Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e4b869-d18d-4c20-8ab6-e74a9d40441e/1/EehpsPlTmbxvPNXuXrMzFp5ccsY.mft
File:                     EehpsPlTmbxvPNXuXrMzFp5ccsY.mft (raw, json)
Hash identifier:          /CnPoYPqOSNjopzT1jTiREefspZV9RbTUVi2HVpM/aQ=
Subject key identifier:   52:2C:F9:BC:96:27:5E:D9:83:72:F1:A1:F3:16:23:89:71:4F:80:F6
Authority key identifier: 11:E8:69:B0:F9:53:99:BC:6F:3C:D5:EE:5E:B3:33:16:9E:5C:72:C6
Certificate issuer:       /CN=11e869b0f95399bc6f3cd5ee5eb333169e5c72c6
Certificate serial:       0196A84284711318750F4708C07559E4F0B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EehpsPlTmbxvPNXuXrMzFp5ccsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e4b869-d18d-4c20-8ab6-e74a9d40441e/1/EehpsPlTmbxvPNXuXrMzFp5ccsY.mft
Manifest number:          0979
Signing time:             Wed 07 May 2025 01:00:53 +0000
Manifest this update:     Wed 07 May 2025 01:00:53 +0000
Manifest next update:     Thu 08 May 2025 01:00:53 +0000
Files and hashes:         1: EehpsPlTmbxvPNXuXrMzFp5ccsY.crl (hash: MmBhF2rMzBB68F09YCvWtAAKJcFI6ZmnU0jIZRcwWZo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:42:84:71:13:18:75:0f:47:08:c0:75:59:e4:f0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e869b0f95399bc6f3cd5ee5eb333169e5c72c6
        Validity
            Not Before: May  7 01:00:53 2025 GMT
            Not After : May  8 01:00:53 2025 GMT
        Subject: CN=522cf9bc96275ed98372f1a1f3162389714f80f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:24:5f:6a:25:de:17:ce:c5:d5:f1:c1:d7:5b:
                    a7:d8:a0:98:ce:54:77:e2:e9:4a:3e:a9:f0:69:51:
                    6c:a7:06:b5:ef:c0:c2:66:3d:d4:ee:82:d7:3a:f4:
                    41:df:26:36:e7:b2:b7:89:c1:6c:72:2f:f5:35:93:
                    ff:8a:67:42:cb:27:34:ba:4c:bb:b2:a0:9e:ca:25:
                    33:c4:b6:13:f8:f0:9b:12:04:25:07:47:a4:d0:4b:
                    b0:75:74:b5:bf:47:08:9b:e8:71:f9:75:4c:0e:77:
                    c8:c4:7c:2e:c3:d1:1b:63:13:83:28:f5:c4:16:35:
                    23:44:d8:33:9d:fb:62:cc:0a:b1:c7:5c:ea:67:f2:
                    cc:98:34:6d:4f:96:2b:bb:71:7c:18:8f:dc:ca:45:
                    d4:a5:b5:1c:7c:2c:7c:68:b3:8b:06:93:ed:86:57:
                    bf:67:c5:87:a3:7d:7a:51:fa:27:40:60:ed:72:f2:
                    eb:d9:18:4a:55:3c:3f:3a:92:a9:0e:62:ea:6a:00:
                    2f:9b:8f:e9:68:1a:ee:2c:77:85:53:10:3f:7e:4b:
                    5e:88:92:46:1a:c6:f0:19:a3:e1:d3:2f:e1:94:e1:
                    c4:fc:d1:69:3f:7c:ab:bb:dc:16:7b:34:57:d7:79:
                    ff:9b:67:a3:98:31:39:01:0f:0c:3b:53:66:1d:c2:
                    ed:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2C:F9:BC:96:27:5E:D9:83:72:F1:A1:F3:16:23:89:71:4F:80:F6
            X509v3 Authority Key Identifier:
                keyid:11:E8:69:B0:F9:53:99:BC:6F:3C:D5:EE:5E:B3:33:16:9E:5C:72:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EehpsPlTmbxvPNXuXrMzFp5ccsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e4b869-d18d-4c20-8ab6-e74a9d40441e/1/EehpsPlTmbxvPNXuXrMzFp5ccsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e4b869-d18d-4c20-8ab6-e74a9d40441e/1/EehpsPlTmbxvPNXuXrMzFp5ccsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b8:9d:06:9f:de:93:56:2d:bc:4d:7d:13:31:99:9c:bc:64:
         86:cb:90:15:d0:63:8a:99:ed:c2:8e:36:37:df:4b:6c:3a:93:
         e5:2c:71:f0:79:87:2f:9b:16:2e:02:e7:f9:95:1b:58:cf:76:
         23:fa:53:64:f5:b4:d1:5c:db:69:3c:15:9e:fe:b2:1d:d7:ed:
         8f:fd:75:dd:fe:46:75:34:38:77:d3:61:f3:38:9f:d6:10:04:
         03:cc:40:31:32:80:d4:98:8d:e9:a9:54:d8:97:94:bb:e7:4b:
         13:75:73:23:79:5a:77:92:04:7f:82:77:23:f8:1d:83:b9:60:
         75:23:2d:72:e2:27:8b:33:70:35:4f:c3:86:88:98:16:99:da:
         ca:a0:39:5d:01:3d:8a:25:1a:44:28:f8:7d:91:db:c8:b6:7d:
         bb:5c:87:75:b5:1f:9e:c9:ce:9d:99:d7:06:e5:cb:22:cd:70:
         6e:7b:b7:a6:b4:f1:3e:b5:ae:47:3c:5c:6e:b9:b4:8b:9b:85:
         0a:d1:64:07:45:31:eb:09:5e:1f:cc:d6:d4:19:9c:68:e7:2b:
         63:73:b6:55:26:d5:36:74:29:d6:b2:63:a6:b6:28:a7:75:3e:
         ea:e5:6f:7f:22:fc:4b:4f:d3:79:43:39:c5:ca:eb:ed:06:01:
         60:47:9f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:26:33 2025 by rpki-client