Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
File:                     iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json)
Hash identifier:          Xi+Q66vcZxQlvBgC8i+oj3jkyYNCyWnsvjy1Gn3g1rs=
Subject key identifier:   4A:7A:B8:E6:51:36:02:65:9A:B9:50:32:5A:FA:AB:AC:39:16:BC:69
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Certificate issuer:       /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial:       0194BCA9BF7C4A4D5126C2B6D95F7F3AD2E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 14:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:28 +0000
Files and hashes:         1: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: ZlZc0O+m/KoqhkUArI5uNXCNMQyB1t6H31eviqiZPAY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:bf:7c:4a:4d:51:26:c2:b6:d9:5f:7f:3a:d2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
        Validity
            Not Before: Jan 31 14:00:28 2025 GMT
            Not After : Feb  1 14:00:28 2025 GMT
        Subject: CN=4a7ab8e6513602659ab950325afaabac3916bc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f9:bb:ec:5a:52:54:3a:6c:17:d1:3f:35:50:
                    2a:be:75:1b:7a:2c:64:84:6d:e6:1c:09:15:ae:4d:
                    23:b3:d3:60:6f:85:f2:2e:bc:a5:94:2a:74:5d:f0:
                    f3:6d:80:e0:3b:53:ac:2a:18:f9:fa:b1:8b:8d:cc:
                    7e:96:a0:0c:0d:a2:d7:83:f7:4a:b6:f8:95:a9:32:
                    1d:bf:11:2b:de:bb:3f:7e:ef:3a:ee:49:ec:6c:64:
                    2e:65:0e:2b:55:94:4a:b2:c6:18:af:c4:70:86:85:
                    74:92:f1:d6:df:2d:03:75:c7:69:fe:b1:78:41:7d:
                    80:71:52:15:a1:de:a7:c2:d5:88:2d:54:d9:1e:d5:
                    bd:1a:8c:d1:d3:c5:fa:0d:98:be:8a:39:70:60:83:
                    dd:fa:97:ba:b1:3b:85:b9:7e:6b:dd:3d:e5:87:67:
                    ed:0d:77:74:36:91:36:43:eb:41:cb:94:f7:f4:b5:
                    17:6b:dd:60:f4:d5:d0:69:0e:f6:8d:c8:82:b5:96:
                    e7:ce:39:9c:c1:2e:25:b3:60:e2:b3:03:5a:8d:b0:
                    59:a5:fc:fe:2f:eb:7a:6d:68:17:f5:f6:0c:c5:26:
                    28:ae:42:8b:89:89:21:df:01:42:5c:7d:e0:0b:24:
                    49:cd:ab:48:c3:ca:f5:36:82:f1:ce:ba:12:fc:3e:
                    19:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7A:B8:E6:51:36:02:65:9A:B9:50:32:5A:FA:AB:AC:39:16:BC:69
            X509v3 Authority Key Identifier:
                keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b0:2b:c0:2e:b0:e3:de:22:c8:07:bf:53:3b:af:f7:d7:4c:
         59:b9:d1:32:15:1b:3b:08:91:3b:9d:e3:db:88:3b:be:1c:4f:
         1a:25:9b:3a:88:58:d8:6b:0f:68:ca:e6:39:91:09:15:d8:12:
         e2:ff:97:32:62:a3:2f:61:53:84:c4:4e:1a:91:56:74:e1:f7:
         1c:b8:dd:95:6d:a6:d9:60:e8:cc:9f:43:fb:7c:c5:1d:13:ab:
         48:69:b4:cf:24:ac:4e:11:01:94:fc:0d:10:d9:e7:e0:e6:42:
         b6:86:16:43:30:c2:5a:9a:54:bc:78:c5:82:5c:4a:14:bf:af:
         11:1c:6d:e9:5f:07:4f:c7:c0:38:33:2c:cd:4f:a2:5d:73:30:
         09:cb:ac:4d:26:4a:8c:b6:7c:ad:f3:07:54:b3:28:10:b0:0f:
         a5:7b:64:db:b9:09:05:5e:a7:d0:f3:30:47:1a:76:b2:37:6a:
         d3:5c:bc:71:a5:06:b7:ea:e9:fe:8d:43:31:17:62:a2:fa:b9:
         84:6d:72:60:7d:6d:ea:93:76:c4:d0:55:a7:41:a2:13:18:23:
         c6:19:1c:fe:cb:ee:b5:8b:18:9a:af:f5:13:22:74:42:b9:19:
         1c:14:c2:82:27:30:36:d3:dc:ac:97:4a:b3:5b:04:e4:29:34:
         ce:bf:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:22 2025 by rpki-client