Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
File:                     03o_Gc-XFmpEQiB-Em8qA7bL65g.mft (raw, json)
Hash identifier:          3e8vq18dOwLECWeUNL+qjE0ZCAMEbVWvir+9338UU7E=
Subject key identifier:   17:61:14:C1:72:EE:55:2B:C2:C8:BE:53:E7:BB:9D:AA:03:BD:12:1B
Authority key identifier: D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
Certificate issuer:       /CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
Certificate serial:       0194BBCEEB32FE1816F79CB17F86EF7D3AAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 10:01:27 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:27 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:27 +0000
Files and hashes:         1: 03o_Gc-XFmpEQiB-Em8qA7bL65g.crl (hash: xpGPNffP2emTJpoyQf/mO+p0/WdUBqAcszmaRJc38kk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:eb:32:fe:18:16:f7:9c:b1:7f:86:ef:7d:3a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
        Validity
            Not Before: Jan 31 10:01:27 2025 GMT
            Not After : Feb  1 10:01:27 2025 GMT
        Subject: CN=176114c172ee552bc2c8be53e7bb9daa03bd121b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0a:1f:9c:6e:ea:69:23:a7:6b:15:63:11:aa:
                    f2:7a:46:07:45:03:0e:88:09:ee:6c:09:a4:87:ea:
                    f2:db:d2:0a:58:11:c5:f2:ad:d3:b4:aa:9e:22:63:
                    2b:7a:88:e3:fa:d2:8c:e6:a5:9e:c5:61:0c:b1:f4:
                    7a:c8:4d:4a:20:6d:52:34:83:fc:bd:98:65:64:ed:
                    1d:67:61:19:c5:51:b1:bf:76:bb:b1:a5:6f:73:9e:
                    c6:c2:b1:69:9f:fd:c8:27:38:1f:91:7d:61:3c:4c:
                    91:6d:06:be:c2:2b:95:e0:55:17:e1:ff:86:ff:6c:
                    20:51:43:2a:4c:1d:46:52:54:53:fc:4a:6f:37:9e:
                    2f:11:3e:9e:9f:f6:6c:26:bf:95:49:42:dc:7e:d6:
                    4e:17:7e:ae:45:5e:cf:9f:88:cd:ca:bf:7a:7b:f1:
                    27:db:48:ef:1e:df:89:93:77:e5:3d:b1:57:3b:c2:
                    b7:cd:0d:83:b6:4b:d3:0f:b5:4d:f2:e5:f1:24:86:
                    ea:b3:83:02:68:68:e9:38:88:65:10:7c:1a:a1:bd:
                    23:2a:4c:e2:71:3f:be:83:e0:e6:95:93:ae:b9:25:
                    93:97:9c:60:b8:c9:53:af:24:b0:a7:5a:c5:65:28:
                    72:fc:94:9a:42:13:7b:5f:e2:8e:2d:e7:db:9c:1a:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:61:14:C1:72:EE:55:2B:C2:C8:BE:53:E7:BB:9D:AA:03:BD:12:1B
            X509v3 Authority Key Identifier:
                keyid:D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2c:f4:0b:f3:f7:4b:4b:dd:1a:1c:a0:77:d2:8e:7a:09:13:
         b7:2e:0f:2d:74:a9:32:63:76:79:51:04:cb:68:39:d0:cc:84:
         3b:b8:65:a7:dd:31:d9:c2:69:05:7f:83:d6:da:22:4c:3a:be:
         28:83:b4:dd:b5:d1:e0:61:20:17:6f:6a:6d:d7:fd:bd:4c:fa:
         a5:5b:23:67:05:18:8a:fe:9a:d2:4b:55:89:e6:9f:44:72:81:
         34:d7:cf:9b:52:c5:b9:f1:23:d6:bb:ee:1e:8f:d3:ca:87:5d:
         72:b8:b6:7c:4d:2e:c3:a2:9a:38:2c:f5:2d:0e:cf:b6:c2:03:
         d2:b7:66:df:69:dd:39:a1:84:a7:f2:99:b6:fc:71:e0:59:0d:
         6f:9c:74:03:a2:34:9c:1c:2f:fa:6b:1e:3d:a5:82:f9:e0:17:
         a0:34:da:45:5e:dd:e4:be:f9:0f:0c:25:cf:cb:1b:1a:cf:c8:
         e3:2a:3e:6a:77:16:9a:37:52:57:e1:35:20:e5:86:af:98:d5:
         ac:41:57:a7:4a:05:59:1c:68:b8:f2:e4:4f:94:45:82:80:16:
         fd:ef:79:29:3d:eb:36:93:88:d5:49:f0:78:4e:e9:39:7a:70:
         cd:76:6e:83:a8:ae:5b:8f:3c:dd:eb:0e:b0:21:4c:10:85:49:
         2d:93:62:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:25:01 2025 by rpki-client