Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File:                     g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier:          8lXVZ1MYFh4t5c+C/74He+P+RNdf1Zk1++yLUZpb+/Y=
Subject key identifier:   66:47:D2:C4:45:49:80:5B:84:CE:47:69:39:9D:39:C2:B4:83:1B:0B
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer:       /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial:       0194BC04D96B3905A5EAEA69A7E7D168D7E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number:          0361
Signing time:             Fri 31 Jan 2025 11:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:21 +0000
Files and hashes:         1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: oLI+ZHz9v9IiEuQQ3XR4F54+yI6UJcplxfmRLxw7wh4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:d9:6b:39:05:a5:ea:ea:69:a7:e7:d1:68:d7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
        Validity
            Not Before: Jan 31 11:00:21 2025 GMT
            Not After : Feb  1 11:00:21 2025 GMT
        Subject: CN=6647d2c44549805b84ce4769399d39c2b4831b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:41:74:2a:08:0b:7a:fd:7e:86:76:8c:f0:
                    d3:df:f7:7b:4f:57:65:74:4f:21:bc:fe:fb:98:d1:
                    1c:66:ac:26:bb:93:f0:17:e5:b3:37:40:dc:3e:05:
                    7e:1f:e8:05:bc:21:ef:26:c5:95:46:c8:eb:04:6f:
                    c4:fd:90:e2:20:0d:58:71:14:ca:dd:5f:c0:ee:f8:
                    26:70:cb:ec:53:ed:55:91:37:b5:30:87:47:cc:7d:
                    e1:09:ed:23:22:42:a1:1b:cd:df:61:35:d9:26:d8:
                    df:46:f5:21:d0:ec:e3:0c:5b:42:4f:dd:21:04:02:
                    65:e1:bb:b2:3c:0b:d5:49:0b:c9:b3:d5:8b:10:c7:
                    b8:15:23:2c:15:ab:bb:95:87:7e:71:ba:a4:fc:8f:
                    a6:e7:5c:45:3b:70:27:4d:cb:4d:c8:e8:db:cd:4a:
                    c6:c2:b6:0a:9f:d3:8d:4f:f5:94:ec:54:b4:2b:42:
                    f0:f0:fe:97:f7:a3:df:dd:38:df:9d:d8:85:b3:c5:
                    75:d7:9d:72:ca:94:bc:d8:ff:4a:79:b5:aa:11:d3:
                    49:53:b7:67:9e:71:98:a9:2f:7b:b1:30:09:61:1c:
                    0d:23:a9:b0:d3:b1:1b:0b:c0:58:b2:0f:e3:92:f6:
                    f5:f4:8b:dd:c3:27:f8:14:f0:41:50:b0:c9:75:db:
                    23:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:47:D2:C4:45:49:80:5B:84:CE:47:69:39:9D:39:C2:B4:83:1B:0B
            X509v3 Authority Key Identifier:
                keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:78:a6:fe:2f:1a:f3:e5:36:51:74:b6:3e:36:a8:fd:60:3c:
         bb:50:e8:b3:fc:3a:ce:ec:89:06:73:1a:26:23:e5:13:29:af:
         11:9e:dd:6f:50:eb:ae:50:3b:9e:6a:c5:80:97:8b:28:7b:9d:
         da:4d:b5:a1:72:cd:2c:58:5d:5c:71:b0:a0:c0:aa:89:7e:62:
         b9:92:fb:64:52:01:bc:a0:e5:7d:97:a9:c8:4c:40:cb:f5:99:
         c5:f4:0f:7f:2d:c8:ca:47:1d:f4:8f:99:18:96:0c:31:68:91:
         57:9c:ef:c9:04:05:c5:f2:97:55:a5:84:c4:bf:6b:bb:34:48:
         70:b6:99:bf:af:d5:56:04:46:2b:49:a4:b8:a4:1b:04:00:f6:
         44:60:4e:e3:57:70:a5:a8:9e:fe:9f:03:6e:99:94:a4:0b:3e:
         55:bc:99:3b:1a:e6:76:1d:56:e6:8a:7f:51:12:5a:f4:d3:a6:
         1f:e2:cb:5a:23:71:c3:96:f0:39:4a:c6:7d:21:55:cd:97:6a:
         d6:0e:fe:89:db:91:6e:d7:d6:ef:e8:f9:4b:a9:21:39:5a:5e:
         d6:55:c2:52:56:6e:b5:3b:0b:5a:d8:a6:2b:01:90:a1:03:3b:
         73:a7:49:10:3a:fc:59:c4:ee:0c:58:f2:8d:fd:99:be:1c:a9:
         c4:01:fc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:40 2025 by rpki-client