Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
File:                     imo0EVg-JhQzSS5QR88xxGw9LB0.mft (raw, json)
Hash identifier:          dYXDU17w8oo5cQ+QYfpKQFvqYkQqq+MhMLJ6WLqQWlM=
Subject key identifier:   E0:7C:D2:E0:BB:D2:9A:D3:58:56:33:31:31:24:B9:D6:FF:A4:F8:42
Authority key identifier: 8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
Certificate issuer:       /CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Certificate serial:       0194BD17F6DA8EB805C7E72ABAA84F7CD387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 16:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:51 +0000
Files and hashes:         1: imo0EVg-JhQzSS5QR88xxGw9LB0.crl (hash: hIrNoW8qTWnpg0zCMhOYW37qwY6NRQfz+44+5Ro+WKU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:f6:da:8e:b8:05:c7:e7:2a:ba:a8:4f:7c:d3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
        Validity
            Not Before: Jan 31 16:00:51 2025 GMT
            Not After : Feb  1 16:00:51 2025 GMT
        Subject: CN=e07cd2e0bbd29ad3585633313124b9d6ffa4f842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:39:cc:f5:4b:c3:77:83:76:08:de:3c:95:80:
                    9a:a7:eb:dc:dd:cf:de:af:cf:2f:e0:52:a8:a5:4e:
                    14:da:7c:5b:57:26:bf:22:84:eb:18:a1:cf:61:31:
                    a0:15:e8:46:76:9c:d7:a2:54:ed:53:9b:71:60:15:
                    34:79:a3:ad:dc:ea:22:be:88:0e:e4:c3:3f:79:36:
                    8f:74:2c:5e:ea:19:e0:10:7c:3c:3f:82:61:e0:fc:
                    41:66:a7:ec:7c:cd:63:c9:54:d4:6c:0c:b7:5b:1a:
                    c0:00:aa:18:36:4c:9f:cf:a7:19:15:99:b5:a7:f4:
                    58:28:23:0f:41:5c:c0:1c:60:5d:8d:ac:c7:d3:86:
                    99:27:6e:b6:55:b6:6c:ce:ca:4d:04:ab:53:2b:75:
                    d8:9e:84:46:d4:31:a9:90:c0:19:61:15:bb:65:9a:
                    c4:c2:ec:65:c2:10:4a:51:85:73:46:3e:0f:7b:c6:
                    1b:a3:f0:25:58:f2:d1:00:d7:31:06:d0:c7:7c:62:
                    13:20:95:75:27:18:46:ef:95:ab:13:e4:dc:19:e5:
                    7b:55:d8:99:cc:6a:00:61:1c:37:a5:81:ad:9f:87:
                    a3:a6:4c:44:fd:8f:1c:06:e7:3e:36:39:f4:da:74:
                    b5:7f:ec:52:cd:55:85:3d:0b:0e:cb:4f:12:a7:70:
                    44:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7C:D2:E0:BB:D2:9A:D3:58:56:33:31:31:24:B9:D6:FF:A4:F8:42
            X509v3 Authority Key Identifier:
                keyid:8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:89:35:63:e0:5a:a9:8b:24:81:ed:20:a7:af:8b:a2:4c:9c:
         8a:da:a6:02:b3:c6:9e:b8:eb:68:c9:4b:52:da:0b:d1:e4:6c:
         f3:7d:1f:22:4a:63:e9:c3:c3:fb:08:0b:f0:19:23:ff:2d:b7:
         f7:14:c6:07:19:1a:bd:06:29:3d:5b:02:19:bf:24:08:22:01:
         b4:c2:58:d6:b1:fc:86:b6:12:ee:db:c7:8c:fe:a7:9f:e6:96:
         ec:14:40:71:c4:2f:84:06:27:31:77:3b:5a:4d:dd:cf:34:d4:
         4f:3b:a6:20:1e:63:15:d4:eb:f5:9d:4a:4c:b3:c7:e3:cb:56:
         4d:7d:46:11:30:bb:aa:2a:51:13:24:b7:bd:5b:f5:5b:5e:6d:
         25:93:3e:65:a0:c1:8e:79:35:42:9e:e9:aa:b5:8c:ff:9c:96:
         bf:2a:b7:c4:2d:5a:07:ca:fe:0b:79:55:f2:e7:c6:1b:29:50:
         7e:2e:a8:1a:4d:10:1d:4f:e2:8f:ce:1b:0c:77:94:e9:a2:94:
         5d:6f:fb:46:b7:ba:f0:27:55:f5:b9:6a:ca:66:7e:bf:4b:a3:
         d9:9c:00:2e:2a:f5:04:89:96:7b:6c:6e:3c:2a:90:f8:de:94:
         1b:36:ee:5c:9b:3b:17:05:33:67:6f:6a:3b:2c:0c:b4:dd:be:
         ff:66:99:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:43:26 2025 by rpki-client