Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
File:                     J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft (raw, json)
Hash identifier:          1vn7LowkC10zbF/Pdr+NsVGohDenpDBFPpSvUM7R8VI=
Subject key identifier:   9B:71:D2:66:88:D2:0F:BA:DC:98:AC:1D:D1:CC:64:A2:34:97:92:4A
Authority key identifier: 27:C6:FB:50:70:F4:38:39:50:3C:6B:DD:F5:16:DE:87:C7:FB:89:07
Certificate issuer:       /CN=27c6fb5070f43839503c6bddf516de87c7fb8907
Certificate serial:       0194BBCE1F64BFDEB5AA5F519C05FC09D270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft
Manifest number:          1425
Signing time:             Fri 31 Jan 2025 10:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:35 +0000
Files and hashes:         1: J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl (hash: XYsZuGrvFqAgpzEHIpHJJuKXwOHM8AueGE0G97g4pww=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:1f:64:bf:de:b5:aa:5f:51:9c:05:fc:09:d2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c6fb5070f43839503c6bddf516de87c7fb8907
        Validity
            Not Before: Jan 31 10:00:35 2025 GMT
            Not After : Feb  1 10:00:35 2025 GMT
        Subject: CN=9b71d26688d20fbadc98ac1dd1cc64a23497924a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:47:27:a7:08:a3:6e:39:88:2f:a8:92:0f:13:
                    6c:14:69:ed:47:25:d7:9f:67:d3:67:03:93:a7:e8:
                    14:1b:74:11:70:bb:b4:71:7b:19:96:15:e0:ba:65:
                    76:a4:53:87:a8:76:40:bf:fa:16:28:e8:50:c4:46:
                    e9:63:a1:7a:5d:80:e7:d0:02:3c:24:06:4f:98:89:
                    00:ab:de:25:fd:2d:a8:5d:ec:8b:83:8e:3b:9a:f3:
                    8b:4b:7a:90:f7:3b:b7:b1:ac:23:0f:8c:86:52:c0:
                    5d:59:92:e2:99:11:c7:12:4d:e4:35:cf:f3:26:9e:
                    a2:2e:8a:82:01:c6:2f:ad:05:b9:74:c1:65:ec:e0:
                    02:b1:6c:4c:c4:f4:89:0f:07:52:aa:43:8e:4b:d7:
                    ba:c1:1a:38:6c:af:b2:33:87:69:9d:0b:55:d0:b8:
                    08:3d:78:fe:fc:61:31:e5:15:4f:03:37:fb:22:b4:
                    7d:4b:fb:5f:83:69:af:01:9a:a9:c7:0b:f8:df:9e:
                    86:33:48:6a:93:93:be:8d:62:35:ab:af:cb:58:aa:
                    72:a2:3a:c4:2c:ae:02:32:27:2e:e5:06:78:e4:be:
                    7a:36:71:cd:23:14:76:6e:33:69:8c:87:77:56:f9:
                    d3:df:5d:a0:8e:0c:07:c2:85:6d:c8:48:cf:07:b6:
                    04:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:71:D2:66:88:D2:0F:BA:DC:98:AC:1D:D1:CC:64:A2:34:97:92:4A
            X509v3 Authority Key Identifier:
                keyid:27:C6:FB:50:70:F4:38:39:50:3C:6B:DD:F5:16:DE:87:C7:FB:89:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/937b76-8915-40e1-a134-f2d6352b5e96/1/J8b7UHD0ODlQPGvd9Rbeh8f7iQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:38:3e:c7:4b:5b:cf:69:0e:e1:b7:d2:c2:d2:53:25:1e:d9:
         97:a0:e2:73:2e:e1:2a:09:5c:87:52:a4:04:f1:22:e0:fd:b6:
         07:29:4c:3e:39:92:92:c9:2f:24:c9:45:51:86:20:14:72:44:
         d4:20:d7:12:af:12:b7:3b:ad:1a:cb:ef:0a:78:c9:e7:62:81:
         85:52:52:3a:36:22:8d:bd:41:24:87:67:d0:5f:18:ef:ee:d7:
         c6:62:83:c3:6d:b5:97:9a:73:f5:ca:ec:35:53:93:14:89:99:
         18:85:76:26:e2:dd:94:fc:dd:31:7d:89:ff:62:e9:7a:bd:e4:
         d8:d9:d7:36:0e:f7:c2:33:0c:ae:47:4d:39:58:55:96:d4:a8:
         77:77:6b:03:5a:0d:d6:ea:4d:ab:68:b9:29:27:3d:44:5a:78:
         ef:98:75:1b:56:42:c6:fd:00:ee:1a:1e:09:fc:d0:1b:e2:85:
         b6:d5:ad:cf:42:8b:d7:e0:df:2e:8a:d2:47:fb:41:8a:db:ae:
         0f:b5:4d:c1:5b:cd:fc:e2:25:dc:8c:4d:3d:2d:a2:8c:96:fd:
         5f:16:e9:ff:37:1a:76:9b:9f:1d:d2:97:53:a1:40:55:eb:6d:
         df:ef:af:55:e4:de:92:89:f0:16:d8:16:4d:b3:ce:0c:ef:4b:
         1b:7e:0e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:43 2025 by rpki-client