Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
File:                     kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json)
Hash identifier:          kihng2EPMqOQso/0DvP+PfxGgKT4c28B0mmQPf/s9AA=
Subject key identifier:   E6:F7:46:8C:61:26:79:41:C8:C3:E4:9D:90:6D:B5:4C:A2:49:B0:84
Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
Certificate issuer:       /CN=9232b8874011d80390af81228eb507b16d025dd2
Certificate serial:       0194BC3C6CA7A6513FFEDE316F27649F97D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 12:01:04 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:04 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:04 +0000
Files and hashes:         1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: 88n1SlKyZAmbFOptEIfjA20wbeyaz4KMm7p/CW6D3h8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:6c:a7:a6:51:3f:fe:de:31:6f:27:64:9f:97:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2
        Validity
            Not Before: Jan 31 12:01:04 2025 GMT
            Not After : Feb  1 12:01:04 2025 GMT
        Subject: CN=e6f7468c61267941c8c3e49d906db54ca249b084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:36:ba:16:48:58:f5:64:92:bd:aa:a2:f9:
                    c6:b3:77:06:81:57:57:3b:65:a1:60:f4:7f:99:37:
                    c4:15:f5:1b:97:00:61:57:2f:5e:86:ae:51:62:b6:
                    0f:11:22:61:e6:6e:4c:80:89:82:d4:f0:0f:2d:2a:
                    ba:ea:11:30:75:3c:a2:ce:3d:5b:f6:6a:aa:7b:fc:
                    34:c7:43:c4:b6:a2:15:b0:a5:83:af:ba:ef:f1:99:
                    50:6f:d6:58:b1:ac:5f:e2:07:0e:d5:d5:4d:c3:c0:
                    e9:2d:cd:30:3a:bb:bc:53:64:1f:fe:3b:75:28:af:
                    49:00:0c:93:59:cd:e0:df:cf:6e:f9:e7:c5:42:7f:
                    62:93:f6:95:a4:8c:f3:71:b1:db:f5:6d:b2:9a:ee:
                    3c:45:4b:48:33:fe:0b:56:10:88:02:a2:c5:61:d4:
                    1c:c6:a9:23:39:82:0a:5c:f6:07:67:d5:3b:8c:87:
                    de:d2:0d:88:61:b8:4b:e0:cb:0a:9a:c2:4f:27:1f:
                    2d:80:72:7d:61:59:e7:bd:5e:ae:e2:90:c3:75:a3:
                    ae:7a:a6:7f:85:6b:fa:b8:59:0c:5b:82:ad:a6:49:
                    16:54:5c:15:62:4f:cb:b4:d5:67:e5:af:41:14:f6:
                    83:e1:8b:58:5f:71:ca:65:a9:46:17:e6:4f:08:e7:
                    27:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F7:46:8C:61:26:79:41:C8:C3:E4:9D:90:6D:B5:4C:A2:49:B0:84
            X509v3 Authority Key Identifier:
                keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:15:fb:11:5b:0d:fa:42:c4:98:15:4d:32:24:f2:4f:2a:62:
         b5:9a:70:23:c0:cd:41:8a:f1:8c:ca:40:46:d6:65:f2:21:1e:
         7f:a7:bf:80:a5:8a:da:b8:0b:39:11:11:1a:6f:99:43:bd:76:
         d1:02:3f:f8:a4:94:1a:e1:15:e5:cc:70:b3:82:b1:f2:00:b0:
         b5:67:66:6c:eb:06:63:2f:04:7f:31:28:a6:56:97:26:63:95:
         5e:d2:ed:bb:72:3b:84:a0:e6:d4:03:91:0b:2b:9f:d4:8f:b9:
         33:17:61:31:12:ca:8f:8d:50:3c:8a:af:cb:f6:44:c4:f0:68:
         1b:ed:30:0d:71:37:fb:d8:ee:d7:ff:37:1d:5b:dc:4d:10:ea:
         53:4d:be:a5:e9:85:0d:8b:a1:e3:44:ab:01:a8:83:27:7a:88:
         d2:1b:11:0b:52:e2:90:23:76:c8:96:c8:39:e8:fe:23:a2:0b:
         3b:a6:7a:63:11:5a:7b:ea:27:58:da:ce:7b:bc:9b:a3:09:37:
         52:a5:c5:ed:e0:39:5c:0a:5e:cf:ea:bf:df:a1:99:df:c9:f4:
         d4:98:7b:3e:9e:a7:c2:41:94:8a:28:a4:21:32:0d:6a:21:5a:
         32:68:7d:87:2d:85:20:63:47:fa:47:a7:c6:3f:43:76:04:4f:
         63:8b:b2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:48:57 2025 by rpki-client