Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File:                     6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier:          ZFiu3NuflLiD664O4C7aKTXpO4iVepns49QrFxmWtnw=
Subject key identifier:   EE:7C:8E:32:07:7D:39:72:13:60:28:96:2E:8F:F8:98:B1:EF:CA:40
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer:       /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial:       0194BCA9A3942BD194E8CD820F4205413FB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number:          05A4
Signing time:             Fri 31 Jan 2025 14:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:21 +0000
Files and hashes:         1: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: 2g5K4eOQcB5y/X9PINacXLzv3v+ADLHLU9bueh4v3Mc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:a3:94:2b:d1:94:e8:cd:82:0f:42:05:41:3f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
        Validity
            Not Before: Jan 31 14:00:21 2025 GMT
            Not After : Feb  1 14:00:21 2025 GMT
        Subject: CN=ee7c8e32077d3972136028962e8ff898b1efca40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3f:3e:d1:88:2c:8f:8e:eb:ca:df:90:41:3e:
                    83:62:68:2f:c9:49:be:55:8d:ac:12:3d:83:a1:00:
                    e3:c6:e4:3a:b7:8c:92:10:18:ae:06:72:8c:0e:e0:
                    aa:93:c8:f2:f6:fa:67:92:0e:1e:b5:8c:a1:74:75:
                    3a:2a:71:3d:d3:d8:d5:0b:43:2a:97:6c:c0:a7:d2:
                    b4:5e:55:8f:3b:90:27:0b:6b:28:73:ca:3f:f7:c4:
                    bc:13:5d:1c:63:c4:9b:60:62:50:f5:0b:29:01:9f:
                    cf:2c:65:46:dc:a0:3a:71:96:43:a4:34:1b:9e:4a:
                    c2:d3:11:f5:33:aa:99:8d:d2:9d:7a:3f:0e:12:56:
                    d8:34:6c:61:32:45:79:0d:d1:a8:f2:3c:7f:bd:ff:
                    2a:ec:c2:15:69:cc:f4:8f:6e:d7:98:e1:18:1a:84:
                    e0:1c:8a:5c:0f:57:97:68:81:ad:14:de:0c:2e:44:
                    72:60:ae:02:a7:b0:57:25:d8:f6:f1:5c:1b:5d:83:
                    37:55:92:b9:a7:bc:cc:ab:79:d1:09:70:d3:85:b5:
                    b4:df:30:1e:7a:aa:4f:83:fc:5d:8c:77:03:b7:0c:
                    4d:22:cb:cb:95:a4:5d:12:95:99:12:39:b8:92:ba:
                    19:2a:b8:8e:a6:da:ec:da:cb:6a:25:31:67:c5:e1:
                    07:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7C:8E:32:07:7D:39:72:13:60:28:96:2E:8F:F8:98:B1:EF:CA:40
            X509v3 Authority Key Identifier:
                keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:22:c7:8c:2a:85:5e:1b:c3:f6:69:84:10:7b:65:16:bb:4f:
         c2:fb:1b:ef:d1:0b:17:00:66:2d:b0:40:39:2f:b6:6f:1a:f6:
         cb:26:25:57:37:a2:ed:bc:a3:52:90:c9:c8:e4:c7:6c:bd:dc:
         04:4f:70:8d:e1:11:36:5d:26:9c:74:72:73:82:b0:6b:aa:d1:
         7e:e5:42:74:47:71:dc:b3:3d:17:29:74:69:c2:65:f1:fe:a1:
         d5:c1:84:ad:a6:b8:e0:33:c0:b0:29:78:60:71:8c:42:c5:f1:
         23:5f:e1:bf:a9:c7:b7:a0:1e:62:33:5f:02:d6:69:26:03:62:
         72:ff:64:fd:a4:78:2d:90:88:f1:0c:4a:47:75:8e:19:55:ea:
         a0:bc:2f:02:19:0f:67:90:86:88:f5:48:f0:7a:e6:5d:11:50:
         9a:cd:ac:82:0a:20:c1:9f:63:30:6d:18:e2:ea:f9:1f:3d:0b:
         9f:88:b4:cd:ec:89:e2:e2:52:c4:06:56:c4:91:b7:e8:70:0a:
         49:9d:45:f9:60:1f:8e:93:b9:19:59:a0:6c:bb:da:a6:83:c0:
         c3:26:6f:14:fa:16:17:d9:40:e0:d5:45:80:b9:39:2d:f9:cb:
         1d:b5:96:34:f4:6f:e8:5f:a6:c2:9f:bd:69:ec:9b:e8:d5:50:
         3b:b1:b7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:42 2025 by rpki-client