Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File:                     1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier:          Bneudtwg8pvG7po9L72kC20CQoK7lefdeXzlxh2ZlaA=
Subject key identifier:   21:F8:C3:3D:3B:A9:66:26:DC:78:47:31:61:FF:43:AA:C6:21:C7:8C
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer:       /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial:       0194BD17F5EE0E2839DBF9112A39EC8DD862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number:          0DA6
Signing time:             Fri 31 Jan 2025 16:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:51 +0000
Files and hashes:         1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: uv8Hd6HKnB/lcOZNW4ygmn0qdJO1CCjt6EVaSV9eppc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:f5:ee:0e:28:39:db:f9:11:2a:39:ec:8d:d8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
        Validity
            Not Before: Jan 31 16:00:51 2025 GMT
            Not After : Feb  1 16:00:51 2025 GMT
        Subject: CN=21f8c33d3ba96626dc78473161ff43aac621c78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:7b:a1:64:aa:65:db:26:ca:9a:fc:52:5a:
                    4a:ca:9e:04:ae:de:b2:e0:24:89:93:74:25:0c:47:
                    ab:ce:37:b6:fe:be:2d:bb:61:d3:2f:00:ff:47:76:
                    a6:0f:4a:89:5b:cc:15:aa:c9:2e:3d:d8:e4:85:2c:
                    ed:f9:25:5f:04:0c:6a:35:ae:b6:96:e3:ff:70:64:
                    8a:7b:6d:3b:31:4a:49:9e:25:43:a8:43:a0:f0:e8:
                    e8:16:31:f1:7e:7f:3d:de:c5:68:15:fd:a2:2c:e3:
                    d0:8d:d0:4f:a2:56:aa:84:23:8a:4d:55:5a:1d:f8:
                    b6:31:a3:4d:29:eb:d2:1f:83:84:bf:d7:99:61:95:
                    c4:56:9f:7f:68:65:5e:46:c0:8c:89:d0:e5:c7:55:
                    33:84:3a:c9:19:0b:8d:f7:56:76:ca:72:fe:d8:6e:
                    63:e9:43:fd:53:61:cc:4d:22:9f:6a:a5:74:99:fd:
                    ce:80:14:86:4f:87:c3:05:b6:aa:14:63:b1:e3:ba:
                    8b:2f:bf:d8:69:c3:8d:36:85:53:e4:ac:59:ed:a8:
                    ca:ef:36:94:8f:92:cc:2e:c3:d0:dd:96:d6:31:96:
                    26:4b:61:ad:39:65:1a:5d:1f:c2:c5:00:45:6a:21:
                    98:0c:d3:92:9f:f3:cf:14:a4:72:7d:ea:b1:b0:97:
                    93:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F8:C3:3D:3B:A9:66:26:DC:78:47:31:61:FF:43:AA:C6:21:C7:8C
            X509v3 Authority Key Identifier:
                keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a1:39:43:ab:55:34:60:ac:7b:f2:da:66:84:17:17:20:c1:
         3f:21:98:87:71:25:d7:41:f2:66:58:05:57:53:62:6e:33:c4:
         59:9c:24:b6:fe:1c:aa:97:e0:c4:06:f2:97:f4:aa:e0:50:20:
         2e:38:72:a2:4b:93:4d:70:b4:a9:49:1c:19:f2:67:d2:f2:ad:
         77:5e:bf:7f:39:7a:c9:57:bb:10:07:96:9f:a9:db:f1:91:70:
         11:8a:12:fb:57:04:e0:5b:df:7f:37:6d:16:1a:d2:ed:25:08:
         e5:95:ff:6f:97:73:b8:9d:76:d0:36:00:c2:99:bc:1c:08:1f:
         5d:94:d1:0c:36:72:8f:3a:22:56:ef:4b:71:55:ea:dc:a5:d6:
         1e:20:42:c6:b2:1b:05:0d:42:f4:bd:12:4d:4a:e5:1a:9c:92:
         29:fe:96:75:44:5b:a6:3e:83:e3:a4:38:bb:f8:5b:67:99:ba:
         06:2c:73:35:cc:07:64:0c:82:19:38:6a:03:5f:e5:52:e6:86:
         0f:e9:97:ef:d9:1e:44:ed:07:e5:1d:a7:3a:bf:4c:37:50:7a:
         7b:0f:38:4a:18:e7:00:a7:59:9b:44:b7:da:bc:51:11:14:0c:
         20:2f:a7:f3:09:39:9b:9f:d6:af:f8:9f:b4:3a:75:f2:1c:75:
         a1:71:1a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:18 2025 by rpki-client