Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
File:                     xLMV8myhzbhEERaAw88EN7TBJ-Y.mft (raw, json)
Hash identifier:          O1bn2nQIuwfCB2PAzrKtCNY+y4UhHyaoF6Ubmppw8Hg=
Subject key identifier:   3D:18:EC:D2:A8:D9:1E:53:17:71:49:9C:D7:7C:CE:BE:DF:76:A3:43
Authority key identifier: C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
Certificate issuer:       /CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Certificate serial:       0194BC3C56993765DA583CE20414466B89E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
Manifest number:          31
Signing time:             Fri 31 Jan 2025 12:00:58 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:58 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:58 +0000
Files and hashes:         1: xLMV8myhzbhEERaAw88EN7TBJ-Y.crl (hash: RBHkvQfHGFDu36JGyAXmkhCDq62VhTgZBNCfSW7lhkM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:56:99:37:65:da:58:3c:e2:04:14:46:6b:89:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
        Validity
            Not Before: Jan 31 12:00:58 2025 GMT
            Not After : Feb  1 12:00:58 2025 GMT
        Subject: CN=3d18ecd2a8d91e531771499cd77ccebedf76a343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:89:b3:95:c7:9a:be:1b:08:c1:16:40:02:d9:
                    07:de:c2:bc:63:5d:df:8a:2e:f8:71:92:08:98:d3:
                    e0:73:c2:1a:98:b5:a6:92:af:c7:62:4b:cd:e3:ba:
                    3e:81:53:55:01:87:eb:03:e3:4b:c6:0e:64:6f:3d:
                    fc:d0:f6:a9:e1:7a:52:cb:c7:7a:a0:50:fa:7b:21:
                    76:a5:91:01:06:5d:ac:4a:fa:10:53:e5:1d:f7:1d:
                    42:81:e9:ce:33:1a:0f:02:6b:c0:f4:56:fe:45:38:
                    95:b8:5b:73:f9:03:d9:98:8d:5d:e6:f4:2a:9f:a9:
                    1d:dd:22:bb:94:d0:28:4f:0f:58:5e:9d:60:5b:bc:
                    9d:ca:07:ba:ba:b4:ff:de:e1:3f:a0:c5:36:c4:d3:
                    f5:59:3d:62:e9:93:05:76:7c:0c:bb:31:cc:b4:7c:
                    6e:6a:fb:3a:1f:7d:51:29:d9:6e:b7:39:e9:5f:7b:
                    ce:6f:19:23:71:dc:5c:67:f8:e3:29:cc:26:b3:8a:
                    b7:61:16:11:5c:e1:94:cf:82:ec:2a:35:d0:2c:0a:
                    ae:ec:f1:85:13:ba:12:94:ab:02:47:4c:8e:61:b4:
                    fc:a6:e3:3c:95:fd:0d:20:77:de:c2:e3:d1:42:cb:
                    59:ac:c1:0c:3a:e9:85:c5:50:f4:f3:92:58:26:58:
                    64:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:18:EC:D2:A8:D9:1E:53:17:71:49:9C:D7:7C:CE:BE:DF:76:A3:43
            X509v3 Authority Key Identifier:
                keyid:C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:55:7c:14:60:f1:86:77:ea:56:13:20:03:5f:4a:24:49:49:
         74:57:47:79:98:23:44:fd:9d:40:55:0e:f8:04:92:c5:0d:c9:
         41:0c:96:9d:f8:84:55:39:44:b4:a4:aa:26:1c:b0:05:c6:c5:
         00:b4:71:18:d0:3c:7d:8f:66:50:b4:dd:24:48:bf:43:65:ef:
         7f:82:3b:02:53:90:59:d8:5f:61:52:72:ba:11:17:4b:f2:b6:
         e9:7b:ac:d3:21:af:cf:3c:e1:52:e5:45:4a:b6:95:f7:c8:70:
         bd:e7:04:3f:48:35:f1:3c:db:9d:30:42:60:0c:67:cd:d0:ff:
         ae:c3:58:98:63:38:40:c5:66:bf:9f:24:1d:23:c5:f9:e8:1f:
         b8:da:4f:fc:37:1b:e9:51:3e:e9:53:46:a6:87:0b:89:0b:ff:
         5d:7e:02:0b:4a:d4:8d:64:97:13:35:2e:77:d3:6b:6b:0d:44:
         c9:da:40:b9:ed:c9:9b:d3:4c:de:a5:7f:a4:3a:f0:06:d5:84:
         d4:18:15:04:7f:3d:19:f3:7e:b7:46:fe:6a:78:d3:63:a1:81:
         1e:36:f9:f0:fc:ed:a0:22:0a:45:b2:f6:c7:ed:5d:9c:74:4d:
         45:dd:83:04:45:96:2a:f2:d6:c6:42:44:54:0d:60:a1:f5:ce:
         b0:e6:60:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:05:04 2025 by rpki-client