Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File:                     7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier:          lPnBv2ywxyGSOwoc16JoTBxUOnifwL7T9SWVVjW2RFI=
Subject key identifier:   94:93:74:25:B9:64:1B:C4:9B:EF:6C:B6:F4:65:DC:9D:6B:77:45:7C
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer:       /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial:       0195E1591BA2D04C163F946ED310667A051C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number:          0738
Signing time:             Sat 29 Mar 2025 10:01:08 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:08 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:08 +0000
Files and hashes:         1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: NiNaxN1pAB1oGTIUoZtFJy+yeGcFkImnsWsR/jePULc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:1b:a2:d0:4c:16:3f:94:6e:d3:10:66:7a:05:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
        Validity
            Not Before: Mar 29 10:01:08 2025 GMT
            Not After : Mar 30 10:01:08 2025 GMT
        Subject: CN=94937425b9641bc49bef6cb6f465dc9d6b77457c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:0a:56:41:a5:f0:ca:70:9e:48:7e:f5:17:
                    ce:81:c0:b3:a9:be:54:a2:5a:be:b9:a4:0d:38:8e:
                    cd:5e:e4:58:a4:ba:37:8b:59:c1:1c:40:62:17:75:
                    29:0d:ce:24:7b:0f:78:71:1b:11:ac:a1:05:04:fa:
                    a1:46:31:b5:e0:46:d2:6f:40:f4:eb:8d:b2:f7:fe:
                    83:8a:48:b9:6f:e7:b8:34:6e:bf:56:57:3e:04:53:
                    c3:ba:d5:31:02:a4:8b:2e:65:0e:06:67:c3:03:1e:
                    a0:56:a3:28:17:a8:56:95:d4:22:75:12:b2:fd:72:
                    08:2e:c8:89:dd:63:f5:d7:0d:19:c4:19:93:23:e5:
                    51:ee:5f:e9:98:9d:4a:cb:5f:6f:2a:82:f6:fa:8c:
                    1c:f8:0e:ab:5a:ba:9c:7b:46:6d:b7:18:5e:a4:de:
                    07:c0:d6:02:8d:b2:dd:9d:a0:a2:bc:f9:cd:f6:6c:
                    4e:29:85:05:48:f5:4d:a4:6b:6e:ae:28:9a:8d:f5:
                    48:72:e6:be:21:e2:b2:67:28:72:e5:fc:bd:c6:c2:
                    52:2d:46:39:46:ab:76:27:55:c9:31:96:d0:89:9d:
                    8c:c2:9f:ec:08:a3:a6:6d:3e:40:e1:d5:89:c6:33:
                    7a:b3:3c:2b:96:f2:c4:aa:f9:59:20:17:44:e8:4b:
                    93:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:93:74:25:B9:64:1B:C4:9B:EF:6C:B6:F4:65:DC:9D:6B:77:45:7C
            X509v3 Authority Key Identifier:
                keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:9a:e0:3e:a9:78:1f:72:5c:c9:bb:98:3f:b0:25:a9:45:43:
         ee:da:44:5d:30:bb:2d:32:36:03:16:4f:ae:8e:37:a3:7e:2e:
         ad:0a:a7:35:9c:d7:59:8d:a7:54:02:07:b0:a1:63:0e:7b:ab:
         41:05:6b:80:39:67:35:7d:fa:6f:b1:e0:d6:97:00:ed:7b:c5:
         16:d3:3e:23:69:72:0d:24:10:c5:b8:33:6c:33:99:61:a7:6e:
         b7:76:27:36:e2:bd:59:a6:ca:cf:b6:5e:f8:d0:e6:1e:cc:16:
         1d:6e:05:cf:62:de:50:c8:d0:a9:07:cf:25:12:4f:45:5b:21:
         36:c7:7d:0b:31:6e:32:09:9a:ea:e5:10:6c:4c:b5:04:78:3b:
         42:a7:85:7b:b1:5c:c0:c7:ad:35:0a:42:bc:a8:55:f1:0c:61:
         91:9e:73:97:cc:da:32:00:b4:2c:be:e3:6a:91:af:72:81:d6:
         ee:30:65:20:a4:82:ea:e0:1c:59:52:5a:22:e5:5d:e5:6a:a9:
         fb:b8:a7:36:55:7a:58:ea:3f:3d:8f:ee:5a:75:32:b0:7f:e0:
         3a:95:c8:a6:45:0c:db:fe:86:62:a9:0f:ab:f9:ef:b1:29:9e:
         e8:34:05:62:7e:14:b0:6f:ad:06:30:02:ad:eb:56:19:01:2a:
         11:01:f2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:58:13 2025 by rpki-client