Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
File:                     5VNEmgBiicjZNrKcfsWO2AnhgbY.mft (raw, json)
Hash identifier:          GrPkVV53JrvHhTsxeKQQMRa7Bzn41tZYE250EW6HOi0=
Subject key identifier:   A4:11:36:A8:45:74:69:C7:9C:57:E2:C3:EC:E6:E7:BA:6F:26:EC:CA
Authority key identifier: E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6
Certificate issuer:       /CN=e553449a006289c8d936b29c7ec58ed809e181b6
Certificate serial:       0194BC04ACC325F2A2646EB69D47AF758B0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
Manifest number:          0111
Signing time:             Fri 31 Jan 2025 11:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:10 +0000
Files and hashes:         1: 5VNEmgBiicjZNrKcfsWO2AnhgbY.crl (hash: S8TuVJqBjJHaHgbQugIFJTbHSLqNb4iDeBo2xwCPVA4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:ac:c3:25:f2:a2:64:6e:b6:9d:47:af:75:8b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e553449a006289c8d936b29c7ec58ed809e181b6
        Validity
            Not Before: Jan 31 11:00:10 2025 GMT
            Not After : Feb  1 11:00:10 2025 GMT
        Subject: CN=a41136a8457469c79c57e2c3ece6e7ba6f26ecca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:c2:fa:f8:46:0b:d9:2c:24:20:99:1f:69:
                    50:44:e2:7c:a5:ba:9a:66:62:ef:b5:92:8e:fe:f4:
                    1b:58:9b:32:bc:f4:b7:63:96:97:23:b3:cc:98:60:
                    1e:30:68:09:97:c5:6d:e3:f2:e5:2a:49:51:fe:87:
                    35:c5:fb:b2:8d:56:24:c1:14:d9:c1:cf:b1:54:2e:
                    b3:fb:c8:c5:be:5b:69:27:be:53:c7:c2:21:11:3a:
                    9f:ae:73:f7:74:92:df:40:50:ed:04:5b:80:f1:a5:
                    d8:7a:ea:4b:aa:1d:e1:44:f0:75:f8:b5:73:9c:e9:
                    9c:9e:eb:c6:20:38:7d:4b:3a:5d:c1:8d:ca:86:f7:
                    9a:58:64:86:77:d6:34:8b:e1:0c:76:22:7e:a5:07:
                    75:3b:5b:d2:0e:b7:11:fe:1a:a0:12:95:00:83:ac:
                    9c:c9:67:99:b9:06:5b:28:6c:b3:62:d1:c4:4c:9b:
                    44:77:1b:e8:94:be:13:d7:e4:24:e8:3a:68:64:14:
                    db:7a:5a:43:f0:05:c0:74:e9:e9:50:a8:28:c3:1d:
                    74:a5:27:c1:37:b9:f9:f8:57:63:72:3a:bd:1e:7f:
                    dc:a8:a6:08:17:bd:69:80:9d:a8:7f:9b:c8:35:33:
                    4b:f6:3d:49:18:1b:96:a5:f9:9a:9b:08:54:e0:53:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:11:36:A8:45:74:69:C7:9C:57:E2:C3:EC:E6:E7:BA:6F:26:EC:CA
            X509v3 Authority Key Identifier:
                keyid:E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:33:45:6d:6a:7a:8f:71:19:10:ea:f1:4d:0b:53:f5:88:8c:
         16:2e:7d:ff:df:62:d2:c0:01:e7:85:f0:a0:db:59:8f:c3:99:
         32:e8:82:90:41:56:d4:7f:10:45:19:60:49:a9:3e:50:8f:a7:
         eb:eb:b9:36:ec:b6:3b:1b:36:d7:bf:a8:17:4b:82:0f:96:a1:
         67:48:94:15:6f:a4:3a:c6:df:c6:02:30:18:0f:7a:e7:12:58:
         a4:8e:ed:7c:e1:92:9b:54:61:64:0d:42:54:f2:98:e6:58:f2:
         90:ba:88:f5:77:97:c5:c7:5d:5c:78:13:fa:11:76:73:51:b3:
         42:65:d4:a8:8b:18:64:f1:10:38:ca:cb:e6:7d:4d:40:f5:97:
         45:55:8a:9a:a9:77:db:d9:4e:35:5c:a8:50:6c:c7:93:fb:66:
         eb:16:2c:88:b0:f2:83:b6:2c:7d:ea:b7:a2:22:2f:b2:e2:0b:
         b8:67:68:a8:12:70:93:f9:9c:6d:6c:a1:e4:14:4e:c8:50:24:
         c2:e8:b6:d3:37:8e:1c:29:11:be:bb:0d:54:db:da:f4:6e:0b:
         7e:40:b7:03:b3:37:7e:d1:74:6b:20:b5:48:aa:e8:a0:a6:4f:
         93:ac:0d:9e:e5:03:f2:63:66:df:09:cb:af:57:43:09:92:1a:
         04:04:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:42 2025 by rpki-client