Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
File:                     IIP4tbYgnefJQAjzM3vjQ2866-Y.mft (raw, json)
Hash identifier:          QxxwcS1VYm2OkFag+J5taWCPbXtUrZxVx5GkCXm5SJE=
Subject key identifier:   63:AD:DB:C8:49:D5:1C:57:BF:D2:D4:BF:4A:ED:22:11:E9:66:F9:C6
Authority key identifier: 20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6
Certificate issuer:       /CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
Certificate serial:       0194BCE0862107CBBBA2603C58AA3E78E3D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
Manifest number:          047F
Signing time:             Fri 31 Jan 2025 15:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:18 +0000
Files and hashes:         1: IIP4tbYgnefJQAjzM3vjQ2866-Y.crl (hash: 8FtxnpFDUlBYIk+6wNjZKVVfT7hWWhV4vXQui5+sWhk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:86:21:07:cb:bb:a2:60:3c:58:aa:3e:78:e3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
        Validity
            Not Before: Jan 31 15:00:18 2025 GMT
            Not After : Feb  1 15:00:18 2025 GMT
        Subject: CN=63addbc849d51c57bfd2d4bf4aed2211e966f9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:14:59:f4:91:d4:48:94:f4:74:af:03:ff:
                    e1:9e:8b:5d:56:16:1c:79:a5:c8:1f:71:a6:98:3f:
                    7d:e2:a1:59:8b:70:a1:f6:d7:31:5b:7b:2c:e9:c1:
                    a4:9b:34:a9:e6:17:9c:77:d0:54:e3:20:a1:1b:86:
                    5a:8a:28:21:d5:6b:58:5f:20:94:ed:4e:f5:13:00:
                    bd:ac:b2:20:ef:df:86:6a:4a:e4:2c:fa:fe:13:09:
                    0a:c9:cf:f0:00:64:df:2c:11:b2:fa:ec:3c:f3:7f:
                    65:ac:5a:cf:90:b4:ae:44:c5:f5:a5:f8:1a:86:d3:
                    99:d4:e2:4d:03:e6:bf:26:5f:55:39:e2:90:c1:12:
                    56:89:d6:4b:29:d9:85:4e:9c:24:1d:9e:e9:5f:12:
                    ee:3e:61:2c:e6:56:32:fb:9e:27:d1:30:f0:77:42:
                    49:7b:51:be:12:76:31:ad:ef:c0:39:6b:e1:af:24:
                    ce:f6:ab:4d:42:1b:7f:ae:80:83:07:94:78:56:5c:
                    eb:c6:dc:f1:6d:8a:14:b2:e4:e8:e8:64:03:b8:5c:
                    cf:d1:86:f6:40:30:a7:0e:3b:de:f4:98:bf:4d:a9:
                    e2:7f:cd:11:5f:25:08:72:62:66:62:47:16:ec:96:
                    cb:49:3c:de:47:4f:40:8d:07:d7:7a:1c:62:ee:d1:
                    63:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AD:DB:C8:49:D5:1C:57:BF:D2:D4:BF:4A:ED:22:11:E9:66:F9:C6
            X509v3 Authority Key Identifier:
                keyid:20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:cb:be:15:81:67:4c:84:66:cb:47:24:e2:3e:2e:d5:4b:31:
         eb:26:42:14:ba:92:63:97:82:87:3a:15:18:d0:48:48:d4:9d:
         a9:0c:1e:56:2c:be:93:fd:0a:2f:51:1d:0d:48:75:b2:e3:29:
         8e:66:39:76:ac:a1:54:0a:e4:7a:b8:93:9a:d4:02:fd:8a:d3:
         43:9c:5b:46:aa:a4:15:45:47:3c:28:69:13:a6:46:57:28:5b:
         b4:ff:fe:9d:c8:ed:da:6c:21:1f:08:8d:eb:76:37:65:22:3f:
         df:9c:bb:57:ee:6d:69:68:a7:5f:2e:e1:27:9f:85:44:25:63:
         77:c9:69:f1:17:1e:07:b3:fd:9d:27:97:26:69:77:86:da:5a:
         9e:8f:ee:24:2c:48:0b:50:6f:9d:1a:23:00:71:d7:fa:bc:4b:
         c8:8c:a6:f5:40:e8:b6:2e:ad:91:c7:59:e5:87:f6:98:7a:fb:
         45:cb:83:4d:9e:c2:c9:f1:3c:aa:fe:07:39:f6:e2:a5:7f:ee:
         4d:3e:de:77:72:75:a5:2b:e4:c1:d4:3b:43:e8:82:43:2f:87:
         4a:a1:01:57:62:db:04:8b:37:33:80:74:c6:ed:55:57:06:2d:
         d3:a5:6c:7e:2c:65:c1:eb:af:c1:e4:be:8b:57:6f:1f:ef:6b:
         e0:b4:4c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:32 2025 by rpki-client