Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
File:                     iSWuMjSiyXwn9171HT_zJr4GDiw.mft (raw, json)
Hash identifier:          fySz8UKdjpApTiTbWrTzNI9cybvyWYTX95FSYDZWlNg=
Subject key identifier:   36:1C:D3:5A:2A:CD:40:7F:AA:F2:40:35:98:B6:FC:15:0A:E5:DD:26
Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
Certificate issuer:       /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Certificate serial:       0194BC72C795638AA35BEEBC6ED6A5EFF986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 13:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:26 +0000
Files and hashes:         1: iSWuMjSiyXwn9171HT_zJr4GDiw.crl (hash: yJYqFGxZeyN6pQpLvLXVb8vMUFeGTtTpqRB1MVi4+nQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:c7:95:63:8a:a3:5b:ee:bc:6e:d6:a5:ef:f9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
        Validity
            Not Before: Jan 31 13:00:26 2025 GMT
            Not After : Feb  1 13:00:26 2025 GMT
        Subject: CN=361cd35a2acd407faaf2403598b6fc150ae5dd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:1e:6a:17:60:d5:c2:66:be:b3:5e:e8:f5:
                    5e:a2:10:ec:20:53:82:7c:97:8f:3f:04:05:a1:c2:
                    18:35:c1:7a:e4:36:96:c5:94:c7:88:f7:8e:25:28:
                    f4:6e:82:62:13:e9:7b:b3:2e:04:8a:b7:31:00:6e:
                    3f:cb:40:85:c0:66:e3:0f:c2:49:4a:a7:e1:ca:7c:
                    77:0d:a6:56:da:d0:fd:80:4c:62:e3:45:c6:4a:78:
                    ba:0e:71:ae:99:d6:93:95:36:d9:2e:db:3f:b9:d8:
                    1b:3c:34:fb:79:69:ca:3d:c4:cf:d3:76:dc:a6:24:
                    8d:01:5e:45:82:b2:e8:fb:fc:ff:7b:4d:01:b6:95:
                    b8:d8:35:3f:85:9e:da:9b:60:cb:84:73:30:62:1e:
                    2d:18:89:9c:9c:38:2c:07:6a:ff:37:c3:ff:56:1e:
                    a8:f3:aa:59:e3:83:8c:7c:55:e0:a7:37:fc:ec:3f:
                    66:3b:28:fe:45:85:7b:40:81:51:12:f2:83:c0:ea:
                    5d:b9:5b:b2:ca:54:2b:eb:cb:50:90:2b:94:b1:6e:
                    08:32:0f:07:16:f4:34:4a:e2:39:9b:99:c8:d4:55:
                    88:ca:08:ad:c1:1d:6d:bc:39:7f:af:6b:bc:61:6a:
                    61:7e:3b:ca:a4:f3:dc:ef:f6:f7:a5:11:44:59:3c:
                    36:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1C:D3:5A:2A:CD:40:7F:AA:F2:40:35:98:B6:FC:15:0A:E5:DD:26
            X509v3 Authority Key Identifier:
                keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:0a:ef:7e:b5:db:55:c0:c8:24:e7:9f:e9:69:fa:de:af:4f:
         bf:19:27:4c:bd:f4:ea:d8:5e:0f:b8:98:43:26:08:57:07:f4:
         e2:ee:db:ee:d0:39:26:95:fe:2b:a2:9c:9e:46:6a:0a:f8:05:
         7d:72:4a:c9:43:22:7f:7b:dd:87:ef:44:55:40:36:ac:ad:92:
         f7:71:14:54:17:65:26:b4:86:6e:67:bd:37:a8:83:e2:15:c3:
         c5:2b:49:fd:ed:e7:a8:4f:51:c6:17:01:f4:29:3f:34:3a:f6:
         dc:01:df:eb:8c:6b:2c:b8:b4:6d:c9:34:08:06:c9:51:15:c1:
         eb:3d:eb:6f:05:16:f3:1b:79:5d:b6:9c:3c:1d:5c:21:42:d4:
         6a:36:64:28:ff:93:37:b2:b9:a2:5a:8e:5d:5c:2f:47:78:6c:
         8a:4d:38:1d:6d:b8:88:de:ca:e0:14:15:2f:ce:2a:4d:77:e4:
         38:c5:09:d5:f1:5c:d6:a3:01:8a:9e:9e:76:c4:06:dc:39:23:
         b0:48:0d:09:42:5a:e3:d2:9f:78:24:a3:f7:e4:45:83:0e:df:
         6f:94:3a:6d:b2:3d:63:4e:b1:2f:b8:57:6a:a4:91:00:8c:49:
         f2:be:df:57:be:3d:fd:76:63:96:c4:c5:3e:66:1c:e5:e8:ef:
         35:c1:a4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:22 2025 by rpki-client