Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
File:                     gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft (raw, json)
Hash identifier:          pUObVX+iavFwr0iwn9ywhO+GtjNbQ1GG3j2XBwpFo0Y=
Subject key identifier:   89:AB:F3:7A:22:B7:8F:5B:49:03:29:5F:10:05:CE:31:BD:40:71:1F
Authority key identifier: 83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA
Certificate issuer:       /CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
Certificate serial:       0194BBCEEDAAC1EEF7756ED2FC21D914E14B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:01:28 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:28 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:28 +0000
Files and hashes:         1: gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl (hash: WWwGflARJgHpXcOlp4c1wdCXJsSf+AZPhY6Q1/L8Tvs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:ed:aa:c1:ee:f7:75:6e:d2:fc:21:d9:14:e1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8323f49d6cc650cd6d65482348e1d6d0b8fd7eaa
        Validity
            Not Before: Jan 31 10:01:28 2025 GMT
            Not After : Feb  1 10:01:28 2025 GMT
        Subject: CN=89abf37a22b78f5b4903295f1005ce31bd40711f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:08:02:cf:18:cc:52:b9:59:c4:53:73:db:3c:
                    14:44:3d:d1:47:06:6e:01:7d:4b:2b:00:c7:d1:50:
                    8b:a2:92:86:ec:0f:87:4c:13:82:a0:1c:99:9e:64:
                    62:dd:be:69:8d:a7:0a:61:5c:05:d0:a2:53:ef:81:
                    86:eb:1c:dc:91:c9:a1:f2:11:48:16:6b:53:cf:3b:
                    7c:38:3b:7a:37:fd:b4:a4:93:b3:99:25:45:25:7a:
                    04:b8:c6:c1:28:ac:87:13:ca:1f:02:36:25:2a:33:
                    b9:d5:e1:19:b7:79:f8:65:94:66:24:69:f2:f5:4f:
                    e9:7e:5f:d8:0c:fa:d6:0a:63:e1:f0:10:82:31:12:
                    eb:cc:0f:97:22:fb:a3:30:ac:e4:9f:e3:a9:4d:ff:
                    93:3b:30:22:a6:c8:a9:56:fd:71:9d:86:3d:2a:3c:
                    f6:d0:c7:4e:e2:9a:cf:af:06:a3:52:83:7a:40:94:
                    94:b1:0e:e8:85:78:7e:1e:1b:30:38:f7:14:c9:55:
                    1e:b5:1d:25:30:53:eb:52:fc:a0:7e:ac:77:74:f3:
                    fb:22:33:2f:c8:84:ec:2f:58:3a:4a:c1:75:e3:89:
                    5e:c7:48:19:b5:8c:02:41:ca:97:bf:3c:18:21:32:
                    a2:6c:18:df:4c:dc:40:9d:fa:a0:b9:ac:d1:32:62:
                    73:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AB:F3:7A:22:B7:8F:5B:49:03:29:5F:10:05:CE:31:BD:40:71:1F
            X509v3 Authority Key Identifier:
                keyid:83:23:F4:9D:6C:C6:50:CD:6D:65:48:23:48:E1:D6:D0:B8:FD:7E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e73f16-45d2-43c1-a4af-5cf9194d1702/1/gyP0nWzGUM1tZUgjSOHW0Lj9fqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ec:af:bd:60:b6:a8:e0:fc:04:15:07:e0:48:36:06:4b:08:
         69:c0:73:0a:90:26:a7:e0:94:31:53:d4:4f:b3:70:04:f1:b0:
         f6:66:04:15:0b:e8:cf:b9:f1:45:62:2c:c5:ec:41:55:d7:dd:
         83:91:a4:b4:15:88:60:f0:f8:23:90:21:29:51:80:5a:e2:01:
         82:70:33:85:a7:14:34:1c:df:99:e2:67:3e:1d:7f:20:0c:53:
         ef:f0:4d:77:f4:2e:04:af:98:40:45:ca:84:4c:b0:96:f1:17:
         ed:49:09:9e:68:a0:74:d9:2a:7c:c8:1a:9d:3d:5a:3d:b3:9b:
         e0:1a:80:fb:fd:22:ce:6c:69:6f:41:2b:11:23:e5:17:cc:e9:
         dd:4d:70:7d:32:fa:a9:6f:cb:64:b7:37:cc:47:ba:23:d6:65:
         14:b8:0a:bc:11:00:4f:4b:92:94:2c:f7:48:00:7b:71:8d:8e:
         0f:54:cf:5d:58:31:1b:04:2e:04:f7:65:7e:96:ca:d5:73:5b:
         bd:7d:cb:c9:67:3d:fd:62:d7:72:9f:c8:1e:88:38:87:8c:57:
         42:f8:31:5c:4b:8d:c6:55:6c:40:70:d8:6a:08:f1:e8:44:c8:
         c3:47:42:cf:19:e0:62:1b:7e:04:4a:00:b1:e5:99:81:af:7d:
         15:14:9f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:48 2025 by rpki-client