Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
File:                     I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft (raw, json)
Hash identifier:          63C53MeixHtkZy+kVf1IY/DtTJnHXK04b0RypheEgMM=
Subject key identifier:   9A:98:0F:B0:D2:39:F8:A4:D3:88:C0:88:57:30:52:42:C5:A6:C7:33
Authority key identifier: 23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
Certificate issuer:       /CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Certificate serial:       0194BD17838D8192D985BB036237A26623D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 16:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:22 +0000
Files and hashes:         1: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl (hash: htcS3CTfGLCM6DSpCKg5u9sh5Gf3+gIYSjzpADFs1Y8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:83:8d:81:92:d9:85:bb:03:62:37:a2:66:23:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f89f57d072849e0cab2195cd0baf2557935ea0
        Validity
            Not Before: Jan 31 16:00:22 2025 GMT
            Not After : Feb  1 16:00:22 2025 GMT
        Subject: CN=9a980fb0d239f8a4d388c08857305242c5a6c733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:77:8d:1b:2b:45:df:65:b7:9e:7a:8a:68:3a:
                    c9:52:b2:58:b3:e2:8c:56:f2:b8:7e:5e:cc:fe:c8:
                    85:d2:e2:44:be:d6:17:43:ca:12:2b:11:87:0f:e0:
                    c9:e6:5b:25:bf:04:c3:9d:b0:e8:f2:1a:2d:30:ff:
                    3e:4b:39:a0:04:de:4c:f1:f2:08:c9:71:f9:c3:50:
                    c8:1f:d8:90:d8:14:5a:97:87:33:87:62:53:c3:87:
                    a6:65:99:9c:be:2c:2c:91:f6:d5:dc:5a:93:76:e7:
                    88:32:a3:19:95:c5:2e:4e:f5:c0:d8:e7:a1:2a:13:
                    a7:21:82:de:0d:8d:95:7c:98:5e:29:b2:9f:a6:4b:
                    ce:3e:fd:8d:91:f3:15:38:92:38:4f:76:52:7e:7c:
                    da:9c:81:02:c1:3a:d3:b6:50:e9:9f:f5:e3:c9:b0:
                    b8:a7:bc:c5:a1:63:b9:29:d5:56:19:83:55:ed:e7:
                    ee:4e:c7:99:5b:5f:3d:af:c2:45:85:3d:3b:69:17:
                    ee:eb:ef:2f:48:8e:c3:21:9d:9e:56:4a:0b:81:b1:
                    f0:2a:45:a6:39:66:e4:4d:d2:76:4a:f7:ed:cf:d8:
                    33:c6:aa:a1:78:4f:62:e3:b8:17:a7:e3:c5:b3:08:
                    7c:f4:e7:a9:79:ce:ca:78:92:b8:f3:8b:82:3f:7f:
                    17:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:98:0F:B0:D2:39:F8:A4:D3:88:C0:88:57:30:52:42:C5:A6:C7:33
            X509v3 Authority Key Identifier:
                keyid:23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:47:08:c1:90:69:14:7b:6c:1f:5b:3b:65:9d:b2:bc:3f:db:
         e5:73:d0:3d:42:53:2f:10:a4:50:96:40:2d:4d:d6:2f:ec:32:
         1a:d9:a3:ab:e6:f2:17:df:8d:f3:23:85:4a:11:05:0e:af:41:
         b5:32:08:9d:d2:64:aa:2d:22:12:ce:62:5b:4f:f5:2d:b0:4d:
         a2:38:57:ac:63:c9:68:6e:ee:6c:64:ce:df:02:07:d5:1c:c6:
         aa:7d:aa:0e:10:26:af:d0:c1:18:f9:b3:86:3d:f8:45:0b:19:
         50:73:9b:55:84:10:1b:2a:1c:89:48:a4:1a:d3:db:c1:bc:7b:
         64:c3:c9:0e:29:25:b7:73:03:fb:7b:80:86:6a:e4:0e:d4:ed:
         d0:05:dd:6a:31:72:9e:b5:c9:9b:f2:9e:b6:36:c2:c3:f7:75:
         00:34:88:45:1f:50:26:b1:b4:4f:1e:bf:22:c7:a7:fa:7d:25:
         96:06:19:76:77:3e:0d:22:d9:8e:67:a9:d5:9b:04:2d:cf:f8:
         b8:ec:fd:78:71:2d:80:a2:21:a2:86:87:42:b9:77:95:0d:b5:
         dc:bc:a3:43:4b:01:1b:65:1d:56:93:0f:44:5e:0f:37:49:30:
         9e:ad:74:2d:e3:ff:a1:25:f4:9e:0d:d8:b7:da:1b:b5:d4:9c:
         60:b0:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:37 2025 by rpki-client