Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/40c8d7-f570-4992-ad18-15bc9b25dfc0/1/MUzpW6I83J1gmXwjDWNZrTHBpZ0.mft
File:                     MUzpW6I83J1gmXwjDWNZrTHBpZ0.mft (raw, json)
Hash identifier:          MpfFIUaGLxtxeD60Lt9ajTAvl2hsC8r0YzxDZZwzYSw=
Subject key identifier:   EC:54:A0:13:46:32:81:46:98:26:54:88:89:E5:13:92:95:AB:28:93
Authority key identifier: 31:4C:E9:5B:A2:3C:DC:9D:60:99:7C:23:0D:63:59:AD:31:C1:A5:9D
Certificate issuer:       /CN=314ce95ba23cdc9d60997c230d6359ad31c1a59d
Certificate serial:       0194BC04EE2F94EB46C3785F2E53B337561F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MUzpW6I83J1gmXwjDWNZrTHBpZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/40c8d7-f570-4992-ad18-15bc9b25dfc0/1/MUzpW6I83J1gmXwjDWNZrTHBpZ0.mft
Manifest number:          0376
Signing time:             Fri 31 Jan 2025 11:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:27 +0000
Files and hashes:         1: MUzpW6I83J1gmXwjDWNZrTHBpZ0.crl (hash: 0FTprkahCgOmhJfdMRGsNm6vIA6o3pV6lFv8As6WxpI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:ee:2f:94:eb:46:c3:78:5f:2e:53:b3:37:56:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314ce95ba23cdc9d60997c230d6359ad31c1a59d
        Validity
            Not Before: Jan 31 11:00:27 2025 GMT
            Not After : Feb  1 11:00:27 2025 GMT
        Subject: CN=ec54a013463281469826548889e5139295ab2893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:30:16:b5:12:7b:53:83:d0:9b:90:c5:4c:
                    69:3a:27:94:70:38:92:8c:97:8c:37:b6:32:56:9b:
                    8f:42:e8:3a:fa:9d:8d:a1:d8:b0:38:37:ce:70:cf:
                    90:b5:2f:0f:a6:8b:d0:0b:cf:ea:0f:10:9c:ed:f1:
                    cb:54:f7:f7:8b:2a:62:f1:87:8e:29:3b:b1:24:fa:
                    b7:a2:5b:a4:4d:c0:05:b9:1a:99:fc:50:45:f4:63:
                    8d:d0:c5:9d:7c:91:0b:a2:54:ba:5e:42:6c:8b:7b:
                    9c:bd:af:93:ac:54:cb:61:85:7c:db:56:b0:a4:fd:
                    d7:dd:eb:b4:bc:99:b2:f4:27:1e:8c:d9:28:95:9b:
                    c2:d6:e0:18:3d:3f:12:68:e6:74:e4:c5:2c:88:40:
                    48:98:b6:55:65:0f:ed:b7:98:8d:6f:b3:08:1a:bd:
                    a8:28:27:03:3e:5d:ef:2e:f8:99:ac:90:53:ea:e6:
                    30:60:6f:d7:40:0e:4f:05:5b:29:55:55:df:f9:0f:
                    94:1c:74:58:71:d9:41:1f:57:03:2a:c9:fa:46:33:
                    1f:39:bf:d9:77:9f:45:ea:7b:b3:c9:22:16:96:cc:
                    96:15:ff:d0:11:4d:1b:3c:38:91:5f:68:83:95:d9:
                    53:41:3c:1f:ac:e2:88:f5:91:f5:a7:7e:0f:f9:7d:
                    46:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:54:A0:13:46:32:81:46:98:26:54:88:89:E5:13:92:95:AB:28:93
            X509v3 Authority Key Identifier:
                keyid:31:4C:E9:5B:A2:3C:DC:9D:60:99:7C:23:0D:63:59:AD:31:C1:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUzpW6I83J1gmXwjDWNZrTHBpZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/40c8d7-f570-4992-ad18-15bc9b25dfc0/1/MUzpW6I83J1gmXwjDWNZrTHBpZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/40c8d7-f570-4992-ad18-15bc9b25dfc0/1/MUzpW6I83J1gmXwjDWNZrTHBpZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:fb:b8:f8:3c:65:b3:74:dc:7c:1c:17:3b:eb:2d:ff:1a:dc:
         82:91:51:57:56:6e:04:6b:05:ea:d3:40:6e:49:8b:af:55:87:
         3c:6d:f2:4f:24:12:b7:75:67:03:a3:9b:0a:bc:ac:07:40:ea:
         17:36:d2:14:ee:2d:f1:01:c2:9a:7d:57:46:31:be:ea:e3:03:
         1f:60:b6:82:3a:35:be:fd:ab:4e:67:26:e0:76:fe:78:b8:05:
         a5:d5:59:60:ff:55:01:e8:9a:8a:61:7b:fd:17:6c:b6:d1:c5:
         e8:e5:11:8a:d2:26:12:b7:7a:d1:cd:88:69:b7:0a:10:e1:ea:
         0d:51:b4:91:a4:5b:e9:26:c8:36:b3:e9:fc:17:2f:62:b7:fd:
         2a:d1:21:97:c1:e6:e0:72:8a:ce:d9:1b:c6:f4:b2:79:83:96:
         73:44:8b:05:4b:ea:09:9e:9c:bd:61:bd:31:f1:3e:22:99:bd:
         34:66:d2:96:f2:3d:e9:8e:1b:e5:ab:27:a5:92:04:68:04:f6:
         05:87:d2:76:2a:61:11:78:72:ce:f6:a6:66:31:1b:10:5b:77:
         0d:cf:1a:3d:41:c0:db:3d:64:41:87:7a:4e:59:5b:31:3a:2e:
         69:a0:34:25:ad:01:b9:f0:b7:c3:78:09:3f:b9:f8:90:86:63:
         d7:b5:ed:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:40 2025 by rpki-client