Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft
File:                     Eo8JYL8vv3DExJrhAd_y7MOYde0.mft (raw, json)
Hash identifier:          0vnWGCOc9tdIfLekH2ksamJ0LMe8Tnuj+xG4BNm4VYA=
Subject key identifier:   19:E3:B6:70:60:3B:DB:08:3B:59:58:83:88:05:79:36:59:C3:01:CD
Authority key identifier: 12:8F:09:60:BF:2F:BF:70:C4:C4:9A:E1:01:DF:F2:EC:C3:98:75:ED
Certificate issuer:       /CN=128f0960bf2fbf70c4c49ae101dff2ecc39875ed
Certificate serial:       01956A78AB2E300A1056D1CEBE5C9320029F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo8JYL8vv3DExJrhAd_y7MOYde0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft
Manifest number:          1484
Signing time:             Thu 06 Mar 2025 08:00:47 +0000
Manifest this update:     Thu 06 Mar 2025 08:00:47 +0000
Manifest next update:     Fri 07 Mar 2025 08:00:47 +0000
Files and hashes:         1: Eo8JYL8vv3DExJrhAd_y7MOYde0.crl (hash: CLouCVmxBbhNLmZsV/VE6w4d3e1qiyMMxkVB8boYIew=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:6a:78:ab:2e:30:0a:10:56:d1:ce:be:5c:93:20:02:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128f0960bf2fbf70c4c49ae101dff2ecc39875ed
        Validity
            Not Before: Mar  6 08:00:47 2025 GMT
            Not After : Mar  7 08:00:47 2025 GMT
        Subject: CN=19e3b670603bdb083b5958838805793659c301cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ef:70:6e:85:8b:77:83:96:c0:97:54:5f:4f:
                    4c:ce:4d:b4:d1:bc:0d:0e:34:ac:5d:1d:de:ab:74:
                    50:de:a6:4e:9f:9a:43:ce:21:8a:bc:0a:d4:68:90:
                    da:61:7a:9b:68:f5:0d:e2:63:4c:fc:87:50:db:6d:
                    9d:d8:1f:51:07:46:1b:99:d9:58:9d:e2:5e:ff:66:
                    dc:26:3f:ee:4b:2a:48:f0:e2:e5:6e:8f:53:96:07:
                    46:65:fc:9d:17:d9:f4:e5:76:9b:1e:8d:00:06:20:
                    a4:71:97:2b:92:ac:55:ae:b8:ab:f6:78:2f:79:5a:
                    1d:10:a9:3b:a8:4c:08:b3:95:c8:54:e9:d1:92:1d:
                    b7:3d:bd:eb:ed:09:66:2b:d8:64:26:9e:a0:45:4a:
                    e2:61:b6:89:2a:e3:8d:fe:f2:bd:9e:23:e6:6c:6f:
                    6b:e8:21:fe:a7:b3:4f:0c:b4:85:38:92:1b:d9:24:
                    93:0c:b9:1f:9c:81:78:21:6b:21:98:2b:7f:9a:a5:
                    c1:86:44:13:e6:25:82:3f:b4:10:c5:f6:b5:70:0f:
                    bd:87:12:d4:e4:40:17:db:09:25:9f:bb:e3:9e:81:
                    d9:d4:50:36:1a:fd:ae:3c:31:e9:96:c3:14:39:18:
                    a5:a0:ac:cf:26:8a:5c:13:15:95:bb:c7:a4:f3:be:
                    07:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E3:B6:70:60:3B:DB:08:3B:59:58:83:88:05:79:36:59:C3:01:CD
            X509v3 Authority Key Identifier:
                keyid:12:8F:09:60:BF:2F:BF:70:C4:C4:9A:E1:01:DF:F2:EC:C3:98:75:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8JYL8vv3DExJrhAd_y7MOYde0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/008681-df79-477b-9236-45309a5e2768/1/Eo8JYL8vv3DExJrhAd_y7MOYde0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:0e:d1:e6:fd:c8:5b:71:8c:d5:dc:e8:81:a8:3a:37:08:bc:
         9f:db:ec:d7:62:e1:1e:b9:ca:02:97:ec:c7:db:ee:45:07:fe:
         86:ff:d8:c2:7c:32:70:43:f4:39:da:2a:99:4c:ee:50:76:28:
         c6:8f:18:1f:74:20:d8:bd:95:dd:b2:ca:e4:df:db:31:f7:81:
         6d:71:2f:3b:2e:bb:4d:0c:41:52:6d:4b:0e:5a:96:55:8c:5a:
         27:4f:06:d9:08:d6:bf:59:0e:31:34:62:07:5e:da:f8:22:21:
         87:0c:29:50:4c:e8:d4:8d:38:52:77:b6:37:91:1d:fe:01:02:
         5d:7e:d6:3f:f1:64:e4:a3:07:f5:29:a3:43:86:a2:7a:a0:00:
         a6:e2:99:71:48:30:cd:e2:45:cd:53:5a:f6:a8:c2:66:86:3b:
         a8:c8:75:88:e9:b5:ec:38:3a:14:16:fc:73:80:44:d9:00:1a:
         08:98:a2:17:a3:47:41:a8:5f:fb:b6:e0:e1:02:20:d8:5b:b8:
         68:2a:48:58:1a:54:62:78:da:38:10:04:05:d0:1d:5e:32:98:
         86:b2:eb:a2:f2:c1:c9:bd:e2:55:55:b4:d8:ce:ed:8f:3d:69:
         9d:a3:51:d6:77:86:f6:0d:ef:35:82:e4:f5:da:03:68:b6:c0:
         e5:43:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:58:37 2025 by rpki-client