Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
File:                     qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json)
Hash identifier:          4/OYHs69iyC7o5VZtj4UKtRHo9B2xhl/OWUQecFDEqU=
Subject key identifier:   71:4A:4D:AF:CE:7A:82:AC:AD:F6:BE:82:15:D3:A8:8A:51:D4:B1:DD
Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
Certificate issuer:       /CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Certificate serial:       0194BBCE6455AED792A3B7872A42541A7DA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
Manifest number:          1363
Signing time:             Fri 31 Jan 2025 10:00:52 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:52 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:52 +0000
Files and hashes:         1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: OjIj8/5hPDLGVelXzL5/DHbnh/SuDPRdGkyFs2P981c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:64:55:ae:d7:92:a3:b7:87:2a:42:54:1a:7d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212
        Validity
            Not Before: Jan 31 10:00:52 2025 GMT
            Not After : Feb  1 10:00:52 2025 GMT
        Subject: CN=714a4dafce7a82acadf6be8215d3a88a51d4b1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:78:22:9a:1b:12:a8:9f:73:29:45:0d:09:
                    87:4f:cc:d4:30:c2:ed:5c:05:a9:a8:8c:30:e4:e7:
                    a1:dd:3c:1b:e3:8c:a5:28:ca:9a:73:19:58:51:52:
                    9e:69:5d:c9:45:4e:9b:e7:5f:c1:be:d9:d8:ef:93:
                    7e:e8:ec:fd:b5:55:54:f2:ec:46:c3:21:e7:c9:14:
                    b8:35:26:20:4c:86:ed:54:b7:a4:88:94:98:13:04:
                    d6:c2:3d:e5:e6:7d:af:53:06:94:45:1d:9f:0e:d5:
                    da:bd:fa:9e:3e:b6:96:59:f4:52:c1:9e:5e:34:cb:
                    c1:d1:94:36:ae:05:db:e1:c7:71:c6:10:4d:38:69:
                    65:36:98:ea:c5:2f:06:6d:ac:e5:38:14:14:2f:ca:
                    41:d3:f1:e3:25:9b:59:ac:28:ad:1e:4e:2b:d5:4b:
                    b1:02:a9:d8:d3:ee:8e:1e:06:49:8c:de:c8:a7:ec:
                    13:d7:46:d2:94:25:f2:53:cc:02:05:ec:ab:f0:1c:
                    50:43:71:c7:8e:d3:29:54:fa:36:49:1c:2f:23:72:
                    82:65:09:9a:6e:18:2e:d9:fd:f1:36:4e:9c:10:a8:
                    a6:4a:df:f3:ed:9e:6f:1f:e2:33:ff:c6:88:29:4a:
                    3e:f4:0c:e9:21:41:2e:88:57:b9:19:7d:ce:1e:82:
                    19:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4A:4D:AF:CE:7A:82:AC:AD:F6:BE:82:15:D3:A8:8A:51:D4:B1:DD
            X509v3 Authority Key Identifier:
                keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:af:f9:a2:60:4e:68:90:f3:e2:70:09:32:36:ac:fe:da:13:
         b7:2a:6a:88:93:0c:05:1b:3f:b6:b1:ac:48:74:a9:1d:4e:70:
         ca:35:a1:dd:76:ff:ff:25:41:af:35:44:66:9a:d2:f1:29:e1:
         6a:1b:43:70:a1:96:dd:44:f0:50:15:9a:d4:dd:91:a9:a0:b4:
         63:8a:9d:bb:fd:dd:c1:ed:d6:7f:5f:7d:41:59:06:8c:01:1c:
         ce:4b:f0:13:d5:8d:de:c7:8a:d9:69:87:8e:37:f0:b4:42:99:
         d8:30:35:d3:bd:dd:07:0b:df:aa:07:a3:72:48:ac:06:42:d0:
         b1:51:8b:23:cd:e1:6d:79:f2:cd:cd:a2:ca:08:54:af:af:ef:
         c3:8f:1b:62:cf:78:7d:11:a4:e1:a8:25:84:ff:6b:82:77:5f:
         64:f5:c3:06:0a:2c:ce:e3:9b:eb:b6:7c:11:6d:2d:7d:d5:bf:
         2d:2f:34:10:6e:aa:70:5a:24:52:0c:db:ec:1d:0c:6a:fe:ec:
         93:4b:7f:c3:65:cb:fb:34:49:e8:f9:f0:fb:08:fa:9b:29:8d:
         af:98:2d:54:d1:7f:c0:ba:01:71:51:16:4b:91:01:be:f1:c1:
         e8:66:33:fd:70:c5:25:0b:76:57:84:24:75:00:d5:02:09:0e:
         8a:8d:85:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:12:27 2025 by rpki-client