Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
File:                     ETTh19f5WQbDqD6TDZdIccx0TL4.mft (raw, json)
Hash identifier:          Z6nOyg1pkFWs3q8bA2AGeP0NFQiBq/nGJPAZf1NJQYA=
Subject key identifier:   49:57:D0:20:A0:F4:5B:BC:A3:F0:56:84:C3:51:5A:C5:67:96:D5:88
Authority key identifier: 11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE
Certificate issuer:       /CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
Certificate serial:       0194BBCEAD1A8F2726A93C1033B48E691C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft
Manifest number:          13B9
Signing time:             Fri 31 Jan 2025 10:01:11 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:11 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:11 +0000
Files and hashes:         1: ETTh19f5WQbDqD6TDZdIccx0TL4.crl (hash: 6zbf9QSCEvt8Rgm9yb2B5FEjleD8Akjm2eX5ldP2ptw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:ad:1a:8f:27:26:a9:3c:10:33:b4:8e:69:1c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1134e1d7d7f95906c3a83e930d974871cc744cbe
        Validity
            Not Before: Jan 31 10:01:11 2025 GMT
            Not After : Feb  1 10:01:11 2025 GMT
        Subject: CN=4957d020a0f45bbca3f05684c3515ac56796d588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:24:3c:4c:99:d3:4d:39:79:15:31:f0:74:80:
                    48:58:29:cc:b3:2d:9b:e9:4e:9a:52:b7:c6:d3:4a:
                    37:aa:06:18:a0:33:d1:5f:c6:bd:50:3b:dd:cf:de:
                    42:71:7b:19:f3:07:90:7e:5f:d3:4c:cd:f1:be:b6:
                    96:c2:e3:c9:08:44:86:ab:7a:aa:62:13:b1:84:18:
                    6d:98:26:ec:1e:d7:0a:a7:57:6c:4f:4d:f9:0e:a0:
                    81:9f:53:5d:23:37:49:c4:a2:e5:f7:49:21:a9:49:
                    cd:ee:6c:75:94:38:63:ac:11:cb:78:2e:83:f4:88:
                    42:07:72:fe:0d:6a:d5:c6:65:4a:a1:d1:ed:7f:9c:
                    9e:44:2b:54:8f:c1:28:43:ff:3e:5c:ce:82:e0:82:
                    af:a5:4f:26:d4:be:e5:38:89:3d:fe:7b:87:29:40:
                    a0:78:86:91:7e:6f:33:93:aa:97:31:26:f2:ad:d7:
                    2e:88:85:8e:d7:c9:f2:3e:07:10:3b:db:5e:15:d2:
                    69:ad:ba:25:6c:f3:21:be:c9:ad:6f:d1:68:e4:7e:
                    f7:7a:94:ae:db:7e:e0:c0:d7:3d:eb:2c:e8:c1:3f:
                    22:10:48:85:b1:53:f2:15:3d:fd:78:e3:a0:77:39:
                    7a:61:b6:11:d2:75:c8:3b:2a:f2:9e:52:6b:53:03:
                    78:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:57:D0:20:A0:F4:5B:BC:A3:F0:56:84:C3:51:5A:C5:67:96:D5:88
            X509v3 Authority Key Identifier:
                keyid:11:34:E1:D7:D7:F9:59:06:C3:A8:3E:93:0D:97:48:71:CC:74:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETTh19f5WQbDqD6TDZdIccx0TL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/435a11-fd1b-4930-98d3-9b5f86cf353f/1/ETTh19f5WQbDqD6TDZdIccx0TL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fe:5e:ce:6c:15:08:b3:d8:c5:9b:09:71:8b:3c:c2:2b:12:
         0d:ed:e4:9f:bc:e2:00:5b:2c:ce:57:e5:66:df:49:3a:d4:69:
         2f:61:d3:f4:ea:de:3c:24:6a:1e:04:4d:77:4a:6b:64:b0:12:
         3e:f5:16:6d:55:03:22:4d:98:65:57:8f:37:92:f9:42:fc:8e:
         1e:fb:87:c3:ab:26:12:87:9f:b3:39:8b:ed:f1:61:e8:fd:f1:
         d5:94:07:12:cd:1b:6e:4f:43:a6:7f:a6:c8:90:78:2a:08:9c:
         69:d7:87:14:e7:01:1b:23:b3:f5:ae:de:24:d7:68:db:dd:5c:
         91:68:97:d0:89:dc:ca:26:43:11:13:ca:b8:a4:f2:b9:07:5d:
         d3:20:69:7b:7e:00:fd:25:fe:a8:0e:73:38:12:56:cc:da:fa:
         72:5c:5e:89:95:36:e5:b8:cc:21:f3:d9:1a:26:96:34:23:29:
         64:62:79:20:e5:9d:01:a5:2b:12:1d:37:2c:3f:fb:6c:84:5f:
         83:1a:bd:fc:ee:fb:ae:f0:29:c4:9a:34:79:e4:88:94:b2:1d:
         53:de:9e:d1:fb:35:a6:28:3c:c3:1b:07:71:99:88:8c:89:a2:
         df:a4:68:44:cf:ec:b3:7f:3d:ff:b4:1d:34:79:e4:bc:f7:f7:
         39:aa:2a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:42 2025 by rpki-client