Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6f67cc-7a9d-4199-a39f-056de8632546/1/t38nEi7goMZXW0HpduhOPqPSHu8.mft
File:                     t38nEi7goMZXW0HpduhOPqPSHu8.mft (raw, json)
Hash identifier:          TooTJK++HDrxpcHNuw6jiSednZkSEn9DxRYU486C+to=
Subject key identifier:   BE:BB:1A:1E:3B:8A:59:69:63:DE:7C:E0:BF:C8:56:08:F6:40:6C:97
Authority key identifier: B7:7F:27:12:2E:E0:A0:C6:57:5B:41:E9:76:E8:4E:3E:A3:D2:1E:EF
Certificate issuer:       /CN=b77f27122ee0a0c6575b41e976e84e3ea3d21eef
Certificate serial:       0194756C20FCDD628666B854E6D823217361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t38nEi7goMZXW0HpduhOPqPSHu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/6f67cc-7a9d-4199-a39f-056de8632546/1/t38nEi7goMZXW0HpduhOPqPSHu8.mft
Manifest number:          0354
Signing time:             Fri 17 Jan 2025 18:00:08 +0000
Manifest this update:     Fri 17 Jan 2025 18:00:08 +0000
Manifest next update:     Sat 18 Jan 2025 18:00:08 +0000
Files and hashes:         1: t38nEi7goMZXW0HpduhOPqPSHu8.crl (hash: r6tcYPPC3UgXBmuLL8O/YuFmCBjI26KlBPuvR4jNMDc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:75:6c:20:fc:dd:62:86:66:b8:54:e6:d8:23:21:73:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b77f27122ee0a0c6575b41e976e84e3ea3d21eef
        Validity
            Not Before: Jan 17 18:00:08 2025 GMT
            Not After : Jan 18 18:00:08 2025 GMT
        Subject: CN=bebb1a1e3b8a596963de7ce0bfc85608f6406c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5f:52:83:32:ca:13:eb:89:ba:14:2e:8b:80:
                    74:bd:40:fe:fd:8b:fd:d2:43:b1:af:07:82:27:fe:
                    85:ff:20:6e:73:ec:c1:4d:21:81:a7:02:d5:79:e2:
                    2d:06:c9:46:b6:b3:c5:23:79:c8:e5:18:44:34:f7:
                    55:b4:cb:59:25:da:7b:e8:66:b5:09:e6:e4:fb:c8:
                    61:00:06:e2:e8:9b:79:77:3a:2e:16:ca:65:fa:47:
                    78:d4:8d:04:42:91:99:ba:5d:57:e9:15:c4:90:5d:
                    76:75:2f:05:71:d9:05:a9:93:2a:6a:f5:3e:36:36:
                    08:43:74:93:53:01:76:09:5a:79:40:73:ab:56:70:
                    a6:06:02:ea:e4:ac:14:c5:07:6e:56:67:80:7c:0d:
                    4b:77:3c:68:ed:52:86:d8:35:59:83:a5:5f:fe:67:
                    46:88:6f:4a:83:3a:19:c0:00:40:e4:6d:dd:43:22:
                    6e:e6:f5:7c:2c:29:65:01:47:ea:f6:f6:90:9a:d8:
                    11:a3:80:fe:92:10:00:f6:66:3f:83:be:e5:10:a4:
                    09:a4:85:ba:b6:96:15:97:54:e5:61:51:fe:06:ad:
                    e7:22:cc:36:ce:b4:09:55:48:38:f1:99:c4:46:02:
                    ee:1e:08:93:7c:b8:d0:91:8f:60:60:8b:78:1e:9c:
                    b9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BB:1A:1E:3B:8A:59:69:63:DE:7C:E0:BF:C8:56:08:F6:40:6C:97
            X509v3 Authority Key Identifier:
                keyid:B7:7F:27:12:2E:E0:A0:C6:57:5B:41:E9:76:E8:4E:3E:A3:D2:1E:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t38nEi7goMZXW0HpduhOPqPSHu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6f67cc-7a9d-4199-a39f-056de8632546/1/t38nEi7goMZXW0HpduhOPqPSHu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6f67cc-7a9d-4199-a39f-056de8632546/1/t38nEi7goMZXW0HpduhOPqPSHu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:2e:54:1c:8b:68:aa:30:e0:4d:9f:ca:a8:38:42:d3:b2:0f:
         86:15:2f:76:e6:0b:af:9d:55:05:f8:fe:b1:7d:16:a8:79:6f:
         56:42:54:ec:e4:e1:e4:62:c5:03:d2:63:28:4d:e9:7c:ec:7d:
         96:21:9e:79:38:cf:3a:dd:3e:71:c5:b6:c6:92:ba:a1:d7:c3:
         25:04:73:4f:33:96:17:e1:81:a7:ea:c6:a4:0d:c1:93:fe:ac:
         62:3a:eb:19:0f:b7:59:cd:d0:94:8e:37:7c:05:40:ea:95:7d:
         a5:8e:c9:65:c8:c3:54:f5:ff:43:63:66:81:36:8e:34:14:cd:
         b9:43:6c:40:6d:fb:77:e5:82:74:3b:a0:fd:47:81:a9:37:fd:
         0a:49:7a:f0:1a:40:78:0b:dd:16:8a:8c:bd:2c:d4:cc:f3:7e:
         61:df:59:2f:0f:f2:e5:6c:0b:2c:c4:83:33:56:95:ab:a4:e8:
         18:7d:78:6c:25:3f:9b:8a:41:93:c9:5f:cc:fe:f6:71:8b:06:
         76:3d:f5:89:7b:8c:69:0c:8b:27:9c:ea:fd:89:e4:67:df:e3:
         fc:18:3c:4b:7c:61:a4:4b:5b:57:ca:e2:25:c7:27:32:6a:65:
         20:2c:93:e4:62:2b:64:7f:93:3d:56:55:1b:44:15:05:8a:d0:
         e9:fe:87:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:35:53 2025 by rpki-client