Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
File:                     0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft (raw, json)
Hash identifier:          shptBAfg0kbvpULeADQewIVnNXPXxsdGyL2DLX53Smc=
Subject key identifier:   B8:C1:37:5B:E1:5F:64:7B:46:07:57:F0:84:7F:D6:7A:5C:3F:26:DC
Authority key identifier: D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D
Certificate issuer:       /CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
Certificate serial:       0194BC72CD3956C3812329F7C389CA680328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
Manifest number:          1366
Signing time:             Fri 31 Jan 2025 13:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:27 +0000
Files and hashes:         1: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl (hash: f1hUy1zSmzQUyJYaCZiMuwkiTwX7FNaMK1+GvJoLGl8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:cd:39:56:c3:81:23:29:f7:c3:89:ca:68:03:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
        Validity
            Not Before: Jan 31 13:00:27 2025 GMT
            Not After : Feb  1 13:00:27 2025 GMT
        Subject: CN=b8c1375be15f647b460757f0847fd67a5c3f26dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:92:60:83:1b:ef:3a:7a:5b:d9:63:3d:56:71:
                    0e:31:24:73:8f:e0:91:c7:5b:4d:e0:54:7c:62:c5:
                    18:0f:11:62:2d:60:eb:73:e2:03:eb:66:51:00:17:
                    51:b8:99:30:57:f4:56:f9:e8:da:0c:63:51:c5:f3:
                    7d:d2:dd:5d:a3:7a:63:56:85:45:3d:b5:00:7b:a9:
                    9a:d6:76:68:03:f7:ba:96:87:cb:3f:61:56:8f:60:
                    da:c8:f3:1a:46:84:a8:97:ba:ad:e4:83:1f:1b:e7:
                    27:c4:bc:0c:be:c0:12:63:56:ac:65:bb:7b:16:6c:
                    d7:cd:d2:42:15:17:8b:b5:c5:c7:98:af:a5:91:69:
                    49:01:ce:bf:d7:da:82:75:4e:d1:b3:31:f2:62:75:
                    4f:73:fd:7c:0c:a7:7c:ac:c3:e8:a3:f2:cb:3f:22:
                    e1:bb:c0:a4:bd:ee:f6:ec:3a:a5:ce:46:c0:f3:50:
                    df:71:0f:f0:15:4f:8a:3b:ab:1f:c4:fa:43:ad:91:
                    ee:4a:2e:84:4b:bd:58:e9:00:dd:c2:05:ea:54:a5:
                    b9:11:b7:13:a4:96:ab:29:f0:33:bd:4d:f6:b3:df:
                    6c:fd:c8:a6:5b:26:a0:bd:3b:0c:93:da:37:45:a1:
                    ed:d1:02:d0:14:6c:8c:d7:16:fd:a5:4c:5a:32:b0:
                    1e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C1:37:5B:E1:5F:64:7B:46:07:57:F0:84:7F:D6:7A:5C:3F:26:DC
            X509v3 Authority Key Identifier:
                keyid:D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:21:d9:a0:93:24:11:7c:a9:38:06:50:b2:04:e2:b3:41:01:
         bc:44:84:49:76:53:07:b3:3f:78:84:5c:b7:5f:b8:d9:2f:cd:
         75:d8:38:0e:c6:a0:03:e4:9c:39:db:03:f0:bb:c7:69:ba:71:
         46:f7:92:c4:11:36:8e:9d:7d:a4:fc:7c:93:4e:7d:13:9d:72:
         4c:de:e5:97:73:f4:59:db:19:47:83:f0:12:7a:9e:c1:04:f1:
         68:ff:10:23:62:de:6f:ed:d7:00:73:ca:97:62:c6:35:3a:d1:
         3d:18:f2:33:b4:c3:fe:a9:d5:cf:cc:12:74:7b:5a:70:67:9f:
         27:53:9a:7a:3e:e7:f3:36:6a:7f:eb:ea:98:d1:8e:2c:c2:e8:
         10:14:c0:b7:0a:87:db:d5:2b:1a:3c:63:03:19:11:87:d3:c8:
         b5:56:f0:ac:dd:3f:39:84:a1:c9:49:0c:32:ac:42:58:05:8c:
         3f:9c:e5:34:e5:d3:f8:0b:ca:30:74:03:50:e5:5b:d3:65:ea:
         71:f1:1a:84:34:99:88:11:3d:ee:e2:a9:d5:29:0d:fa:f0:e8:
         f1:25:49:b9:f7:07:a9:46:bd:f2:a0:14:6b:e2:58:91:00:4b:
         77:3c:9a:57:44:07:60:d1:15:e6:2b:9c:e9:b6:1c:a9:7f:99:
         53:87:6e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:39:49 2025 by rpki-client