Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
File:                     EDfew086MutlAvFmKoKiD4teohw.mft (raw, json)
Hash identifier:          fig8X1EZP56/TkDmP/0nvjB/MPuFCqC9X+ynmXhru3Y=
Subject key identifier:   73:D4:48:C8:3D:9A:A7:EA:D8:54:85:5A:1A:D6:E7:55:34:D9:14:9E
Authority key identifier: 10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C
Certificate issuer:       /CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
Certificate serial:       0194BC3BC8BC2F37C99802574A21F9D946BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 12:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:22 +0000
Files and hashes:         1: EDfew086MutlAvFmKoKiD4teohw.crl (hash: +15OLZutNkydI04/h27aXpNgGNmLgCgWAdeaoDeeiUQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:c8:bc:2f:37:c9:98:02:57:4a:21:f9:d9:46:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
        Validity
            Not Before: Jan 31 12:00:22 2025 GMT
            Not After : Feb  1 12:00:22 2025 GMT
        Subject: CN=73d448c83d9aa7ead854855a1ad6e75534d9149e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:86:ff:1e:f8:28:67:8f:75:94:31:f0:40:
                    e8:96:b6:a9:aa:8f:1b:9c:05:5e:7a:8d:41:c4:74:
                    fc:96:33:e7:ae:3d:8a:60:48:83:fc:18:1e:ec:b3:
                    3d:ae:d8:16:67:95:c8:0d:63:da:c4:29:8b:7c:a8:
                    dc:6d:1b:68:90:77:71:41:24:f6:6f:20:de:0d:35:
                    8d:d7:bc:49:d1:41:8e:9f:72:6c:f7:db:0a:8a:66:
                    a3:59:f8:f5:9c:e6:de:94:f3:db:c7:2e:e9:22:99:
                    2c:4d:02:fd:97:4a:ce:fd:0e:1b:56:22:85:cb:2f:
                    d2:bc:d9:34:d0:f4:83:d9:bd:f4:e3:f8:95:84:76:
                    2a:0c:23:37:17:71:c7:bc:ec:d2:a3:4d:ef:38:b3:
                    42:77:ab:fa:46:38:91:71:93:64:e1:97:d9:94:28:
                    99:35:83:4d:77:cc:96:76:b5:e8:dd:ee:6c:4b:88:
                    16:52:ae:a0:ef:4b:dd:fd:f7:4d:20:a1:f3:c4:7d:
                    5a:3c:05:4f:37:87:0f:c6:ba:ae:dd:e9:50:67:d2:
                    e2:3f:e8:58:19:d1:77:38:8d:bb:3f:a6:8e:8f:69:
                    b2:19:51:6b:6f:74:ac:cd:86:c8:f4:9c:96:66:1b:
                    77:c3:7e:2a:ad:66:1c:90:fc:6a:de:5b:24:23:67:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D4:48:C8:3D:9A:A7:EA:D8:54:85:5A:1A:D6:E7:55:34:D9:14:9E
            X509v3 Authority Key Identifier:
                keyid:10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a4:29:10:09:be:af:dd:5a:e4:5a:bc:50:8a:c4:a2:3d:b8:
         4d:7e:66:88:a0:ae:64:ac:8a:ad:5e:7f:09:a3:4a:8b:ca:4f:
         ae:c6:b4:39:41:e4:bb:bf:b6:bb:b8:3b:ae:77:f3:6c:e7:ff:
         10:29:b3:cc:18:b6:75:f9:0b:45:90:bc:3c:da:7b:3f:bb:6b:
         d0:9a:7f:3e:7d:21:2e:8e:06:c2:24:4c:b2:45:95:29:d6:a7:
         31:42:93:27:85:a8:71:0f:e0:79:f1:ca:9d:9c:52:1b:c4:bc:
         4f:84:72:88:56:b0:82:39:7d:33:c0:0f:d5:f2:b9:e6:b0:a8:
         a1:66:0d:ad:c6:da:08:5e:0d:f3:a8:fc:db:06:e2:9c:1c:11:
         1f:93:d7:32:46:e4:25:6f:85:b1:df:83:b0:56:85:6d:4f:26:
         33:4d:1b:70:8d:d2:74:5b:2f:95:3b:6a:06:41:69:6d:1d:d9:
         f9:2d:78:78:f7:5a:60:5f:ff:f0:7b:3c:31:db:2c:6f:92:40:
         84:00:42:a1:99:b8:4e:fb:38:c3:b7:5d:20:40:8a:be:72:4d:
         d3:30:cc:e4:82:6b:5d:83:3d:11:6b:fb:4b:80:e2:c3:3e:45:
         c3:b9:45:63:28:73:00:4f:81:d8:f5:94:df:43:c6:8d:0c:76:
         60:4f:0c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:20:46 2025 by rpki-client