Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
File:                     TaktycvByBxzpp8xWlMbR_ROPFQ.mft (raw, json)
Hash identifier:          bICwGZGkO7LeRPBs139S5Pbs2LSpWIt46iDQ+g/qHQw=
Subject key identifier:   B5:CC:BE:32:E2:51:1B:75:79:A7:C6:E9:B5:75:EE:96:A8:52:1D:E7
Authority key identifier: 4D:A9:2D:C9:CB:C1:C8:1C:73:A6:9F:31:5A:53:1B:47:F4:4E:3C:54
Certificate issuer:       /CN=4da92dc9cbc1c81c73a69f315a531b47f44e3c54
Certificate serial:       0194BBCEE30EC2177C29714CAE931915986B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
Manifest number:          0541
Signing time:             Fri 31 Jan 2025 10:01:25 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:25 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:25 +0000
Files and hashes:         1: TaktycvByBxzpp8xWlMbR_ROPFQ.crl (hash: 3ML9kjp8yGBiZEt4NPe2moMz7zQcj9fizeMBcUMXC7Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:e3:0e:c2:17:7c:29:71:4c:ae:93:19:15:98:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da92dc9cbc1c81c73a69f315a531b47f44e3c54
        Validity
            Not Before: Jan 31 10:01:25 2025 GMT
            Not After : Feb  1 10:01:25 2025 GMT
        Subject: CN=b5ccbe32e2511b7579a7c6e9b575ee96a8521de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:fd:da:51:89:e9:5e:1c:d8:e4:48:93:9a:
                    6f:e7:83:b6:a1:0b:4f:23:4b:55:d4:0f:3e:45:9c:
                    c7:2f:f3:90:b8:2f:4b:82:18:83:e6:d8:65:53:5d:
                    37:ec:2b:84:51:90:23:6f:25:6f:88:01:ab:38:95:
                    07:46:9a:cd:84:c4:49:82:2f:f8:55:de:7f:4f:33:
                    44:8e:a7:6f:88:e5:b8:bf:60:3b:46:2a:52:ed:db:
                    cf:a2:6c:bf:c0:82:89:0e:25:c2:6b:38:a8:d3:5f:
                    43:aa:53:9e:e2:8c:64:66:d1:3f:01:21:53:50:c6:
                    41:eb:31:6f:7b:40:97:35:7f:f8:d7:9b:18:02:8f:
                    41:f4:33:85:c9:e5:9a:7b:2d:c2:77:94:44:a0:e7:
                    cb:c1:23:d8:f2:e3:50:eb:86:78:cd:b5:c9:7c:ae:
                    36:81:7f:b5:da:7a:60:4e:a0:fb:e3:15:72:36:92:
                    9c:a1:5a:59:75:13:82:d4:e3:bb:95:ac:31:01:3a:
                    ca:db:3c:27:15:c5:1a:df:7f:0a:51:ce:b2:1a:42:
                    e7:53:5c:10:76:d3:f6:35:5f:ce:f5:92:5e:cd:57:
                    46:b6:49:66:e8:70:c6:7e:47:71:d0:04:0c:f5:4d:
                    e3:09:c2:cb:cb:00:d6:68:1c:0c:32:b4:d2:d4:a4:
                    4e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CC:BE:32:E2:51:1B:75:79:A7:C6:E9:B5:75:EE:96:A8:52:1D:E7
            X509v3 Authority Key Identifier:
                keyid:4D:A9:2D:C9:CB:C1:C8:1C:73:A6:9F:31:5A:53:1B:47:F4:4E:3C:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f7:25:99:a1:78:50:26:e2:05:de:17:12:50:b9:2e:23:78:
         e0:0d:42:7d:a3:b7:a8:5a:97:a6:69:0e:2d:43:18:38:23:63:
         9b:b9:32:51:a3:1c:4f:16:95:2c:ef:00:9f:24:39:1b:a8:97:
         f8:5b:be:99:ec:a4:b3:59:89:b5:76:e1:fe:98:74:10:ad:43:
         5d:a6:70:ae:6e:d7:00:98:6e:8b:42:49:36:8c:21:84:15:a2:
         06:03:8b:3d:22:46:72:7d:d3:3e:ac:de:74:12:94:86:76:5b:
         ba:d3:ad:bd:87:aa:58:61:0e:47:c8:a2:5c:d0:16:45:ad:e1:
         c2:d6:c7:85:cf:59:03:14:b1:97:1a:cc:52:61:9a:a3:9a:d5:
         78:79:d8:cf:c4:f3:b9:a6:ed:d2:43:a8:82:a7:e7:74:a6:b8:
         ce:ed:88:4d:11:90:70:d6:7b:e3:46:e1:4c:15:0a:5d:08:11:
         ed:53:69:de:ca:f8:81:b9:cf:b9:d9:c5:58:dd:17:0c:78:3d:
         3a:6b:e4:a9:7f:82:d1:34:a6:94:5c:ff:81:d3:fc:a9:6a:76:
         52:45:89:d7:49:1d:c3:9d:24:c6:02:ae:41:1b:c2:5f:be:a5:
         e9:8d:74:c9:df:0d:61:ea:61:b7:31:a8:77:dd:e5:ff:19:af:
         85:cd:26:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:32:35 2025 by rpki-client