Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7df1e2-d613-4436-bf95-d36e7480cacd/1/8bcZ2eha9EN0SOMErTSnpkwx-fg.mft
File:                     8bcZ2eha9EN0SOMErTSnpkwx-fg.mft (raw, json)
Hash identifier:          BgsnBDabzMW1pCaifV6ejRlpmxi85s5wGEsleQ5Oe/w=
Subject key identifier:   74:26:D3:26:94:AD:59:12:B4:2E:82:29:D1:8A:C8:8D:4C:26:C0:56
Authority key identifier: F1:B7:19:D9:E8:5A:F4:43:74:48:E3:04:AD:34:A7:A6:4C:31:F9:F8
Certificate issuer:       /CN=f1b719d9e85af4437448e304ad34a7a64c31f9f8
Certificate serial:       0192F47952AF7A8B96CBA08D84DD4E75E8A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bcZ2eha9EN0SOMErTSnpkwx-fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7df1e2-d613-4436-bf95-d36e7480cacd/1/8bcZ2eha9EN0SOMErTSnpkwx-fg.mft
Manifest number:          133B
Signing time:             Mon 04 Nov 2024 00:00:44 +0000
Manifest this update:     Mon 04 Nov 2024 00:00:44 +0000
Manifest next update:     Tue 05 Nov 2024 00:00:44 +0000
Files and hashes:         1: 8bcZ2eha9EN0SOMErTSnpkwx-fg.crl (hash: hJWc5j14vyT2JkrQKo3A4tzYFYuIBSqTjXFFZCNpmdo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:f4:79:52:af:7a:8b:96:cb:a0:8d:84:dd:4e:75:e8:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1b719d9e85af4437448e304ad34a7a64c31f9f8
        Validity
            Not Before: Nov  4 00:00:44 2024 GMT
            Not After : Nov  5 00:00:44 2024 GMT
        Subject: CN=7426d32694ad5912b42e8229d18ac88d4c26c056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:17:ca:a2:fd:26:98:a2:91:36:5d:63:73:5d:
                    cc:a1:ba:12:ff:9c:45:37:5a:ea:b2:5e:2d:63:2e:
                    aa:75:b9:08:02:e6:f2:c3:ba:c0:5d:d5:5a:05:91:
                    6a:b4:9c:a9:8f:61:5b:f8:22:f8:58:1b:9e:33:8c:
                    76:5d:d6:95:36:75:52:8d:c0:3c:dd:84:1b:dd:2d:
                    c3:dc:ee:10:2f:c8:e5:ac:0a:b6:d6:94:af:0a:57:
                    39:0e:55:a3:ac:a3:55:39:99:88:61:2f:cd:72:23:
                    65:95:40:62:c1:66:b5:18:d4:5d:87:56:ee:77:0b:
                    10:46:4d:8f:2f:a1:54:e5:90:c8:bf:f9:a3:b6:b9:
                    35:19:98:b9:b5:1d:2e:95:3b:c6:29:fd:d4:02:5d:
                    cc:ca:05:b4:3f:22:24:b1:6c:5b:b1:ec:4a:ba:99:
                    67:1e:e2:b3:c6:d5:cf:c6:7b:84:eb:3c:9e:6b:f0:
                    0c:90:d9:e1:74:56:06:19:88:ff:8b:a8:80:ea:35:
                    8d:13:fc:b3:11:96:53:47:f0:11:67:03:14:9a:32:
                    cd:ef:f9:1f:b8:47:9a:ab:53:ca:ac:b5:f8:dd:1c:
                    f9:0a:53:72:ca:b8:66:95:58:3c:e6:30:9d:ed:d8:
                    07:d6:76:76:d8:f9:e8:92:31:28:d5:00:90:02:ba:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:26:D3:26:94:AD:59:12:B4:2E:82:29:D1:8A:C8:8D:4C:26:C0:56
            X509v3 Authority Key Identifier:
                keyid:F1:B7:19:D9:E8:5A:F4:43:74:48:E3:04:AD:34:A7:A6:4C:31:F9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bcZ2eha9EN0SOMErTSnpkwx-fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7df1e2-d613-4436-bf95-d36e7480cacd/1/8bcZ2eha9EN0SOMErTSnpkwx-fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7df1e2-d613-4436-bf95-d36e7480cacd/1/8bcZ2eha9EN0SOMErTSnpkwx-fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9a:7c:e8:69:ee:c8:f5:42:0b:a7:4f:f5:10:a2:cf:bb:15:
         00:a1:81:86:1d:1e:9e:33:b5:af:19:44:4b:5b:10:eb:29:dc:
         68:98:81:bd:6b:84:48:d1:fa:e2:88:86:48:a2:56:9e:f6:fa:
         7e:b6:db:54:d4:97:e9:a8:cb:7b:3a:60:44:67:a7:41:76:dc:
         55:a9:2b:fe:d8:8a:35:25:23:80:33:49:eb:17:1e:d2:64:a1:
         1a:fb:dd:5d:fd:48:88:bd:49:1e:65:52:f0:f3:97:96:ed:49:
         e9:e5:97:53:6a:f7:dc:82:fb:8b:9a:73:d9:b5:3a:c8:e4:2b:
         e7:a8:be:2c:b8:ec:95:7e:09:66:1e:07:3b:9b:06:b6:42:80:
         d5:61:a3:3b:a0:cb:a5:ac:31:68:c1:61:4f:83:25:2c:5b:37:
         9e:11:f8:2e:b2:19:45:f1:84:20:9e:3f:5c:64:95:cd:58:5a:
         93:b0:10:f2:1f:a5:3a:b1:ff:c5:bb:3d:00:97:d8:1b:ed:4b:
         21:fd:0c:f9:a8:83:f3:e3:e9:be:59:3f:ce:e5:89:a3:cc:c1:
         3a:c0:77:1c:84:b4:11:5b:4d:80:73:24:8f:d7:f4:74:4e:0a:
         8f:04:37:fc:9c:d9:bd:fa:4e:44:3e:db:3f:ec:ee:3e:1b:97:
         5c:3d:79:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:36 2025 by rpki-client