99f7-1af13f6e4e3f/1/eI1IhmqC--F3h2FBES9bqYVc36I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/32a7fc-cc0d-48b5-99f7-1af13f6e4e3f/1/eI1IhmqC--F3h2FBES9bqYVc36I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b7:b8:fc:e8:7e:74:af:68:41:a3:b4:69:13:ba:e9:f3:46:
         1e:9e:78:56:91:7a:6e:53:a1:b4:e2:ad:6a:6a:5d:09:3a:a5:
         f1:58:2a:5d:8b:2f:c1:d2:22:00:3e:40:fa:7e:b5:cd:ee:29:
         ab:15:a5:e2:92:a1:3f:26:1c:1e:be:17:63:ec:af:e3:81:0c:
         60:7c:52:01:55:60:9c:33:5a:6f:9e:f0:39:1f:e4:d5:52:c4:
         84:35:f0:6a:f4:06:17:80:2d:b9:8c:13:13:74:74:50:b6:82:
         45:09:13:07:3b:27:15:3e:b8:a3:63:60:e7:6d:90:59:35:27:
         eb:91:0c:ec:c4:f1:6d:66:2f:33:25:c2:95:4b:ac:8a:f7:98:
         01:98:a1:a6:04:f3:6b:13:93:71:d5:73:20:45:62:13:84:6f:
         3c:e6:c7:63:23:0d:c0:d8:93:fc:b5:7e:b2:ab:c1:ec:dc:6e:
         5f:94:11:32:f3:e8:25:a3:2f:15:c8:c3:48:ea:14:ab:1e:ba:
         e6:b2:b4:29:97:b4:55:e8:1e:83:38:d0:89:67:cd:77:8f:91:
         0f:4e:c5:e1:8e:65:b0:ed:8f:81:1f:91:86:ae:11:18:86:30:
         26:56:db:83:d3:4d:9f:25:ce:59:c3:a7:c0:88:ae:a4:5b:81:
         f9:4f:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:41:10 2025 by rpki-client