Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
File:                     0WLUzQwan_4krVFT0Zzpwx3LTH0.mft (raw, json)
Hash identifier:          LqlRjf6eFh8Kq20nPsmKojlyXYcW9lAbV/Woymeo1bw=
Subject key identifier:   E8:9B:FF:5F:5D:15:A2:30:59:7F:2A:5F:19:A0:ED:DA:54:55:E5:60
Authority key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
Certificate issuer:       /CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Certificate serial:       0194BCA96BDEF3DA47F94B13337334E93C4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
Manifest number:          1425
Signing time:             Fri 31 Jan 2025 14:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:07 +0000
Files and hashes:         1: 0WLUzQwan_4krVFT0Zzpwx3LTH0.crl (hash: 3PUDMbtkandyqhfTXQ3lIdLLQdo+EUTBYjp5nMzjzbQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:6b:de:f3:da:47:f9:4b:13:33:73:34:e9:3c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
        Validity
            Not Before: Jan 31 14:00:07 2025 GMT
            Not After : Feb  1 14:00:07 2025 GMT
        Subject: CN=e89bff5f5d15a230597f2a5f19a0edda5455e560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:cd:82:a9:f7:98:4e:e4:47:48:30:28:c6:
                    ba:f1:4b:47:cc:06:36:63:9d:04:83:10:97:e4:96:
                    48:95:56:34:e0:78:5c:79:48:c7:97:a9:77:09:5b:
                    95:74:c7:2b:65:a6:85:b8:48:7b:b9:a2:e5:8e:68:
                    f2:ce:9f:7b:3d:80:e1:28:5a:ef:6d:21:23:76:be:
                    5b:5e:56:c1:58:28:ad:25:e2:c6:41:67:bf:c4:a0:
                    5e:d8:ad:4d:63:3f:16:1d:c4:8a:40:33:7a:c7:71:
                    31:b9:ea:0c:12:e4:b6:ea:3c:90:f3:cc:12:c7:04:
                    da:31:ba:79:8e:f4:77:88:bb:cc:3c:96:69:4f:fe:
                    5c:d1:cc:b9:c6:e5:a3:2f:73:0c:c9:21:28:51:c8:
                    18:f3:02:5e:d8:ef:57:4d:4d:fc:09:67:70:87:a1:
                    9d:4d:3e:24:e4:46:f7:8d:c0:6e:00:4f:8c:07:de:
                    6b:86:dd:1e:7e:e4:5c:cb:45:31:b1:de:64:27:c2:
                    57:e3:bb:5f:70:45:d0:d4:5e:a1:a5:f7:49:75:3c:
                    7d:52:03:d7:2e:5f:3d:a0:ec:8f:2f:7d:63:21:63:
                    40:21:ad:b2:68:13:6b:5a:eb:b7:12:02:8a:1d:02:
                    d4:d4:bd:75:0c:87:8e:98:a7:9f:d5:20:03:39:8a:
                    0f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9B:FF:5F:5D:15:A2:30:59:7F:2A:5F:19:A0:ED:DA:54:55:E5:60
            X509v3 Authority Key Identifier:
                keyid:D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:26:42:f5:e3:4c:bd:38:ff:9e:71:58:49:7a:bf:c7:b0:f2:
         c6:aa:59:bc:9b:6c:4a:25:ce:65:6c:08:e5:a5:a1:54:6a:c8:
         2a:d3:f4:68:57:b1:08:28:88:06:41:da:c0:18:61:bc:f5:d8:
         20:4e:ab:d4:b6:c6:bb:a3:85:3e:bc:d6:1d:f8:49:ca:6d:6b:
         6d:7d:53:93:dc:08:53:8c:f1:d2:a9:57:7f:5f:7c:ca:09:02:
         2a:36:f6:9c:40:7f:5e:50:a2:74:4b:3f:e6:6d:cb:7e:14:df:
         72:9a:ef:eb:51:c1:be:fe:e5:5d:37:d2:aa:73:17:65:5b:80:
         19:90:40:61:74:e4:1f:49:a7:88:e1:54:36:92:50:ae:24:60:
         d0:51:5c:55:32:c9:22:ac:2e:84:e1:80:20:06:e4:bf:1d:21:
         77:c9:96:85:95:cd:85:19:73:74:f0:37:8a:52:fa:5d:d1:a9:
         37:c7:56:aa:1c:f2:e7:5b:59:18:cd:13:2b:26:b1:c8:28:1c:
         64:42:bd:0b:77:85:53:90:d4:af:57:56:98:43:86:82:fa:46:
         21:26:e6:39:a8:d8:c3:d2:ab:79:bd:a5:77:6b:d1:6e:e4:57:
         a3:11:3a:52:23:2b:61:f8:37:54:3e:8f:39:98:d6:82:a5:7a:
         97:90:95:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:29:59 2025 by rpki-client