Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.mft
File:                     Jb6Oq69y-65n5x64nRz-otLVHCY.mft (raw, json)
Hash identifier:          wFnY8PciMXZpjgHujHQDd2JpYMXYjKn9Spl93jpT0S0=
Subject key identifier:   F6:F8:A2:99:A6:00:C8:A1:9D:B9:E6:BF:FC:B3:E4:CE:92:E5:6B:1F
Authority key identifier: 25:BE:8E:AB:AF:72:FB:AE:67:E7:1E:B8:9D:1C:FE:A2:D2:D5:1C:26
Certificate issuer:       /CN=25be8eabaf72fbae67e71eb89d1cfea2d2d51c26
Certificate serial:       0195797E1B014FD7533B97006964876CB0B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jb6Oq69y-65n5x64nRz-otLVHCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.mft
Manifest number:          0695
Signing time:             Sun 09 Mar 2025 06:01:02 +0000
Manifest this update:     Sun 09 Mar 2025 06:01:02 +0000
Manifest next update:     Mon 10 Mar 2025 06:01:02 +0000
Files and hashes:         1: Jb6Oq69y-65n5x64nRz-otLVHCY.crl (hash: Zs+5AzFtnGSfojP3tZKKBADN+VMhX64pdvgq2NXdiKU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:79:7e:1b:01:4f:d7:53:3b:97:00:69:64:87:6c:b0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25be8eabaf72fbae67e71eb89d1cfea2d2d51c26
        Validity
            Not Before: Mar  9 06:01:02 2025 GMT
            Not After : Mar 10 06:01:02 2025 GMT
        Subject: CN=f6f8a299a600c8a19db9e6bffcb3e4ce92e56b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:76:54:66:54:9d:8e:dc:c7:77:7e:3b:54:
                    f5:db:c0:99:66:3f:ce:78:3e:89:0f:9f:4c:cb:e0:
                    e7:3b:b6:ac:d6:79:ee:37:a5:54:2e:89:e9:24:e7:
                    4f:2e:be:6f:f0:92:c1:a8:cf:99:bd:43:0b:f0:ed:
                    49:be:f2:b7:d7:8b:15:95:ac:6a:74:35:66:3c:64:
                    5b:8f:d5:30:e8:65:23:1c:a8:0c:fd:ca:7f:4b:cf:
                    d0:df:ff:1e:0c:21:16:36:de:00:8b:b4:18:91:15:
                    92:d9:1d:90:a5:b9:a4:3c:f1:66:95:d5:15:83:ce:
                    dd:21:e6:81:af:7c:6d:7a:8d:8e:b1:36:4d:51:34:
                    4b:1a:fc:d0:74:25:72:32:e5:7e:57:58:a2:97:1a:
                    14:17:70:f7:c9:71:ba:e1:14:06:78:80:5f:f6:31:
                    23:a3:b0:ba:b7:79:a6:d2:7e:26:3b:14:6e:69:85:
                    82:65:c9:85:8e:75:4b:13:98:12:63:74:d5:1e:ab:
                    f8:dc:5b:20:d0:17:ef:93:2a:8d:c3:91:0e:8f:b5:
                    94:1e:66:f7:72:f2:af:3c:95:58:6d:ae:85:55:bf:
                    7d:ac:3d:84:78:b1:16:2d:7a:6a:20:d7:d1:d2:75:
                    79:31:4f:b0:2b:f7:6a:c0:14:2d:aa:2b:07:e8:ce:
                    0c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F8:A2:99:A6:00:C8:A1:9D:B9:E6:BF:FC:B3:E4:CE:92:E5:6B:1F
            X509v3 Authority Key Identifier:
                keyid:25:BE:8E:AB:AF:72:FB:AE:67:E7:1E:B8:9D:1C:FE:A2:D2:D5:1C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb6Oq69y-65n5x64nRz-otLVHCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/920c9e-a157-4cb8-ac01-92ac803c0545/1/Jb6Oq69y-65n5x64nRz-otLVHCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:37:0c:ed:cb:ac:34:0f:54:28:23:ea:c4:f6:96:25:a1:50:
         07:2e:14:10:3b:81:08:25:cb:f1:75:36:4d:60:ea:f9:57:64:
         02:da:96:59:80:14:23:ce:34:c2:46:aa:2b:47:2d:86:d6:e5:
         4d:94:20:2d:bc:33:5b:b0:59:5b:8e:3f:78:34:fe:0e:d9:9f:
         5c:45:92:6c:7a:4e:60:4e:02:c7:f9:cd:42:6f:4f:33:64:5a:
         b3:98:a3:84:13:44:59:61:a3:03:c1:c6:12:2a:7f:27:dd:33:
         cc:b6:dd:ad:a6:6d:b9:d1:22:19:a1:db:a0:72:be:9e:32:80:
         0c:4a:d4:66:98:29:30:7d:30:29:94:e0:65:1f:93:ff:9c:b6:
         22:25:55:8f:71:3b:43:33:8c:aa:72:a2:cb:9c:e3:87:68:82:
         fa:8f:a4:73:7b:e7:d8:06:cf:8b:ad:96:1c:33:51:a9:3e:12:
         b8:5f:72:96:77:f5:db:f1:c5:65:5f:73:4f:4a:4c:be:72:b9:
         40:bb:2d:27:7f:46:72:b9:87:3c:4b:4a:d1:94:84:7d:c3:05:
         5c:e1:60:03:88:8e:3a:aa:19:2b:ac:58:25:b7:0d:4c:44:36:
         80:2a:9f:53:8b:3d:aa:62:c3:56:1c:9a:d3:d0:0b:d4:81:69:
         14:0a:f5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:52:50 2025 by rpki-client