Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
File:                     iD9pgz7Edx87C85PAJNleTVG9qg.mft (raw, json)
Hash identifier:          Do9BNVbQ9bJGu/hz0M651SmhHOTUDHYOasrXmYBWg5c=
Subject key identifier:   44:8A:E1:AC:9F:47:17:67:D5:91:05:41:2B:6E:F6:1E:5B:09:73:63
Authority key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
Certificate issuer:       /CN=883f69833ec4771f3b0bce4f009365793546f6a8
Certificate serial:       0194BBCE3505B3041DCC769105ADFC77F9EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
Manifest number:          0466
Signing time:             Fri 31 Jan 2025 10:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:40 +0000
Files and hashes:         1: iD9pgz7Edx87C85PAJNleTVG9qg.crl (hash: g09nVUL1Wp0a3gHqUtTpP2JCiyuWfD+RQXVMiV9m9hY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:35:05:b3:04:1d:cc:76:91:05:ad:fc:77:f9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883f69833ec4771f3b0bce4f009365793546f6a8
        Validity
            Not Before: Jan 31 10:00:40 2025 GMT
            Not After : Feb  1 10:00:40 2025 GMT
        Subject: CN=448ae1ac9f471767d59105412b6ef61e5b097363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:2e:69:33:c1:37:37:36:7b:ff:eb:9e:85:
                    f0:b4:87:61:1e:c8:8f:0d:d4:bf:5c:d2:2e:ad:0f:
                    54:9f:65:be:d9:7d:cb:8a:85:f2:dc:c0:bf:de:06:
                    da:3e:e8:c7:34:fa:60:cc:77:cd:e4:b6:09:54:8b:
                    ad:33:a1:12:b6:78:d3:2d:3e:12:36:66:51:16:38:
                    c8:59:c0:b7:dc:75:b5:d6:30:6b:5f:e1:c9:ea:6e:
                    8b:54:f8:7e:6d:4b:40:ff:13:1e:d9:21:22:4f:b2:
                    8e:eb:ff:19:8d:1d:75:1b:16:4a:2b:ee:33:ec:ef:
                    47:ff:77:9a:d9:42:4b:1a:21:dc:a0:06:9e:6a:d7:
                    eb:b9:6d:8e:d9:9f:d8:bd:7b:b2:84:53:e9:c5:c7:
                    9c:fd:3f:e6:9a:cd:d5:22:bf:96:a3:60:86:6f:7d:
                    49:81:35:66:c2:a6:8f:38:bc:db:19:5d:35:04:8c:
                    ef:6f:81:d0:09:9f:76:a4:a0:50:e3:08:2a:a3:b7:
                    fa:92:91:af:e0:5f:cc:33:da:a4:c8:82:a6:36:00:
                    6e:b1:da:2a:78:f3:05:c5:6c:a3:33:0e:6e:e0:dc:
                    3a:b3:25:56:20:36:71:af:21:51:76:64:b2:dc:dc:
                    aa:92:3b:4f:b3:2b:78:0f:9d:db:2e:ee:c2:de:d7:
                    3b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8A:E1:AC:9F:47:17:67:D5:91:05:41:2B:6E:F6:1E:5B:09:73:63
            X509v3 Authority Key Identifier:
                keyid:88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:9b:5c:f6:fc:8a:74:2e:03:26:46:62:b0:ca:cb:e2:78:17:
         5c:5e:d5:9c:77:c3:b8:3a:3d:8a:c5:74:22:f7:37:33:24:53:
         30:fc:92:cf:ff:46:bb:15:a6:a9:64:0f:a9:be:39:1b:64:29:
         38:15:18:7a:ab:30:6e:5c:c4:53:63:ab:4a:4b:00:01:ad:73:
         00:d2:63:63:5f:08:59:66:98:fa:7a:55:e0:fb:e5:76:9e:5a:
         5b:51:50:9e:b1:06:1c:3f:3b:22:2f:40:91:37:66:57:8e:e9:
         73:cc:f6:5a:d8:a9:ef:e6:48:d7:02:9e:0e:a5:62:d0:43:c7:
         2d:9a:49:5f:46:1e:82:df:3c:2f:f4:98:d7:ac:a2:ec:4c:ee:
         a3:11:d0:e8:03:89:87:51:c4:72:ee:b2:b3:60:33:ce:46:5e:
         0f:48:d2:99:b2:cd:29:ae:f2:80:17:8a:a4:0a:8b:9c:a4:9e:
         a4:7d:06:fd:81:08:53:c8:e0:ce:4a:0c:ca:f2:9b:33:9f:32:
         58:eb:7d:91:1c:27:7b:63:46:01:a0:88:39:37:b2:29:02:52:
         f4:5b:69:5d:2d:78:71:2f:3e:8b:e0:27:90:7f:45:b1:c4:88:
         0e:ea:d1:ae:b0:bd:ae:b6:38:6f:47:d9:1c:b5:a7:bc:bf:e7:
         52:8c:be:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:01 2025 by rpki-client