Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
File:                     edFXhuZE1JfLeisyU71D2S5Jxas.mft (raw, json)
Hash identifier:          huLEtYX3DqIldI4c/PWqcWKBNec5RYA/PEMJp9kj4js=
Subject key identifier:   C8:85:85:04:4D:69:E3:9A:73:77:D2:B8:61:0B:B1:D4:36:52:55:AF
Authority key identifier: 79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
Certificate issuer:       /CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Certificate serial:       0194BBCE38E8ABF9A255C02BB53A85D08E0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 10:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:41 +0000
Files and hashes:         1: edFXhuZE1JfLeisyU71D2S5Jxas.crl (hash: 62o/zff7RHYjJhWDtRtUYKBRszfBHdf0ZMr8d71HHno=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:38:e8:ab:f9:a2:55:c0:2b:b5:3a:85:d0:8e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
        Validity
            Not Before: Jan 31 10:00:41 2025 GMT
            Not After : Feb  1 10:00:41 2025 GMT
        Subject: CN=c88585044d69e39a7377d2b8610bb1d4365255af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:a8:fd:0e:b5:1e:1d:62:b6:56:d3:49:38:
                    bb:9a:91:61:40:2b:ba:89:2a:56:4f:b3:5c:21:fe:
                    f8:43:12:c1:27:27:b7:1f:0c:45:4f:04:eb:1c:49:
                    7e:83:92:f2:7e:65:fd:5c:9c:15:f6:f8:8d:77:13:
                    f1:6f:94:ec:34:36:3d:d8:a1:3a:5f:f5:3a:41:1b:
                    d2:35:89:6f:15:19:e6:39:e7:21:29:6d:e4:9e:20:
                    07:10:e3:f9:a9:40:03:02:0a:65:48:b1:b8:0f:6e:
                    dd:8f:59:da:8a:dc:e6:d2:13:a4:4e:0f:ff:b4:35:
                    92:fd:10:e1:98:d6:08:a8:b2:71:f9:2b:a8:07:78:
                    c9:45:dd:7f:1b:d8:a4:5a:29:de:48:ed:b6:76:96:
                    2d:9c:9b:1a:3d:db:7f:30:26:c9:c6:39:1d:18:03:
                    45:69:76:2d:ee:9d:ae:7e:d2:0b:a8:b2:c7:2f:93:
                    da:11:34:e6:94:fe:30:c9:37:39:17:b3:e7:57:f8:
                    a8:d5:7a:6d:25:3a:f1:6c:36:06:78:0e:b6:9d:d6:
                    56:c5:a0:8c:14:62:88:fa:49:83:01:db:ba:43:34:
                    54:4b:09:02:e9:57:6b:82:17:69:62:f8:34:c6:52:
                    98:17:63:8e:c1:f4:56:f2:82:05:b8:81:fa:55:77:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:85:85:04:4D:69:E3:9A:73:77:D2:B8:61:0B:B1:D4:36:52:55:AF
            X509v3 Authority Key Identifier:
                keyid:79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:32:95:61:57:60:6f:5f:96:d6:22:e5:b1:36:3e:7f:2b:84:
         cf:30:c5:98:e9:72:0d:66:ad:9a:fa:fa:48:2c:1e:cc:f7:b8:
         ed:f8:b1:c9:ef:10:0f:35:4f:93:43:1f:da:01:99:a6:68:77:
         98:7f:fe:4f:1e:78:6e:fe:56:cb:98:6f:34:cc:98:c0:78:25:
         89:d3:8b:9c:e4:55:eb:f1:d6:d6:ed:b5:32:1a:7a:b5:98:b1:
         c0:f1:b6:ec:07:45:6d:7d:e2:38:d5:21:0d:cd:5a:78:19:55:
         37:07:fd:84:78:e8:a9:0a:37:dd:c5:91:ac:45:58:cf:79:0a:
         0f:ff:38:dd:17:bb:d1:9b:b7:d8:36:04:94:d7:bc:ec:22:17:
         76:7a:9f:3f:c0:a6:1d:c2:19:57:af:e3:9c:21:b7:a0:2d:c0:
         0e:af:c2:7f:4c:47:6a:00:7e:ef:07:d1:19:58:eb:25:10:79:
         1e:d9:6e:6d:27:0a:4c:01:ae:55:eb:55:4c:3d:20:c0:a1:45:
         c0:f2:71:59:c5:4f:54:4e:60:5e:48:bc:58:88:b0:fb:55:0f:
         a6:9f:8a:cd:51:c0:35:55:2a:9f:a8:ac:0f:0c:49:e6:8e:3b:
         4a:f5:f4:e5:80:3e:f3:22:e2:b2:46:5a:ad:db:d2:b1:94:c6:
         ac:b0:45:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:59:03 2025 by rpki-client