Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
File:                     n8UDUANWwjcveVsQ0PfVid9p_Is.mft (raw, json)
Hash identifier:          W2/JnPrTZOt+WLwDGs2yeMMSvFIJ08p8UJtqjZQdnWc=
Subject key identifier:   44:51:85:C7:C9:78:AC:9C:AB:73:83:4D:A4:4C:42:AE:9E:B8:FE:1B
Authority key identifier: 9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B
Certificate issuer:       /CN=9fc503500356c2372f795b10d0f7d589df69fc8b
Certificate serial:       0194BBCEE8E898442772D29AFC4A1D19063A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 10:01:26 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:26 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:26 +0000
Files and hashes:         1: n8UDUANWwjcveVsQ0PfVid9p_Is.crl (hash: WOyAsWlRWtbRPDeM+7CaGAWgFCl3Ya9bhyFgYUnA3rg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:e8:e8:98:44:27:72:d2:9a:fc:4a:1d:19:06:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fc503500356c2372f795b10d0f7d589df69fc8b
        Validity
            Not Before: Jan 31 10:01:26 2025 GMT
            Not After : Feb  1 10:01:26 2025 GMT
        Subject: CN=445185c7c978ac9cab73834da44c42ae9eb8fe1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:b3:f0:ec:77:2b:52:34:b5:86:5e:42:e8:
                    a4:86:d5:47:d5:e4:ae:a6:0a:8e:a3:7a:ed:b8:e4:
                    d3:13:5c:d2:8c:2b:49:b4:a1:f3:da:9c:07:9e:0f:
                    51:60:07:e7:51:61:22:2c:df:72:55:bc:85:bf:5c:
                    ca:b6:ce:2b:6c:d0:31:b2:ca:07:e7:40:2f:09:56:
                    72:78:57:ce:19:af:e3:ab:57:9c:7f:3f:4a:bf:70:
                    71:44:29:aa:00:b4:dd:9e:e3:c3:5b:c8:a3:b7:ad:
                    db:8b:83:ed:7c:0c:9a:91:83:65:2e:b0:82:41:2a:
                    9b:53:14:38:5c:ad:65:f5:34:10:b3:5d:d0:ce:bb:
                    4f:8e:51:68:fc:61:b2:93:77:a2:32:bc:9d:51:a9:
                    e2:5f:69:e3:5d:86:13:4e:9a:f2:80:20:fc:2c:ed:
                    88:f4:83:15:0e:b0:ce:5e:1d:60:76:07:47:40:cd:
                    54:fa:1c:1a:90:f1:55:73:b8:32:1c:c1:2b:c6:ae:
                    bf:2f:56:a8:12:be:7b:c0:f4:df:2c:db:12:35:0f:
                    35:92:67:a7:35:36:bc:bd:a5:57:48:4e:29:e2:b5:
                    84:bb:e7:8c:75:10:f5:45:d6:0a:f7:48:e2:53:6f:
                    f7:07:43:08:c4:69:16:7d:84:81:82:04:54:3e:db:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:51:85:C7:C9:78:AC:9C:AB:73:83:4D:A4:4C:42:AE:9E:B8:FE:1B
            X509v3 Authority Key Identifier:
                keyid:9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c3:d7:36:7f:d4:ce:44:22:6e:43:47:ad:5d:c5:11:c7:ff:
         5d:36:c0:a6:98:2c:19:9b:1f:3b:31:81:ec:3b:24:a0:70:1c:
         d4:f6:2c:00:48:17:ac:67:06:26:f4:17:96:fa:52:50:5a:f4:
         14:4f:9b:73:4f:6c:00:13:16:ee:2b:40:49:a3:79:ed:6f:45:
         ef:d6:44:22:40:2b:88:ed:ae:95:4c:c5:e9:5a:28:28:ed:32:
         44:3e:02:41:db:1b:43:40:b8:b0:ec:3c:58:09:fb:4f:ec:0a:
         fe:99:59:67:72:c3:d7:c7:d6:af:01:19:55:08:5d:9c:7a:03:
         37:2c:7d:fd:43:6b:a7:f0:8b:b3:7c:8c:fc:1c:0d:f7:3a:9f:
         0c:2c:a4:7e:79:c2:05:da:aa:27:b4:fd:f2:c4:07:2a:93:4d:
         4d:6f:7a:5c:cd:f4:18:af:d3:3a:b9:71:26:a0:de:a3:43:ec:
         d6:45:4d:66:3a:60:fe:8f:97:c3:00:8f:7d:76:34:4d:f7:4d:
         4a:55:3e:b6:36:c8:23:05:2a:b7:0f:2e:01:75:6e:81:fb:aa:
         55:de:1f:0b:30:8c:70:6d:87:fe:8b:25:be:1c:ce:2a:fe:73:
         7c:7b:a6:41:ae:e0:4f:d7:a9:b9:51:ef:34:4f:67:f5:f0:95:
         c3:d9:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:55 2025 by rpki-client