Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e700d0-cbb2-48cf-8a04-2dcc45347298/1/xFi5UTjpAcgk0v9v2rWlwvgxYMM.mft
File:                     xFi5UTjpAcgk0v9v2rWlwvgxYMM.mft (raw, json)
Hash identifier:          96/bQ3PITXhQ19VJdKgC3NwMtVXAKMdZUsxgYO/Fx2M=
Subject key identifier:   8D:52:99:AA:44:3C:52:9B:BA:92:1A:80:C6:78:10:D9:A4:C9:DD:47
Authority key identifier: C4:58:B9:51:38:E9:01:C8:24:D2:FF:6F:DA:B5:A5:C2:F8:31:60:C3
Certificate issuer:       /CN=c458b95138e901c824d2ff6fdab5a5c2f83160c3
Certificate serial:       01955A979A8ED31A927A1E4F57F2B433983D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFi5UTjpAcgk0v9v2rWlwvgxYMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e700d0-cbb2-48cf-8a04-2dcc45347298/1/xFi5UTjpAcgk0v9v2rWlwvgxYMM.mft
Manifest number:          03A1
Signing time:             Mon 03 Mar 2025 06:00:39 +0000
Manifest this update:     Mon 03 Mar 2025 06:00:39 +0000
Manifest next update:     Tue 04 Mar 2025 06:00:39 +0000
Files and hashes:         1: xFi5UTjpAcgk0v9v2rWlwvgxYMM.crl (hash: OK/WoeOVoiki8aEZh/vFfR9vrTLYHUXGJXM6UinBi8M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:5a:97:9a:8e:d3:1a:92:7a:1e:4f:57:f2:b4:33:98:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c458b95138e901c824d2ff6fdab5a5c2f83160c3
        Validity
            Not Before: Mar  3 06:00:39 2025 GMT
            Not After : Mar  4 06:00:39 2025 GMT
        Subject: CN=8d5299aa443c529bba921a80c67810d9a4c9dd47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:27:97:cb:31:28:25:4f:84:38:8c:7e:12:32:
                    62:7e:1f:3b:71:26:0f:f9:5e:6c:49:ee:40:09:76:
                    8f:d0:bc:d8:e3:5c:89:3e:32:5c:15:b9:f7:9f:34:
                    54:73:25:8a:9d:c3:69:07:9d:6b:b8:21:7b:d0:cf:
                    9b:a8:c3:7f:cb:1e:51:4b:a7:8f:d5:89:5b:68:73:
                    e0:f8:64:47:c3:33:9e:c7:e6:c4:0b:a4:3b:d6:16:
                    b3:7b:d2:93:f4:97:55:dc:a2:c0:73:6a:53:8c:72:
                    86:06:eb:4f:eb:ee:02:22:9a:be:74:c0:72:1e:c4:
                    2a:1f:8d:44:50:de:17:36:8f:ec:b1:79:1b:de:83:
                    32:2d:24:64:01:d0:e0:b9:1d:44:70:0f:b4:9e:07:
                    19:12:ec:65:9b:d6:5e:e8:64:62:3b:6c:b8:c8:23:
                    21:95:bb:a9:a1:00:bb:07:7e:f9:5c:fb:eb:90:86:
                    2a:a6:89:6e:f1:b1:2e:4c:a2:4b:ee:09:62:29:ee:
                    56:5f:55:2d:19:3f:e1:21:fa:8e:d7:00:b5:86:44:
                    54:bb:fe:94:9d:f4:62:f8:b8:96:b4:ac:9a:fa:5e:
                    02:d6:03:c8:2f:39:c9:25:2f:c3:cc:29:c3:fc:04:
                    fc:29:44:18:70:60:b0:13:f9:18:30:b3:6d:70:ff:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:52:99:AA:44:3C:52:9B:BA:92:1A:80:C6:78:10:D9:A4:C9:DD:47
            X509v3 Authority Key Identifier:
                keyid:C4:58:B9:51:38:E9:01:C8:24:D2:FF:6F:DA:B5:A5:C2:F8:31:60:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFi5UTjpAcgk0v9v2rWlwvgxYMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e700d0-cbb2-48cf-8a04-2dcc45347298/1/xFi5UTjpAcgk0v9v2rWlwvgxYMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e700d0-cbb2-48cf-8a04-2dcc45347298/1/xFi5UTjpAcgk0v9v2rWlwvgxYMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f0:d0:0e:bc:74:1c:d2:c5:8f:80:a5:d5:72:70:ef:a7:70:
         54:8a:37:4f:3f:c2:f5:57:c3:f6:1f:3e:d0:4c:1b:e0:f5:99:
         3b:5b:0e:a4:ca:83:4d:c4:e0:b1:a5:31:bc:d1:24:f7:ab:9c:
         65:8b:c0:c2:1b:f2:97:ea:6e:5b:30:33:a2:93:70:06:7d:c4:
         3c:fb:26:e0:b6:ec:56:b6:9f:c0:8b:77:19:49:2d:5c:f5:40:
         56:a3:fb:f0:72:2a:9a:45:94:af:72:90:ec:11:7e:7f:5d:9e:
         8c:4f:26:88:e3:82:a6:6c:ee:44:92:99:25:74:f1:6d:e5:94:
         00:11:e0:a2:25:f0:7e:2a:89:18:b8:be:19:76:5f:07:8b:80:
         76:bf:54:f8:12:f1:8f:33:18:fe:01:da:08:61:1d:92:91:0d:
         03:e8:08:a0:9a:09:1d:12:f8:2c:58:44:35:87:4e:72:bd:78:
         85:58:11:fe:c6:e9:16:46:66:03:bb:0c:01:ae:8d:2b:3b:1f:
         2c:57:f5:57:27:db:d8:a9:b3:42:21:f1:ae:fe:78:c9:49:a7:
         d4:1c:b5:b9:5f:44:36:1e:40:dc:79:68:94:da:8b:4a:1f:f8:
         c2:01:e4:d2:29:78:c3:d2:5f:d6:55:a4:a6:b4:51:e7:d2:76:
         28:bd:15:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:29:25 2025 by rpki-client