Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
File:                     24tcHuy6hgz_8XR5ZtdjyagvbZo.mft (raw, json)
Hash identifier:          b6SHu5wXLQH4+WNMXXf3bHDqaFrMNRvzmB4pGlPS1rY=
Subject key identifier:   79:49:33:7B:39:4A:DC:83:D1:51:54:75:5F:97:17:5D:E5:3A:D3:A4
Authority key identifier: DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
Certificate issuer:       /CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Certificate serial:       0194BC3C2D60EBA65E9F36451F66E9BE0736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 12:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:47 +0000
Files and hashes:         1: 24tcHuy6hgz_8XR5ZtdjyagvbZo.crl (hash: vnOhWss/FINjT46F3YVyd6KasX3oRATZd02pNmAljrs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:2d:60:eb:a6:5e:9f:36:45:1f:66:e9:be:07:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
        Validity
            Not Before: Jan 31 12:00:47 2025 GMT
            Not After : Feb  1 12:00:47 2025 GMT
        Subject: CN=7949337b394adc83d15154755f97175de53ad3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6a:b2:97:91:34:71:67:85:9a:da:9a:28:53:
                    3b:d2:e5:5f:cf:33:31:f0:10:b3:74:6d:5c:57:bb:
                    f3:7f:51:7b:87:40:b0:ca:8f:a3:12:e8:59:84:e2:
                    88:ef:19:71:ed:a9:0c:b5:ea:cb:da:9d:ac:47:72:
                    6b:22:9b:97:d7:32:89:6c:7e:66:0b:7a:0c:3a:9c:
                    69:e8:d8:04:d9:d2:c3:78:ff:03:87:47:4d:4f:b8:
                    11:9b:a7:69:f7:ed:86:2c:03:16:13:d3:80:34:79:
                    32:b1:d1:e2:88:7b:9d:55:40:6f:90:27:13:f4:53:
                    e9:8c:98:dd:0c:6f:5c:57:4c:b2:fd:f1:dc:b0:9f:
                    21:7d:0b:7a:f5:02:fc:10:b9:f2:72:fe:67:d5:fe:
                    80:97:ba:98:52:fb:32:10:ac:03:a2:08:d4:c3:bf:
                    7d:db:74:70:cb:06:f3:7b:c6:61:96:46:96:d3:2b:
                    6b:f4:44:a9:85:ed:cd:ec:5a:4f:33:34:56:14:a7:
                    80:37:df:0b:78:13:06:49:1e:e4:39:42:4f:94:fc:
                    b3:1e:5c:99:b5:53:61:98:d0:29:a7:6f:8c:19:7f:
                    e3:7b:a8:94:f9:17:cf:db:bc:89:a9:70:47:c3:47:
                    52:b4:08:22:54:47:a7:d3:c7:6d:64:2f:f3:6b:df:
                    53:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:49:33:7B:39:4A:DC:83:D1:51:54:75:5F:97:17:5D:E5:3A:D3:A4
            X509v3 Authority Key Identifier:
                keyid:DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:48:5b:24:6f:c8:2d:5e:83:db:ff:a9:c1:a5:40:63:71:a2:
         7a:ff:25:e4:c2:2d:3b:96:03:a3:7e:dc:4b:3e:83:d5:66:1e:
         d4:af:0a:55:00:c3:1f:18:20:7c:a2:8e:8e:cc:c6:95:0a:74:
         89:66:96:7a:3f:54:c3:97:55:ea:e0:be:47:3f:25:82:84:57:
         8f:7d:d8:e9:80:ae:9d:41:74:64:5c:9d:f0:b3:de:6c:51:4f:
         c5:98:ec:6d:fb:26:8f:04:ac:71:76:5e:7e:fd:53:f7:dc:15:
         ec:de:89:f7:07:db:4f:8d:45:3b:2c:2b:27:4b:80:d3:66:ed:
         e5:0d:44:16:23:2f:cc:ee:10:ab:3b:10:e1:3c:78:d6:f3:78:
         a8:76:e9:39:c0:02:d9:f7:48:e0:62:ac:d3:ce:5b:52:f7:f1:
         1c:03:15:59:ef:1d:1b:7f:28:96:a6:c4:20:ae:8f:a7:2a:c3:
         25:fd:54:74:f1:47:7e:e1:c2:8a:dc:ea:b2:86:01:78:46:d3:
         89:e1:be:e5:64:d3:f6:28:fb:a6:6f:e7:5c:7b:eb:93:62:56:
         c2:fa:81:e9:24:57:ca:5c:c4:a7:15:cb:52:99:28:a7:72:b0:
         e6:f9:7e:1a:1e:bb:75:fb:c1:97:58:f4:2e:17:42:9a:89:fb:
         29:32:48:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:34:00 2025 by rpki-client