Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
File:                     GRGmWD3HmkFVGxeutDFNspMRy-s.mft (raw, json)
Hash identifier:          o0uBWFz8hr8YR+BVdzUUAr0JqFRBKq1rYTCp9tb+zxw=
Subject key identifier:   ED:FE:0A:C9:AA:29:B3:3C:6F:BF:CD:B5:AD:76:C7:93:E5:24:F0:F0
Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
Certificate issuer:       /CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Certificate serial:       0194BD85477848330E876B4A47258885AD53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
Manifest number:          1341
Signing time:             Fri 31 Jan 2025 18:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:15 +0000
Files and hashes:         1: GRGmWD3HmkFVGxeutDFNspMRy-s.crl (hash: /8ZXcmQihX+YcOjzzpwyh0D2Znf+tvSlldZA16H+C8I=)
                          2: NGlvLAmeCUBqhZ9wnIddvIcLHQE.roa (hash: DjDvlZwqQlOEZrmGSn2/QarvAyBTsIXhSALa8HhYpv4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:47:78:48:33:0e:87:6b:4a:47:25:88:85:ad:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb
        Validity
            Not Before: Jan 31 18:00:15 2025 GMT
            Not After : Feb  1 18:00:15 2025 GMT
        Subject: CN=edfe0ac9aa29b33c6fbfcdb5ad76c793e524f0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:74:77:c4:9e:82:7e:41:09:be:93:38:a0:b6:
                    50:70:a5:12:29:96:dd:7f:d1:6b:16:dd:55:53:93:
                    58:f8:7b:7e:b2:40:43:03:fa:55:fd:a4:45:64:b0:
                    e8:74:57:9e:2d:17:d9:f9:f1:de:4a:38:ef:c5:57:
                    d6:bf:b2:28:cb:d0:82:94:8f:3b:f0:dc:c5:0f:e9:
                    55:b3:97:14:b9:c1:a0:93:66:95:d9:f8:90:94:ee:
                    56:1b:ed:9d:1e:7d:29:6e:22:8c:6d:21:7a:29:d5:
                    96:3f:42:17:39:87:da:43:b5:b7:ce:86:f8:bb:76:
                    22:c8:77:63:04:f3:00:69:49:e7:34:31:a5:d3:89:
                    c2:7b:b2:2f:ea:73:72:52:c5:3d:e6:f5:64:91:aa:
                    72:17:a1:c5:7a:40:b2:b3:6e:e7:ea:68:82:eb:27:
                    6a:0f:18:6f:52:67:26:f1:4e:f5:49:0b:8a:4c:c4:
                    75:a6:da:52:ec:4c:ad:53:d2:c1:4a:53:fe:76:96:
                    70:6a:c3:3a:ff:0a:72:04:c0:87:45:72:f4:de:66:
                    13:06:61:35:19:af:82:a3:d5:42:00:37:86:82:95:
                    d0:cd:a8:97:bd:ea:2e:68:56:15:0e:9a:6a:c4:53:
                    ec:7d:03:99:be:ea:1d:e5:da:d3:c6:78:03:60:6d:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FE:0A:C9:AA:29:B3:3C:6F:BF:CD:B5:AD:76:C7:93:E5:24:F0:F0
            X509v3 Authority Key Identifier:
                keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:70:92:e1:50:9c:d6:3d:08:d5:f8:e2:f2:21:57:9d:fd:c0:
         2d:36:ce:f2:45:b5:a1:f8:78:9a:e6:ba:84:2d:f1:59:61:a9:
         ee:44:ed:7c:01:ac:08:b2:3a:81:7e:81:52:a5:a4:a9:78:35:
         18:aa:f7:a1:0d:8c:b2:c0:14:32:48:59:7c:de:c6:04:47:e3:
         d4:9e:3f:1d:32:36:2f:39:39:bc:75:42:12:fa:5b:0e:d5:28:
         99:7d:1b:03:c4:87:c0:bb:4f:07:cb:01:13:6b:13:f2:d5:09:
         8a:db:4f:bd:55:ca:77:d0:57:d2:de:3d:93:1d:3e:bd:ce:31:
         8f:25:05:6c:ef:f3:1a:56:0f:52:54:59:85:d9:a0:25:49:8e:
         a4:e5:1b:78:64:82:2f:61:2c:97:e6:af:8f:c4:b4:5d:d2:f0:
         52:47:8f:ec:ce:45:4d:a6:87:d8:5c:4d:b4:9c:ed:11:cd:9b:
         f7:96:7d:d2:a1:80:6b:44:79:29:26:66:1b:aa:32:67:27:c3:
         16:b2:df:01:bd:be:7c:80:c8:02:51:d2:c6:95:93:20:a0:05:
         4c:96:12:fd:73:b5:6b:a5:9f:b1:30:91:43:b2:2e:f6:d9:4e:
         45:ef:bb:89:df:5c:72:25:80:4a:42:3a:b1:fe:c7:10:94:05:
         ce:64:3e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:05 2025 by rpki-client