Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File:                     0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier:          Ky7UdzmUr65KdBpUyYxEtvN3Mpduew9/9uo05UnGRvk=
Subject key identifier:   CD:F7:1B:81:97:62:8E:F7:79:BD:ED:FD:56:0A:22:52:D8:33:91:E9
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer:       /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial:       0194BC72A1E9F4CD0F3FBF859FCDD55E9FED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number:          1424
Signing time:             Fri 31 Jan 2025 13:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:16 +0000
Files and hashes:         1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: Av5Swlpc6t1dVud8S9lp/7nsLYpARMvK2Z8H7j1QYvw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:a1:e9:f4:cd:0f:3f:bf:85:9f:cd:d5:5e:9f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
        Validity
            Not Before: Jan 31 13:00:16 2025 GMT
            Not After : Feb  1 13:00:16 2025 GMT
        Subject: CN=cdf71b8197628ef779bdedfd560a2252d83391e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:86:58:83:ce:02:30:ce:82:0b:79:80:95:92:
                    7d:c0:b2:38:c3:19:c6:c2:b2:c5:8d:ab:4b:f3:9c:
                    88:b3:9e:44:77:34:e5:be:28:b5:da:dc:c3:88:84:
                    74:33:76:f4:06:93:d6:ef:ef:6e:1e:f6:84:02:ac:
                    0e:fd:46:5c:08:0d:2a:aa:5e:35:02:32:6d:84:96:
                    02:d8:92:75:8a:b5:70:07:dd:f7:c2:2b:b0:df:7b:
                    48:fa:a2:87:44:41:bd:39:18:23:e3:2a:98:03:09:
                    05:da:a1:aa:2e:a2:55:44:5d:05:24:ea:94:88:40:
                    ba:ee:36:5b:1b:4a:ce:f8:b0:98:28:d1:24:f1:ce:
                    a3:0d:43:55:fd:0c:67:4a:ee:51:29:c9:1a:86:e0:
                    71:43:e6:86:fd:94:59:ff:15:a1:5d:9c:a4:a1:41:
                    75:02:d8:c6:ad:7f:e4:c6:f4:ec:a6:c1:54:db:94:
                    e8:44:56:16:4b:02:30:44:10:5d:3e:7f:ad:62:69:
                    90:25:15:12:a4:6e:ea:fd:ae:28:a8:c3:99:2b:37:
                    a6:cd:05:e3:85:9d:5a:29:22:c1:4c:41:03:01:67:
                    89:8b:17:c3:d6:e9:f4:f0:43:dc:69:1b:0a:96:67:
                    13:ac:dd:c3:30:f6:f3:41:ee:fc:c7:8a:b1:fe:e0:
                    dc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F7:1B:81:97:62:8E:F7:79:BD:ED:FD:56:0A:22:52:D8:33:91:E9
            X509v3 Authority Key Identifier:
                keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:62:bf:57:e2:77:0c:cf:68:e5:ca:5e:69:32:75:a7:db:cb:
         65:8f:81:92:14:f0:ba:f8:76:e6:2b:c1:27:b1:79:f9:27:a7:
         ec:2d:0a:71:67:98:e5:27:32:ec:80:f3:c1:d8:af:8f:f5:f8:
         9f:29:48:30:b9:0b:d8:de:9b:36:fd:84:8b:f6:8d:7b:d2:da:
         3a:d9:fb:58:53:d0:be:09:79:3a:30:75:06:5f:33:2f:e4:38:
         18:6a:d5:b3:5f:9a:ba:ee:3d:f3:d2:eb:37:08:65:19:63:e4:
         60:ed:a2:c3:77:30:3f:49:32:7c:a1:4c:86:79:7e:3a:fb:d8:
         b7:bb:2a:d4:35:57:7c:ed:60:72:8c:d4:0a:65:52:83:a7:78:
         38:6a:a7:62:cf:bc:19:4c:0b:ba:fd:96:eb:4b:b4:dd:b7:0d:
         0a:13:48:f8:2c:19:73:ce:bb:2e:22:85:15:99:e8:7b:71:f2:
         e8:ae:fb:4b:b2:0a:49:53:c9:0f:e3:eb:eb:8b:63:70:00:9c:
         5b:01:a4:b4:9c:4f:bd:15:f9:8a:66:cf:15:3c:12:dc:80:e7:
         04:43:79:b7:ec:8f:10:a6:05:8c:b1:fe:85:d7:5c:c3:13:10:
         d9:79:71:77:de:f6:04:1d:cc:49:df:88:b7:6e:e9:b4:ea:da:
         3e:3c:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:20 2025 by rpki-client