Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
File:                     6W3gIbqO3QcU7TEgxJhy6jzOioY.mft (raw, json)
Hash identifier:          9gsAQDX9bBBqw9FiTm+BWchfP4YMy0qsjt1EjOVSLg8=
Subject key identifier:   D1:A0:EF:2E:39:89:D4:51:8B:76:2B:5A:00:D8:9E:BF:22:ED:41:7D
Authority key identifier: E9:6D:E0:21:BA:8E:DD:07:14:ED:31:20:C4:98:72:EA:3C:CE:8A:86
Certificate issuer:       /CN=e96de021ba8edd0714ed3120c49872ea3cce8a86
Certificate serial:       0194BC3C45D9CAC0509A9D1168BFAB623151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft
Manifest number:          1425
Signing time:             Fri 31 Jan 2025 12:00:54 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:54 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:54 +0000
Files and hashes:         1: 6W3gIbqO3QcU7TEgxJhy6jzOioY.crl (hash: HiX2erQRmIfx0LWcrjXpldocKJs7qeAWn0X+ghCRymc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:45:d9:ca:c0:50:9a:9d:11:68:bf:ab:62:31:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96de021ba8edd0714ed3120c49872ea3cce8a86
        Validity
            Not Before: Jan 31 12:00:54 2025 GMT
            Not After : Feb  1 12:00:54 2025 GMT
        Subject: CN=d1a0ef2e3989d4518b762b5a00d89ebf22ed417d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:64:59:09:a7:d8:56:29:8c:a1:69:04:f2:
                    5c:1d:29:92:30:78:51:fe:57:0a:0e:10:be:c4:f4:
                    dd:17:9b:46:09:8f:0b:da:5d:4e:56:74:a7:b4:95:
                    e3:53:b6:9a:19:89:ec:7b:ee:94:73:61:64:d3:41:
                    a8:52:65:fc:9d:88:42:31:c8:6e:d6:dd:83:46:98:
                    fe:02:c8:43:64:b1:c6:ba:4e:43:54:15:c7:31:36:
                    b3:ac:d3:74:a6:2b:9f:56:e6:6f:e9:bb:0e:63:3f:
                    c4:66:20:39:3d:ad:7c:53:53:92:d9:e6:4f:38:e1:
                    ad:7a:e9:4a:98:cb:41:80:ae:3a:72:c9:e1:e2:2b:
                    97:ee:63:cb:b8:ae:a7:6d:0a:b5:cd:1b:53:93:f6:
                    1a:64:f1:e1:59:35:e5:7f:c0:56:cf:29:a9:51:f6:
                    30:3f:50:b9:80:89:0b:83:34:43:8f:c1:e0:29:a4:
                    d8:83:a3:6a:6e:99:40:17:4a:23:5e:d0:78:8a:0c:
                    a0:55:53:13:4d:7a:c2:43:ab:d7:5e:c2:bf:ca:ee:
                    7e:ce:0f:cc:a2:86:7b:08:79:31:9c:89:62:fe:5a:
                    00:ad:0d:4e:59:63:ce:38:49:90:e5:50:02:40:e9:
                    7e:43:74:ad:d5:17:7a:9c:11:f3:c6:df:7a:a7:a2:
                    21:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A0:EF:2E:39:89:D4:51:8B:76:2B:5A:00:D8:9E:BF:22:ED:41:7D
            X509v3 Authority Key Identifier:
                keyid:E9:6D:E0:21:BA:8E:DD:07:14:ED:31:20:C4:98:72:EA:3C:CE:8A:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W3gIbqO3QcU7TEgxJhy6jzOioY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/21417d-238b-45e2-a121-3beea39da8ca/1/6W3gIbqO3QcU7TEgxJhy6jzOioY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b2:1b:be:3a:6c:16:3c:93:05:9f:6c:7c:4b:07:d2:d7:0e:
         19:76:4a:7d:80:1c:fe:48:24:d0:77:65:33:49:81:2c:a5:94:
         00:4f:89:76:cf:2e:53:48:3e:f6:c3:b4:a8:74:d7:97:c3:0e:
         89:60:b5:76:8a:9c:bb:c2:d5:5e:b0:c8:ec:4d:b2:fe:b1:a1:
         2e:07:21:dd:6b:33:25:d6:c6:91:b2:20:12:51:84:05:c7:2a:
         b7:f8:cf:d8:5f:ee:d6:e6:e1:eb:8d:f3:57:77:89:26:63:92:
         d9:b1:fa:74:98:e3:05:16:55:42:58:33:79:ad:61:d7:cd:a5:
         55:bc:4b:04:15:7d:85:0d:28:1f:3a:24:0d:96:6e:e2:60:29:
         c1:04:ac:06:a4:28:61:a1:9b:ba:b5:c8:35:84:e2:51:9b:b3:
         cf:0d:1f:8b:a6:7a:9b:1e:dc:e3:31:bb:8a:87:1d:9f:5a:27:
         2a:16:6e:b5:6f:98:58:4d:69:78:00:51:cc:1e:38:ab:b4:49:
         25:b5:e9:9a:c6:a1:51:e8:6d:36:07:3c:51:30:29:97:8f:a5:
         7f:13:68:57:90:66:be:d1:3d:a4:62:fa:fd:75:23:62:5f:9c:
         0a:57:77:fe:1b:9c:05:b5:f7:dd:88:67:32:ce:6f:67:4d:70:
         27:92:93:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:29 2025 by rpki-client