Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
File:                     PYs6RAq37XlB4sQUhHVG_WP_E-o.mft (raw, json)
Hash identifier:          LFYG+/S2sMMWBr6dRGWF80GuQ1SXlmsyryhXdwbiH2U=
Subject key identifier:   A2:78:FE:A2:FD:B0:3F:A8:55:83:B0:C5:15:28:0C:3D:70:7C:9D:09
Authority key identifier: 3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
Certificate issuer:       /CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Certificate serial:       0194BBCE13F4A41880ABD4754B0C71EA60B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
Manifest number:          0752
Signing time:             Fri 31 Jan 2025 10:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:32 +0000
Files and hashes:         1: PYs6RAq37XlB4sQUhHVG_WP_E-o.crl (hash: VwRyLeNyou/nfkHp9TmHqk2cOHK0cDcZMpryiI8pcdE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:13:f4:a4:18:80:ab:d4:75:4b:0c:71:ea:60:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
        Validity
            Not Before: Jan 31 10:00:32 2025 GMT
            Not After : Feb  1 10:00:32 2025 GMT
        Subject: CN=a278fea2fdb03fa85583b0c515280c3d707c9d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0e:98:4a:4f:ec:70:53:37:ec:13:b6:85:ac:
                    97:e2:00:44:fe:19:c4:ea:14:b9:d1:52:0b:0b:43:
                    d4:68:f1:47:99:55:5f:27:47:c1:06:c9:35:85:02:
                    c0:79:34:13:58:cb:ce:b4:8a:48:fc:b3:af:87:e1:
                    80:f3:51:b4:06:e4:da:9f:d4:c2:34:18:73:1a:58:
                    4f:ea:10:7a:59:7c:27:19:40:de:86:78:ab:e7:b2:
                    9c:1e:b6:19:b3:ec:5d:8f:17:39:87:1e:b9:47:07:
                    1c:9c:4f:8f:e8:20:eb:e2:a3:19:6b:47:a9:77:6e:
                    ab:8c:94:9c:b3:9b:cc:ca:3b:d4:9e:a9:51:1f:ab:
                    74:49:39:42:12:c0:cf:4e:5e:bf:19:06:c1:d1:1c:
                    63:4f:68:b7:bd:ec:8f:f3:c4:9f:1b:bb:56:fb:3c:
                    db:21:76:db:62:9b:37:6f:04:50:21:4c:74:e6:cb:
                    d8:b1:3f:af:d3:50:52:c9:72:c0:52:43:d0:23:54:
                    3d:62:8c:70:dd:46:30:78:41:32:71:a9:ee:04:b1:
                    79:0b:9c:56:13:37:79:5e:66:1e:17:7a:a8:10:a4:
                    30:d0:f4:6f:b6:50:48:ba:32:c2:55:a1:d1:3e:81:
                    7f:c7:ef:05:be:dd:8a:52:78:36:d7:54:10:d1:54:
                    3e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:78:FE:A2:FD:B0:3F:A8:55:83:B0:C5:15:28:0C:3D:70:7C:9D:09
            X509v3 Authority Key Identifier:
                keyid:3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:eb:59:5e:7c:2a:a8:82:4c:4a:9a:e5:50:f2:37:5b:10:f2:
         bc:89:8d:64:1e:c3:15:30:dc:ad:00:f3:ab:06:72:00:1c:fc:
         fa:90:f7:b7:f4:85:f9:af:2d:91:ba:9d:38:4e:66:d8:77:7a:
         a0:46:fc:d8:55:ce:f5:e6:91:72:b3:4a:82:f4:5a:a3:d7:9c:
         35:77:c5:1a:4a:2b:26:43:a6:6b:99:3c:62:8e:9f:9e:ff:92:
         d7:b1:94:c4:5a:0c:2e:e5:c8:69:d0:f6:b9:c0:70:a3:cc:c9:
         c9:f6:33:4a:12:26:cd:cf:99:4a:5e:43:b0:36:d8:c9:19:9a:
         b9:1f:fb:7b:fd:dc:f8:5a:0f:99:cc:d9:b4:db:17:f1:22:9c:
         1d:25:5c:13:94:5f:12:5e:8b:4a:ba:21:08:2b:f4:a7:38:60:
         6d:59:ed:b1:38:7d:e7:76:43:d9:ba:0b:33:df:40:19:8f:4a:
         a3:31:21:42:04:4f:e8:ae:a4:9d:7c:ff:b2:ab:31:14:78:7b:
         16:ca:49:a5:4b:e2:bf:56:80:5a:83:b4:46:45:1a:e0:d6:9e:
         48:40:63:4f:f5:81:fb:34:39:02:88:b6:3a:5b:52:bb:90:62:
         f5:49:ff:8e:ce:3f:01:a0:25:d5:ea:d1:26:ec:35:b0:30:d0:
         fa:d3:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:16 2025 by rpki-client