Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
File:                     _FXgUz76pWJPU4uS7RqXP-_4l1E.mft (raw, json)
Hash identifier:          vz9qMN0FqTUt5qioVaNxBnBMCQsLcPmCRajM76gK0BY=
Subject key identifier:   61:3D:D1:42:DA:3E:0F:5A:FA:71:2D:18:CB:45:FA:46:28:EF:61:52
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Certificate issuer:       /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial:       0195E0EB157C75775AC9693F96CED69F7935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
Manifest number:          0FA6
Signing time:             Sat 29 Mar 2025 08:00:57 +0000
Manifest this update:     Sat 29 Mar 2025 08:00:57 +0000
Manifest next update:     Sun 30 Mar 2025 08:00:57 +0000
Files and hashes:         1: 5XMYoEM__63W79FSrJxqp5j0UJE.roa (hash: 6AxR53Ak3LvDCXifdXwDPZPN/iyJdk5U29qoVvF/ZYU=)
                          2: 5t-mWbx3WXCG3SAA6NOKEF56ZKw.roa (hash: sdrOTXXUjv1npsDAV76NLMMxB67WuEuvX1bFnKmLWlo=)
                          3: _FXgUz76pWJPU4uS7RqXP-_4l1E.crl (hash: bzKJ0wgHFaNXWBccaticU2h/FssTJeMivjj8XFT94xU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:15:7c:75:77:5a:c9:69:3f:96:ce:d6:9f:79:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
        Validity
            Not Before: Mar 29 08:00:57 2025 GMT
            Not After : Mar 30 08:00:57 2025 GMT
        Subject: CN=613dd142da3e0f5afa712d18cb45fa4628ef6152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:a8:d1:ef:f7:71:77:46:ec:46:14:80:32:
                    92:2b:0c:00:67:12:dd:55:5a:74:69:17:a4:e1:fc:
                    08:97:c6:67:fd:a3:de:5c:db:71:63:12:b0:c2:7f:
                    64:9a:ef:be:3c:c5:39:cf:a8:a2:23:f1:73:28:7c:
                    eb:f1:94:2d:52:3f:ff:d0:ea:11:df:3f:f4:a7:1e:
                    0c:0b:95:9f:f5:f8:ff:33:01:77:5c:bc:cf:d4:85:
                    73:b8:a3:73:08:1f:f4:12:6b:43:7f:bb:8c:19:68:
                    eb:63:f1:cd:e3:a0:2b:2e:8e:7a:09:ac:0d:14:b3:
                    d2:90:00:5f:0b:76:97:3b:3b:77:31:d4:57:3e:bf:
                    62:10:e2:98:c0:a5:c4:30:44:eb:44:4a:61:99:77:
                    7d:dc:e3:89:f8:e0:b6:3b:78:a4:ad:3e:68:41:d8:
                    95:2a:de:c6:db:da:a8:64:d4:d3:25:7b:30:d6:c7:
                    f2:9e:8e:86:a6:09:15:c7:a2:cd:27:0f:44:19:27:
                    3c:50:48:e8:8a:37:65:ee:ae:ac:b4:f5:c6:30:cf:
                    1c:76:64:32:8e:57:cf:96:31:93:e4:a2:9c:b7:ca:
                    06:db:a2:4c:cf:74:8e:dc:c6:a8:19:af:e2:2f:16:
                    c5:14:b7:eb:7b:ef:3d:cf:82:92:70:ed:ea:cb:d0:
                    a2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3D:D1:42:DA:3E:0F:5A:FA:71:2D:18:CB:45:FA:46:28:EF:61:52
            X509v3 Authority Key Identifier:
                keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:23:f0:79:08:cf:32:43:ef:15:b0:c8:f7:32:00:db:43:c1:
         d0:e7:e9:9d:30:06:03:03:83:7b:9b:e3:3c:ed:4a:9a:f4:d4:
         ab:80:51:0b:46:11:31:6b:7b:9e:1b:40:a9:93:89:bc:03:79:
         87:fa:ca:49:7e:05:cc:e8:87:b9:44:7d:36:c1:8b:dc:b1:ad:
         42:1f:5d:d8:7f:28:59:6e:3a:ca:35:c8:3c:ad:fc:ba:73:58:
         36:e0:04:d2:5b:6d:f0:f2:d4:92:aa:89:27:26:9d:8d:cc:4f:
         67:88:d7:be:98:52:b0:9e:57:79:ea:81:ff:14:58:77:75:e1:
         a7:f1:67:1c:b3:26:ab:ff:fb:f6:c1:e7:cd:10:e7:91:c2:da:
         d4:de:96:4a:67:75:e8:f0:09:76:2c:c0:09:1c:34:65:b3:b0:
         82:e9:b5:2d:02:00:b8:c8:c1:7f:99:a5:68:75:82:96:15:2a:
         6c:1a:f9:a4:55:08:8f:3c:cb:ca:3b:83:e1:25:0c:e3:48:d6:
         a6:14:0f:f7:74:85:91:61:f6:1f:58:f7:00:59:1b:25:cd:72:
         9d:ac:ea:fd:00:66:a1:f1:6f:71:95:b9:be:96:08:3b:83:5a:
         f9:aa:2d:c0:45:be:87:7d:b3:3b:bc:29:99:d3:2a:9c:15:55:
         17:5e:12:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:08 2025 by rpki-client