Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
File:                     QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json)
Hash identifier:          bI5odjSPYNdcmzSigiTJS4IQrfeL6Yumv0L/Qgtdxks=
Subject key identifier:   10:00:43:AB:5B:02:D4:27:41:6A:8C:51:90:12:8F:5B:96:CE:25:DC
Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
Certificate issuer:       /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Certificate serial:       0194BBCEBE8CCBF50325BB03E3ECB907F029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:01:16 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:16 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:16 +0000
Files and hashes:         1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: rzUwhMmgYL/6v6KJ6uBzGucjMho6ATLgq/l8ytSbqUk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:be:8c:cb:f5:03:25:bb:03:e3:ec:b9:07:f0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
        Validity
            Not Before: Jan 31 10:01:16 2025 GMT
            Not After : Feb  1 10:01:16 2025 GMT
        Subject: CN=100043ab5b02d427416a8c5190128f5b96ce25dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:b1:f7:e2:73:cb:75:8c:05:3f:66:81:11:
                    9a:4f:13:6e:4f:10:f2:f3:58:de:69:2d:c1:d8:df:
                    ee:4d:8f:f2:8c:69:c9:0e:b7:96:15:bd:83:dd:02:
                    5c:a9:d5:6b:46:e9:77:6b:45:39:ea:5a:5e:20:2c:
                    d3:fb:50:d6:33:30:09:3a:30:c5:ea:31:1b:ef:c3:
                    8f:d1:68:de:18:2b:51:ca:28:04:50:38:22:0d:04:
                    58:9e:87:41:20:64:cc:3e:ce:82:7b:f1:d1:eb:fb:
                    09:4f:ed:9a:f3:ae:a4:d9:53:e1:c2:eb:f0:82:84:
                    8d:5b:d7:2e:fc:29:be:e4:11:f7:87:4b:bf:06:ab:
                    58:0d:29:f5:de:0c:84:5e:d1:3f:43:46:4a:54:ab:
                    a6:2d:da:28:3e:08:0e:47:4e:2a:41:78:9c:c4:60:
                    52:36:e0:f0:a9:2f:cf:2f:fc:58:68:2d:75:65:d1:
                    bb:a9:f9:e3:f3:2c:32:52:69:77:0c:c6:d7:53:b1:
                    49:78:ee:9c:b8:2d:57:a6:b8:01:fe:ea:4e:8f:15:
                    1e:9a:31:4d:e5:6b:3d:54:9b:0d:f6:82:65:85:9b:
                    8c:14:2d:f6:86:a3:31:a0:45:f5:d6:64:04:95:31:
                    d5:44:d3:bb:7c:6f:12:70:81:4b:af:27:2a:ae:47:
                    8e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:00:43:AB:5B:02:D4:27:41:6A:8C:51:90:12:8F:5B:96:CE:25:DC
            X509v3 Authority Key Identifier:
                keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ac:01:d7:ca:1f:c5:3c:6a:84:be:c8:df:19:b8:6c:2e:8e:
         1a:95:01:8c:d5:8c:3e:84:3d:d5:66:ce:fa:a4:80:7e:26:4a:
         b4:ff:cf:3f:3e:15:24:c6:46:5e:a5:9f:8a:6b:e6:03:12:52:
         fb:81:a6:2e:75:5e:9a:30:fc:9c:78:44:3c:b6:f6:d5:69:2b:
         a0:47:33:a3:5e:ac:3e:1b:f8:8a:6c:d9:70:a1:1e:97:77:57:
         59:b7:f7:d2:f2:3f:6d:78:88:e9:06:03:39:7a:45:19:c3:10:
         6c:e7:3f:24:46:bc:41:9c:c3:b9:2a:f8:07:58:fa:ed:11:20:
         fd:a1:22:51:04:0c:e1:82:41:88:5f:3c:80:4f:c8:aa:c2:a0:
         d2:e8:79:c9:a5:67:a7:72:91:2e:a7:1f:00:dd:ef:80:7c:85:
         bc:02:c2:c4:e5:53:2a:0e:3d:c0:2c:e0:c9:85:de:e7:55:c0:
         f4:8a:56:11:65:68:62:c2:09:86:b9:3e:69:60:09:04:e1:f0:
         0d:33:af:ab:f9:92:b2:a9:b8:c0:e8:14:89:b1:d9:8e:a6:80:
         7f:83:72:85:f6:0a:b4:04:a0:59:8a:67:20:6f:af:0e:83:73:
         f8:19:2e:d3:ef:34:7b:da:07:39:e9:a0:f8:2e:5a:a0:9d:22:
         13:77:91:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:31 2025 by rpki-client