Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
File:                     1dhc7fCdgveSwYDZClqaI21qcFw.mft (raw, json)
Hash identifier:          RA0MLzK6QtG3iu+6R2eaeVrBlzcd3C72yFbxGEPWO28=
Subject key identifier:   6C:B5:BE:FD:21:56:AE:04:23:CC:DF:32:12:BB:26:3D:C6:8F:1A:47
Authority key identifier: D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
Certificate issuer:       /CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
Certificate serial:       0194BCAA15057D8831063028025A3F0A2006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 14:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:50 +0000
Files and hashes:         1: 1dhc7fCdgveSwYDZClqaI21qcFw.crl (hash: DdOIubUKT82LTcRZtTgCvxA2/YN7xR5w/7M15nqgDuY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:15:05:7d:88:31:06:30:28:02:5a:3f:0a:20:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
        Validity
            Not Before: Jan 31 14:00:50 2025 GMT
            Not After : Feb  1 14:00:50 2025 GMT
        Subject: CN=6cb5befd2156ae0423ccdf3212bb263dc68f1a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9e:ab:1c:a4:51:19:b3:ba:c1:50:cf:94:70:
                    36:2e:7f:51:f7:cf:84:ac:87:d3:f7:d5:1c:95:01:
                    80:3f:f0:0a:c8:99:ff:bc:24:2e:d6:47:4c:3a:d6:
                    c3:b4:d6:31:67:b4:db:05:f4:62:fc:3f:5b:c2:2f:
                    84:c0:d9:bc:9f:b7:25:73:60:1c:1f:c8:c9:76:80:
                    54:03:51:a4:a0:94:e9:b9:6d:fb:1d:36:d1:ee:1b:
                    4a:2d:2e:7f:44:0e:4b:6c:4e:49:75:a9:52:6e:1c:
                    c4:d9:e7:2d:d8:1c:74:91:d2:57:cb:e2:d7:42:0d:
                    1d:55:d8:9e:8c:7f:fd:21:52:67:79:bf:b6:6b:8a:
                    ff:8c:44:68:df:87:67:52:49:23:f5:6a:ca:6e:09:
                    e8:c9:75:8b:82:78:d9:58:84:52:81:f4:bd:cd:d4:
                    1c:29:4f:d3:e7:51:df:b1:83:88:83:71:c0:24:36:
                    01:c6:5e:a9:43:25:e8:b6:3f:5d:59:55:d4:96:c5:
                    ff:41:f0:57:1d:44:73:07:b8:45:c7:c4:4a:96:84:
                    3e:0f:65:cc:f6:97:38:cf:26:7a:e7:46:13:b5:a4:
                    64:07:09:d2:f1:15:7e:79:e2:ce:ad:87:7a:01:21:
                    d3:d7:16:5d:42:36:d9:01:f9:59:43:8c:04:1a:f4:
                    a3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B5:BE:FD:21:56:AE:04:23:CC:DF:32:12:BB:26:3D:C6:8F:1A:47
            X509v3 Authority Key Identifier:
                keyid:D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e9:5d:9f:e4:4c:8d:6a:89:c7:08:f6:dd:00:a1:0e:c7:89:
         35:42:a1:6e:fb:3d:eb:1d:82:e3:9a:b1:25:d9:6c:62:9b:3d:
         ec:45:70:af:94:ac:04:d2:ca:2f:b4:f5:a4:1d:87:f4:29:24:
         0b:0b:c1:5d:ce:f3:8f:14:1f:87:10:72:37:d4:1c:32:d3:49:
         83:5f:cb:aa:e6:ab:5f:eb:71:5d:7d:99:a8:81:5e:8b:e7:b1:
         37:00:d8:b2:cd:92:69:81:0f:43:ab:5c:28:e7:6c:1a:b4:de:
         7e:ef:a8:73:7f:13:b7:dd:84:bd:90:03:8a:76:ee:20:fa:a9:
         35:ad:52:03:18:5d:d3:06:93:d0:bf:c6:0e:52:5d:be:de:f0:
         69:72:80:67:46:28:1e:19:40:10:6e:d4:04:0a:72:10:a0:96:
         4d:f9:f0:ed:a5:9e:fc:6f:0f:04:e6:ac:1d:19:26:e1:c1:86:
         87:f6:d2:4b:f3:b9:e6:0c:41:07:1c:30:a5:6b:b3:78:ba:1e:
         df:4b:3a:20:fd:9c:65:75:5d:cd:46:72:3f:22:98:f1:23:0b:
         db:47:95:64:a8:bc:c7:a2:7b:47:dc:5b:80:9d:0f:52:9a:a3:
         11:f6:65:9a:dd:30:4b:63:9b:25:7e:91:9b:1f:d0:09:f7:cb:
         fd:0b:15:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:52:16 2025 by rpki-client