Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c1ad5c-4121-471d-8daa-8c630ccafc18/1/e4rssvSH33eHPMwmrFP2zywp82k.mft
File:                     e4rssvSH33eHPMwmrFP2zywp82k.mft (raw, json)
Hash identifier:          YTlyD3V8rg/jlXsclpsBY74/rPXgE2+BD04jKSJ1LK0=
Subject key identifier:   A1:94:F5:22:CE:71:EC:C6:CB:79:6C:A9:CE:B0:47:DD:8E:CD:58:B6
Authority key identifier: 7B:8A:EC:B2:F4:87:DF:77:87:3C:CC:26:AC:53:F6:CF:2C:29:F3:69
Certificate issuer:       /CN=7b8aecb2f487df77873ccc26ac53f6cf2c29f369
Certificate serial:       01877A0A17327BD13E7CB4EE73DC42AE4A65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4rssvSH33eHPMwmrFP2zywp82k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/c1ad5c-4121-471d-8daa-8c630ccafc18/1/e4rssvSH33eHPMwmrFP2zywp82k.mft
Manifest number:          0A11
Signing time:             Thu 13 Apr 2023 09:54:54 +0000
Manifest this update:     Thu 13 Apr 2023 09:54:54 +0000
Manifest next update:     Fri 14 Apr 2023 09:54:54 +0000
Files and hashes:         1: e4rssvSH33eHPMwmrFP2zywp82k.crl (hash: rmSE9yYxkSZoiffBVoFdfNRQqw+P2x8RZn8Z67lGPhs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:7a:0a:17:32:7b:d1:3e:7c:b4:ee:73:dc:42:ae:4a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b8aecb2f487df77873ccc26ac53f6cf2c29f369
        Validity
            Not Before: Apr 13 09:54:54 2023 GMT
            Not After : Apr 14 09:54:54 2023 GMT
        Subject: CN=a194f522ce71ecc6cb796ca9ceb047dd8ecd58b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:05:2a:2d:e9:4c:20:d8:98:b7:bc:1c:e4:
                    d1:a7:eb:e8:19:dd:33:22:28:d7:7e:9b:93:cd:e0:
                    08:12:32:51:eb:0d:d2:21:8a:72:dd:00:3c:ae:a8:
                    b6:53:9b:ae:28:71:e1:bc:74:97:bb:8c:0b:f8:c3:
                    71:f7:56:c9:29:e4:50:3d:45:ff:78:ce:27:8d:1b:
                    a7:d9:66:74:ef:26:2b:a0:10:6c:1e:ce:33:bb:6f:
                    f2:ee:2e:5d:21:b8:92:98:06:a5:8e:41:cf:bd:25:
                    bc:be:dd:8e:94:3b:7d:02:78:18:7a:ee:fb:5f:59:
                    d8:69:25:e2:f6:99:76:f8:2e:62:b8:b7:92:b3:87:
                    5b:9d:15:74:1e:98:24:9d:41:f8:45:2e:1d:9d:2e:
                    b5:c6:c7:d1:28:da:c7:48:67:f1:c4:20:9b:be:4b:
                    d2:18:ab:32:a2:af:76:2a:f4:26:60:30:b4:40:47:
                    60:2c:c1:93:df:42:b6:17:56:64:8c:e7:1b:c5:45:
                    83:97:05:13:8a:b6:ee:fe:78:a9:8e:a5:d3:b6:b0:
                    8b:02:60:f3:9b:80:52:b4:d1:53:25:c1:27:6d:9e:
                    82:c1:c6:c9:56:f1:96:f7:f1:62:23:0c:fa:2e:22:
                    c3:f2:51:59:b3:30:fc:04:63:71:ac:fa:3f:1f:1f:
                    d8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:94:F5:22:CE:71:EC:C6:CB:79:6C:A9:CE:B0:47:DD:8E:CD:58:B6
            X509v3 Authority Key Identifier:
                keyid:7B:8A:EC:B2:F4:87:DF:77:87:3C:CC:26:AC:53:F6:CF:2C:29:F3:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4rssvSH33eHPMwmrFP2zywp82k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c1ad5c-4121-471d-8daa-8c630ccafc18/1/e4rssvSH33eHPMwmrFP2zywp82k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c1ad5c-4121-471d-8daa-8c630ccafc18/1/e4rssvSH33eHPMwmrFP2zywp82k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:46:cb:a9:e4:be:f1:d4:d0:48:1f:cd:23:0c:c0:3d:88:fd:
         a1:63:31:35:96:51:12:c3:73:6c:d8:2b:a4:bb:97:62:ed:20:
         34:70:cc:3e:85:fe:0c:b1:44:66:da:b6:10:f3:13:b2:6d:eb:
         0b:90:f8:e8:a6:11:94:a4:bc:f8:9d:bf:80:a9:56:9c:7b:97:
         8e:99:b5:fc:35:25:55:ce:e4:70:f2:95:7a:02:1e:79:79:c9:
         d6:b2:57:a8:66:c8:3d:f7:16:fd:f6:36:c7:75:48:f1:39:74:
         0c:76:56:e9:bc:36:63:01:ec:2e:56:54:29:ac:36:b6:52:4a:
         68:8e:fb:ac:b0:70:6b:01:52:a0:fc:17:19:e0:eb:9b:27:63:
         7a:f7:09:fe:b8:3a:d6:1f:9c:6c:7c:78:20:1f:11:1b:0a:89:
         72:58:6d:3a:d9:04:98:5e:09:49:cc:9c:de:a6:6b:c5:32:03:
         6c:73:b9:9b:e0:78:94:2e:5d:3c:13:18:18:29:80:83:bc:97:
         2d:74:01:d7:17:c2:b7:07:ca:61:36:c9:82:a9:96:a7:8a:95:
         67:4a:40:2b:28:6b:3d:75:26:c8:d5:08:7e:dd:09:51:aa:d0:
         ca:dd:c9:e1:32:29:05:9e:1f:37:91:cb:dc:30:48:62:2f:d1:
         ed:a0:f5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:35:38 2025 by rpki-client