Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
File:                     1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft (raw, json)
Hash identifier:          3X9GWlu/rIUeeTbjRhFu8MpaO25lRzp+J/DKRohCwKw=
Subject key identifier:   53:67:4C:7E:4A:9B:EC:BF:61:4F:28:1E:7E:9F:E7:E7:B6:81:FE:E8
Authority key identifier: D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
Certificate issuer:       /CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Certificate serial:       0194BC3C23EEC5103172484A15AB3E7E1598
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
Manifest number:          0142
Signing time:             Fri 31 Jan 2025 12:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:45 +0000
Files and hashes:         1: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl (hash: 4nyPwZdj95Qv5iLoxqaiepfTxTw5KVPNeENL/jlcfvI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:23:ee:c5:10:31:72:48:4a:15:ab:3e:7e:15:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
        Validity
            Not Before: Jan 31 12:00:45 2025 GMT
            Not After : Feb  1 12:00:45 2025 GMT
        Subject: CN=53674c7e4a9becbf614f281e7e9fe7e7b681fee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:54:a7:3d:f6:7b:7f:41:ec:66:9c:3c:f7:aa:
                    3b:e6:9e:db:26:17:02:fa:05:30:7f:f8:01:f7:ca:
                    49:d7:81:0c:e3:cf:8c:6f:7f:73:0b:02:a2:dd:16:
                    62:ab:ca:67:ba:c6:d2:4c:15:60:7c:52:aa:65:4c:
                    5b:64:25:95:b2:c6:be:d2:88:6f:e9:5f:c0:0f:40:
                    2d:0a:e1:97:90:1f:ed:6b:c9:ff:ce:d3:14:04:d6:
                    a1:48:4a:b9:f9:af:4e:60:4e:a1:3e:1e:fd:43:60:
                    9e:2b:f2:08:0b:df:46:ee:57:06:19:df:2a:83:fe:
                    4e:b4:d2:eb:d5:86:10:2a:c4:29:45:f3:44:97:c2:
                    de:08:77:51:32:6c:13:c2:29:0f:64:bd:e4:7d:0d:
                    72:62:ee:40:a0:f5:55:b8:84:8c:a0:87:73:50:5b:
                    3b:50:6b:ed:27:c8:e8:ea:76:c7:62:1c:3e:c4:70:
                    0d:8e:4f:60:3f:d4:ee:73:94:fe:7d:5d:c8:71:3c:
                    fd:5d:14:76:21:cc:29:fe:d0:78:07:43:b7:d1:77:
                    71:ce:94:29:30:fc:d0:68:3e:99:19:2f:8d:55:41:
                    a0:a1:ad:7d:e3:37:2a:01:9f:7d:86:61:ca:9c:d0:
                    73:ce:2e:3d:e0:d7:d1:bd:92:e2:1d:47:7d:54:e7:
                    18:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:67:4C:7E:4A:9B:EC:BF:61:4F:28:1E:7E:9F:E7:E7:B6:81:FE:E8
            X509v3 Authority Key Identifier:
                keyid:D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:39:45:85:eb:61:9a:46:a3:45:30:fd:4c:08:3d:ef:74:51:
         d2:53:a9:cb:21:a3:f8:41:93:54:93:d3:ff:64:5d:b3:fc:9d:
         6c:ff:b3:9d:61:7e:7b:27:5a:67:c2:d4:fc:bf:ce:cc:18:36:
         50:00:be:48:b7:ef:33:58:af:42:38:05:a0:ad:0d:b4:e9:53:
         93:b7:4b:a0:81:29:13:c1:7d:9a:7c:d9:ae:49:93:a2:37:72:
         79:29:3b:11:dd:83:72:25:b3:df:85:5e:64:95:77:fb:a5:f2:
         3d:5d:d3:ec:68:d0:20:0a:da:18:db:0e:b3:a5:ce:50:0c:ac:
         7d:2a:5b:3a:16:99:c3:11:37:cb:d8:c3:6b:47:b9:32:e5:ca:
         a7:9b:87:c7:91:b4:71:9b:fa:17:44:dd:2e:36:75:9c:60:78:
         62:b6:fd:9f:f4:94:4a:73:7b:4f:fc:20:48:ac:62:cf:39:01:
         e3:9d:ae:6f:47:6b:e2:16:14:90:e9:91:1d:99:54:1d:46:e3:
         c0:85:ba:d7:c5:0f:48:88:67:a1:52:e3:35:ef:8d:59:60:f5:
         ba:ee:5f:14:8c:56:30:ab:c6:71:97:59:17:6c:9c:47:43:ae:
         80:ec:e8:9e:20:94:61:19:e9:f5:c3:d3:b1:21:3a:d0:31:ba:
         2f:0f:f8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:54 2025 by rpki-client