Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
File:                     mTFQMIBh3NrF2EZc-ITGejuxkVk.mft (raw, json)
Hash identifier:          rJ/t9oqA/q5f5ru4DTyNOMa6pHtps/DFK4rlOr1XCpY=
Subject key identifier:   75:6D:7D:BE:9D:80:D5:2F:99:60:E3:11:76:68:C2:8B:3E:46:06:57
Authority key identifier: 99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59
Certificate issuer:       /CN=993150308061dcdac5d8465cf884c67a3bb19159
Certificate serial:       0194BD1764C8096B91E476E9E188DFEC6B2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft
Manifest number:          051F
Signing time:             Fri 31 Jan 2025 16:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:14 +0000
Files and hashes:         1: mTFQMIBh3NrF2EZc-ITGejuxkVk.crl (hash: blR+jH3VTJfFhmruqxu/6jAFa90MoiFlXlHi5ZTCErQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:64:c8:09:6b:91:e4:76:e9:e1:88:df:ec:6b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993150308061dcdac5d8465cf884c67a3bb19159
        Validity
            Not Before: Jan 31 16:00:14 2025 GMT
            Not After : Feb  1 16:00:14 2025 GMT
        Subject: CN=756d7dbe9d80d52f9960e3117668c28b3e460657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:e0:1e:ba:a6:94:ff:77:a0:cc:5e:bc:a9:
                    09:e0:91:d2:5a:66:e3:02:33:56:1a:ee:1a:4f:14:
                    34:15:2b:b9:17:c0:ae:82:48:db:fb:33:bd:0a:76:
                    35:a1:ab:8d:23:ff:5a:93:bb:e4:4b:aa:c7:0f:cc:
                    bd:bc:5d:d0:1d:77:78:88:52:8d:bb:81:f1:a6:4b:
                    a1:f0:99:9b:ef:89:69:a2:c0:9f:af:51:b8:40:12:
                    42:6e:08:61:33:94:eb:da:62:a9:2e:08:80:27:2b:
                    a9:c7:11:bd:ae:ab:74:29:9c:8a:20:92:84:9a:04:
                    c7:fc:da:a8:68:42:b1:ce:59:20:4b:01:cc:65:b1:
                    aa:db:6a:bb:a7:55:74:f4:ab:11:86:28:4b:e8:90:
                    de:84:19:6c:4b:78:e2:00:54:04:29:7a:54:fc:8c:
                    6e:a5:38:c9:9e:08:56:eb:81:0e:62:c9:f9:2a:d5:
                    e9:b8:d0:1a:8a:af:5e:e8:12:03:55:a0:6a:89:1a:
                    13:18:9e:fa:51:aa:ce:bd:06:05:02:c8:2f:03:2a:
                    04:44:8a:35:5c:6b:0e:54:48:25:26:26:52:ee:02:
                    96:a4:0d:1e:71:2c:7f:2a:43:55:a1:ea:96:9c:e8:
                    84:11:ee:51:0a:d8:6f:12:90:24:bd:d5:8e:7c:3e:
                    b2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6D:7D:BE:9D:80:D5:2F:99:60:E3:11:76:68:C2:8B:3E:46:06:57
            X509v3 Authority Key Identifier:
                keyid:99:31:50:30:80:61:DC:DA:C5:D8:46:5C:F8:84:C6:7A:3B:B1:91:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTFQMIBh3NrF2EZc-ITGejuxkVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a845a-2669-4045-8d83-52b230ecacae/1/mTFQMIBh3NrF2EZc-ITGejuxkVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:94:1a:a4:0b:9a:f9:a6:60:f1:4f:a8:e9:31:21:54:2d:45:
         99:37:09:47:65:97:62:e4:1c:b8:c0:44:bc:c7:dd:c0:bf:48:
         c7:83:84:b3:27:40:c4:95:ae:06:d7:e4:6c:9f:23:ed:d7:f6:
         94:8b:02:41:73:b5:5d:72:be:ed:d5:de:fc:54:a2:2c:20:18:
         ec:6c:97:36:6c:f6:6f:61:59:1e:41:2b:fc:6a:36:1a:e1:a9:
         9c:5a:29:33:cc:2a:ff:41:83:37:8a:bd:a5:50:18:6a:54:c3:
         a6:ae:42:24:ce:9e:cc:a4:f9:6f:01:d3:dd:41:04:67:f1:b3:
         c2:e8:8f:75:be:66:dc:77:61:a8:a1:df:d4:a2:3a:9e:ae:91:
         e9:81:e4:aa:97:ce:d8:e1:d4:e7:86:f9:0d:f8:e9:06:d6:df:
         00:37:88:46:68:d9:fa:7d:ff:85:56:9b:3a:3a:1f:58:9f:5c:
         40:66:b2:77:ae:68:6d:c3:b3:1e:4d:ad:f0:ab:d3:8d:12:3d:
         0a:62:b0:d4:9d:59:c3:38:f9:f8:6a:ce:01:d0:b3:a9:7b:75:
         0f:20:2c:a9:52:97:dd:3e:8a:ac:8c:92:38:09:57:d6:94:1b:
         6c:e1:d4:9a:b0:0a:b3:d5:8a:5f:f5:ad:2a:92:30:29:d9:9e:
         1a:b3:4f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:46:01 2025 by rpki-client