Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
File:                     0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json)
Hash identifier:          YxPGOgIKngskR8wjGsIBdko9c7whI9b9U6H3SEDkByo=
Subject key identifier:   82:8B:16:FA:45:56:D6:CB:2A:71:DD:8E:DF:95:63:C7:30:BD:9C:CC
Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D
Certificate issuer:       /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
Certificate serial:       0195E00F735E61E4B9889C134C26042BFB49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft
Manifest number:          68
Signing time:             Sat 29 Mar 2025 04:01:03 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:03 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:03 +0000
Files and hashes:         1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: cqQ6/nNclHnYMzwAhH5zxplSQDv7/bA2+ZTBY2WuHTw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:73:5e:61:e4:b9:88:9c:13:4c:26:04:2b:fb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d
        Validity
            Not Before: Mar 29 04:01:03 2025 GMT
            Not After : Mar 30 04:01:03 2025 GMT
        Subject: CN=828b16fa4556d6cb2a71dd8edf9563c730bd9ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0d:9f:18:c2:d3:a2:b5:9b:32:f6:ae:54:01:
                    35:44:cf:5a:eb:e3:af:0c:3d:bf:71:1b:7e:55:a2:
                    d7:94:6d:91:b9:d0:2d:de:d4:b9:b0:e6:de:2e:6e:
                    a6:8d:c9:25:3f:7e:e3:73:4a:2d:56:40:68:6c:01:
                    2f:4f:50:26:4f:69:45:2d:ba:4b:2c:70:6b:c6:29:
                    18:c9:5c:9e:14:17:53:43:a1:16:bc:6b:c2:07:aa:
                    13:a1:06:d6:5f:4f:bd:d5:c1:a6:25:85:89:32:24:
                    7c:a1:53:44:ac:88:09:be:0b:f5:de:6d:93:7b:e8:
                    c4:dc:d1:83:56:07:8e:c4:a7:9d:1c:a9:56:c0:25:
                    48:3a:e0:5c:2c:3a:4c:4e:5b:50:2b:7c:34:37:30:
                    40:35:ee:99:a7:f8:e5:d9:4e:ae:a0:45:38:a0:e0:
                    97:9c:99:49:5d:fb:60:dd:bc:f8:4b:43:fb:e4:67:
                    04:bd:6a:36:9b:ab:bc:13:ef:ed:e4:ec:97:4b:66:
                    51:c6:dd:fe:ad:e9:1f:7e:02:9a:0c:57:e9:c6:22:
                    da:b2:e9:cb:f6:22:84:8d:3a:2d:0c:f0:ca:ca:a9:
                    7b:1d:b8:ee:8c:f3:34:96:46:e1:19:a2:c9:2d:61:
                    9f:44:33:84:ca:28:6a:72:59:fd:83:6d:03:68:b7:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8B:16:FA:45:56:D6:CB:2A:71:DD:8E:DF:95:63:C7:30:BD:9C:CC
            X509v3 Authority Key Identifier:
                keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:17:ba:8f:43:55:d7:f6:c0:32:12:c4:51:b9:94:13:0c:58:
         ad:de:c0:c5:f5:e5:9a:a2:c5:41:a1:ca:fd:80:ab:4d:34:e4:
         4a:3b:d6:20:a1:60:d0:3b:64:4e:63:9f:dd:d8:c9:b2:c3:f1:
         dd:72:70:a2:f9:67:94:d6:d7:c4:87:fd:8f:f6:bb:9d:9e:9e:
         4f:ed:a7:35:7b:35:e5:09:29:ba:05:05:8d:dc:55:c9:c0:4a:
         68:eb:e0:75:b0:67:2e:67:65:1a:ff:cf:d2:0b:c7:5b:3c:f7:
         87:7a:85:e6:31:b4:f0:e0:b5:e4:fd:bf:c0:2f:6c:3e:7a:f1:
         ee:3b:79:b9:16:ad:e7:01:64:52:17:8d:20:b5:00:1b:67:1c:
         37:4a:d0:a3:31:e7:05:17:f8:55:40:9e:18:23:4e:45:7c:e4:
         54:fa:a2:ec:cb:35:f4:88:03:c5:38:31:f7:f7:b4:1b:cb:72:
         c2:8f:a8:3b:88:d4:43:f7:19:b9:04:43:90:b4:b8:06:73:7d:
         52:de:4a:99:21:84:1c:85:b7:62:71:ca:80:ae:ee:52:5a:03:
         83:47:1c:14:1f:85:06:42:ab:f1:3b:7f:3d:0c:32:0a:cc:dd:
         2a:c5:3d:67:8c:14:d0:26:ba:1a:3a:d9:ab:21:df:f9:ae:1a:
         c6:fe:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:42 2025 by rpki-client