Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f5f890-8ff0-4838-825b-da4ae7fdcae1/1/eYqms_VwblWb1KZU6UMFaf5CEAI.mft
File:                     eYqms_VwblWb1KZU6UMFaf5CEAI.mft (raw, json)
Hash identifier:          GZN8FJ5n/fOx76RxsWAXV2IsjkwXc2KCbfnG9IOh8fM=
Subject key identifier:   DE:3C:B0:47:9F:DA:5F:63:D7:FD:12:9B:FD:A6:0E:A5:BD:91:7B:05
Authority key identifier: 79:8A:A6:B3:F5:70:6E:55:9B:D4:A6:54:E9:43:05:69:FE:42:10:02
Certificate issuer:       /CN=798aa6b3f5706e559bd4a654e9430569fe421002
Certificate serial:       018CA9387CDC0F463FE65A106F41C4271737
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYqms_VwblWb1KZU6UMFaf5CEAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f5f890-8ff0-4838-825b-da4ae7fdcae1/1/eYqms_VwblWb1KZU6UMFaf5CEAI.mft
Manifest number:          0A17
Signing time:             Wed 27 Dec 2023 03:01:40 +0000
Manifest this update:     Wed 27 Dec 2023 03:01:40 +0000
Manifest next update:     Thu 28 Dec 2023 03:01:40 +0000
Files and hashes:         1: eYqms_VwblWb1KZU6UMFaf5CEAI.crl (hash: b8uVg32pyF7z6JLTO+M+KoBnkQjqkYRaq+MWOrrVX4c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a9:38:7c:dc:0f:46:3f:e6:5a:10:6f:41:c4:27:17:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798aa6b3f5706e559bd4a654e9430569fe421002
        Validity
            Not Before: Dec 27 03:01:40 2023 GMT
            Not After : Dec 28 03:01:40 2023 GMT
        Subject: CN=de3cb0479fda5f63d7fd129bfda60ea5bd917b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:bb:36:63:aa:c0:3f:4d:e3:c9:eb:f7:7b:
                    ab:16:2e:ec:64:d4:d0:23:28:03:a1:6d:84:8e:d9:
                    f1:fe:f5:b3:a5:44:2d:b1:0c:1d:36:0b:5d:99:95:
                    85:5c:68:06:dc:d5:bf:34:37:ac:f1:bb:b7:03:4e:
                    88:18:c8:af:63:57:e3:9a:da:01:9e:10:4e:d7:ce:
                    a4:6d:57:e3:8e:2f:e4:b6:f7:b7:7d:5b:25:81:5c:
                    1b:ba:6f:36:b5:ed:66:d0:0d:a9:67:21:d1:53:6e:
                    ee:b7:9a:ed:06:5c:ab:3d:90:39:4c:82:0d:49:85:
                    94:d6:bc:9f:17:82:18:ea:09:38:34:34:6a:89:3a:
                    e1:2f:38:67:ba:2d:b8:f9:d9:fc:0c:47:16:6a:d9:
                    96:95:0d:f6:4e:d4:3a:37:27:d0:88:67:e6:09:b6:
                    28:1f:06:e1:25:2d:9a:36:74:62:78:30:82:a2:c8:
                    cf:be:15:54:b0:4b:8b:4c:13:d2:53:58:d5:00:d6:
                    d1:a0:8e:0b:54:1a:77:b9:ea:b3:c0:34:27:1b:2b:
                    62:d8:00:f0:c6:cc:15:97:7c:a5:8f:da:22:ed:98:
                    f8:ed:3e:1d:e7:57:54:98:ac:6c:0a:ca:7f:4c:a5:
                    27:9b:f5:51:50:61:af:c1:82:b9:82:9f:c2:8f:c3:
                    f2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3C:B0:47:9F:DA:5F:63:D7:FD:12:9B:FD:A6:0E:A5:BD:91:7B:05
            X509v3 Authority Key Identifier:
                keyid:79:8A:A6:B3:F5:70:6E:55:9B:D4:A6:54:E9:43:05:69:FE:42:10:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYqms_VwblWb1KZU6UMFaf5CEAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f5f890-8ff0-4838-825b-da4ae7fdcae1/1/eYqms_VwblWb1KZU6UMFaf5CEAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f5f890-8ff0-4838-825b-da4ae7fdcae1/1/eYqms_VwblWb1KZU6UMFaf5CEAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ed:0a:20:10:ac:b2:ce:10:64:03:32:d5:c9:07:1f:1e:97:
         f3:4f:2e:26:15:5e:71:8b:9a:84:41:8c:36:81:91:9c:3a:38:
         0f:89:8c:66:43:a6:36:6c:7a:9b:e5:0c:3e:23:48:8f:7d:04:
         4d:6f:98:ce:81:a0:57:47:80:ea:7f:83:8d:68:86:f0:38:c3:
         6a:0a:5e:04:7f:4e:fe:b1:98:75:d9:54:fa:5f:73:8e:7f:47:
         d4:05:2c:4b:b5:45:4c:ee:99:f7:09:10:76:a4:89:3a:09:db:
         25:e3:d8:02:fd:2c:46:ae:e4:a4:38:c2:18:25:2a:ce:c7:a8:
         df:bd:19:25:bd:18:3a:c3:fd:6f:81:00:5d:4c:82:8e:70:45:
         60:ae:08:36:68:83:49:c5:b5:8e:50:ea:c4:57:05:9b:7f:e8:
         95:18:c1:98:7a:7f:9d:22:58:f4:5f:66:f3:6e:73:06:0e:23:
         70:66:85:7e:3c:2e:21:52:d8:ae:86:16:39:5e:66:64:6d:a1:
         87:14:03:9d:3c:5f:18:5f:85:72:3c:10:43:cf:46:6b:d5:6e:
         e1:45:36:51:e2:2c:87:d4:d1:a7:2e:fd:6a:43:c5:ec:ef:84:
         e6:7f:c6:a1:34:89:1d:64:fb:85:45:2c:af:ee:fa:c2:5b:98:
         06:c2:91:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:29 2025 by rpki-client