Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
File:                     1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft (raw, json)
Hash identifier:          PEW7wijUbt1KIbiSnaCSIcwtYnHkLI+Gqbh4VJUH95c=
Subject key identifier:   94:63:8B:6F:2A:37:09:41:F7:F7:21:81:83:0A:CA:A2:1E:DB:7A:53
Authority key identifier: D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8
Certificate issuer:       /CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
Certificate serial:       0194BD17A4EA78D6A37C56FF03874027C101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft
Manifest number:          0E5B
Signing time:             Fri 31 Jan 2025 16:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:30 +0000
Files and hashes:         1: 1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl (hash: o4p6YQJ1UHGJdOiLc4fTvbu9yqGy9AxvaJAS8dRModE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:a4:ea:78:d6:a3:7c:56:ff:03:87:40:27:c1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d469867d1d693e79a6a5ee9014e413f039eb50d8
        Validity
            Not Before: Jan 31 16:00:30 2025 GMT
            Not After : Feb  1 16:00:30 2025 GMT
        Subject: CN=94638b6f2a370941f7f72181830acaa21edb7a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:44:17:4c:fd:f3:da:fc:a1:f5:10:c1:4a:
                    a7:f0:95:bb:2d:a1:cf:e3:fd:32:2f:66:6a:04:95:
                    5e:6a:30:f6:f2:5d:c1:84:bd:e0:c4:c6:a6:ae:e5:
                    09:34:59:17:7a:22:d1:9f:cc:85:1b:34:7e:84:7d:
                    3c:4b:ff:52:ad:0e:29:7a:5b:9c:ef:bf:89:37:ae:
                    51:6f:6e:0f:eb:4d:ec:aa:48:b6:9d:ad:e5:d2:d4:
                    d1:7b:cb:37:6a:3c:4f:04:09:e1:be:b2:21:77:5f:
                    16:a5:af:78:34:3b:82:76:73:2d:e3:cf:8b:41:30:
                    dd:e1:8e:05:4f:47:a4:47:22:f7:6d:5b:36:4d:82:
                    9e:27:9f:77:47:f3:68:8b:49:02:8c:d2:3c:6d:cd:
                    29:75:e2:10:db:6a:fc:c1:31:99:06:fa:d7:56:30:
                    20:ba:6a:df:05:72:b2:5b:3c:d4:b5:2a:00:e5:d6:
                    ed:e4:d8:27:cc:02:4d:14:66:80:b4:db:78:50:8e:
                    dd:cd:d5:ee:a1:7b:b1:04:02:a6:a5:69:cd:d5:80:
                    ee:7f:86:38:44:ca:44:c0:1a:08:e9:1f:63:03:ba:
                    0d:dc:ff:0a:5b:8c:d9:d4:4e:67:93:d7:e7:17:71:
                    1b:17:e7:e4:58:b3:56:2f:3c:96:cc:ac:48:be:ed:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:63:8B:6F:2A:37:09:41:F7:F7:21:81:83:0A:CA:A2:1E:DB:7A:53
            X509v3 Authority Key Identifier:
                keyid:D4:69:86:7D:1D:69:3E:79:A6:A5:EE:90:14:E4:13:F0:39:EB:50:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GmGfR1pPnmmpe6QFOQT8DnrUNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b485d9-eedc-4706-a9e6-41de97dc9b6c/1/1GmGfR1pPnmmpe6QFOQT8DnrUNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8b:75:62:2c:5e:91:41:85:28:5d:7c:71:8f:03:7d:66:59:
         d3:ba:89:28:cd:9e:d8:9c:f7:d2:1b:61:b9:3b:50:1c:41:e7:
         d9:e1:00:7f:3d:bb:98:3d:e9:29:e1:21:c1:4f:c3:30:57:65:
         5d:b9:d0:bf:4a:ca:a9:60:d4:49:68:f0:85:a6:08:1a:d7:13:
         04:9c:65:5a:d5:49:64:0e:58:25:b5:b7:bc:14:e1:fd:c9:72:
         64:de:67:52:ae:c8:35:4e:3f:c0:01:50:35:aa:3e:a2:b5:c6:
         26:39:60:2e:de:2c:34:70:46:2b:dc:23:2b:0a:55:e8:3f:f2:
         9c:2e:d4:11:1a:3b:b4:6a:30:fd:e6:f3:b6:a9:bf:d7:18:14:
         62:a2:39:8b:0d:1a:64:a8:e0:d6:17:64:40:1b:05:f8:6c:06:
         72:55:db:c7:68:9a:74:1b:59:e6:40:df:60:43:76:bf:2b:5d:
         4c:61:82:a3:54:7b:de:73:53:63:80:38:36:a6:ab:b6:51:eb:
         36:bc:cc:b1:57:2b:87:7b:0e:51:04:e8:8e:2a:9a:1e:7c:36:
         e8:b4:39:15:79:59:40:fb:d2:45:1b:f2:2a:18:03:0f:9c:8b:
         46:1b:dc:4e:52:95:d1:69:34:90:9f:be:a0:2b:9e:8a:e3:d3:
         51:b4:b0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:12 2025 by rpki-client