Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
File:                     j31CCyNDzZHsI_UImoNC6J1tkWU.mft (raw, json)
Hash identifier:          qwKeK8IzNy+KXzknAk/8Gkoi7ndZ4G9Vw8YDPn5I0Pk=
Subject key identifier:   0C:50:BD:C2:56:BC:F4:7A:D1:5B:59:A3:56:EB:02:68:E9:30:84:48
Authority key identifier: 8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65
Certificate issuer:       /CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
Certificate serial:       0194BBCED3DD0F941E689AE9BEA6FFADD7BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
Manifest number:          0D90
Signing time:             Fri 31 Jan 2025 10:01:21 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:21 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:21 +0000
Files and hashes:         1: j31CCyNDzZHsI_UImoNC6J1tkWU.crl (hash: N2IezpW48wl7Cqcb6mkCNCxPtvKnkr9IESN5GxXqoYg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:d3:dd:0f:94:1e:68:9a:e9:be:a6:ff:ad:d7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
        Validity
            Not Before: Jan 31 10:01:21 2025 GMT
            Not After : Feb  1 10:01:21 2025 GMT
        Subject: CN=0c50bdc256bcf47ad15b59a356eb0268e9308448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:e2:52:d3:76:97:a1:9a:44:fb:dd:65:fc:
                    78:7f:5a:f9:99:25:b6:22:16:17:39:70:09:e4:da:
                    18:18:ba:33:35:2b:c5:62:09:09:94:3a:8a:9c:a3:
                    e4:b3:b5:a6:51:6f:72:56:b7:f0:65:4b:8a:ae:db:
                    6b:46:b5:b4:a6:42:e2:39:73:9e:ab:18:60:07:79:
                    47:07:44:9e:a2:54:57:21:55:36:43:74:e6:c8:57:
                    d6:a9:b5:0c:9c:55:6b:c7:7a:f6:d4:4c:4b:7d:b6:
                    5d:7d:2a:40:bb:0b:35:c3:1b:b5:a4:d5:db:72:17:
                    bc:40:cf:c1:39:2e:35:c7:dc:76:cf:f5:39:96:40:
                    59:fc:ba:fb:54:a6:bb:e4:fd:b1:dc:f1:d3:81:21:
                    c1:f9:9d:50:09:27:44:39:ae:18:92:bc:c0:f0:d8:
                    25:d2:ff:e5:a3:e0:50:c8:31:c9:dc:7b:cf:07:d9:
                    ff:34:91:f4:e9:d3:78:90:7d:11:69:39:bd:ba:c8:
                    ef:5d:8b:ba:eb:80:8b:80:a2:c7:c8:cd:34:d8:64:
                    e3:ad:b6:5f:45:94:ce:2c:f9:b0:f4:24:a3:f8:35:
                    ca:ce:b0:a1:7e:71:02:ce:1f:15:b8:57:b7:bf:6e:
                    c9:d0:36:8b:b0:df:67:76:37:dd:c3:a3:dd:01:86:
                    ac:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:50:BD:C2:56:BC:F4:7A:D1:5B:59:A3:56:EB:02:68:E9:30:84:48
            X509v3 Authority Key Identifier:
                keyid:8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9e:9e:ca:0f:6d:08:50:0f:06:7e:b2:21:bf:b9:91:da:a4:
         ff:81:8d:1a:bb:30:a8:f1:35:cd:51:a3:3d:5a:9a:9b:21:76:
         62:e9:b6:6a:21:ca:cb:57:d7:59:e3:5d:51:8e:89:33:28:9d:
         d3:16:97:fb:3b:d1:36:5c:23:1c:7a:67:e4:b5:93:eb:6b:66:
         36:9f:0e:36:4b:94:cf:e2:8e:b7:ad:95:da:74:59:92:d1:b6:
         4f:56:4f:a7:4c:70:99:e4:63:20:c9:94:ed:a2:b2:99:dd:29:
         05:9e:fc:8e:52:69:1c:d7:de:ec:4a:df:24:68:b1:64:b3:20:
         c6:c7:50:da:81:f6:67:8a:c2:a4:ce:a5:10:b0:ff:19:55:5b:
         34:b9:bb:fd:8b:45:3a:64:5c:45:96:61:37:44:6e:20:d4:f5:
         07:ed:b6:53:a1:75:1d:82:6d:d3:fd:f3:ae:66:80:ed:d8:d1:
         20:0d:10:f2:0b:e6:3a:cf:2c:db:34:1a:45:ce:8a:fb:d5:f4:
         83:dc:5a:a9:7b:1d:65:57:42:50:f6:0e:71:ad:10:63:98:9b:
         82:b4:7b:8e:7b:24:f2:ec:03:8e:e5:d8:9d:1c:76:de:8b:f8:
         3d:78:22:d0:f7:75:93:d9:71:2a:42:0d:e7:d5:79:f7:de:14:
         df:fa:7d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:22:53 2025 by rpki-client