Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
File:                     8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft (raw, json)
Hash identifier:          XhHfCFS+pKTHsCyCQON9oC03YVSBDnoVvt5jhx2vCGc=
Subject key identifier:   2A:2E:9D:9B:0E:88:A7:69:9A:EA:3B:29:64:E8:48:79:5D:AA:CD:08
Authority key identifier: F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48
Certificate issuer:       /CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
Certificate serial:       0194BBCEF9D11AE618B8F2295F450FB29FDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 10:01:31 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:31 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:31 +0000
Files and hashes:         1: 8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl (hash: KxqLdGwki7n7A6CMcpVe1lLWE8ZujSQUQ7IJA8dBbOo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:f9:d1:1a:e6:18:b8:f2:29:5f:45:0f:b2:9f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
        Validity
            Not Before: Jan 31 10:01:31 2025 GMT
            Not After : Feb  1 10:01:31 2025 GMT
        Subject: CN=2a2e9d9b0e88a7699aea3b2964e848795daacd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:b8:7a:3a:38:f5:aa:f7:80:90:ab:cf:2d:
                    58:5f:22:93:39:88:58:cc:80:5f:ce:c1:5e:9f:f7:
                    be:19:aa:c4:0c:c8:11:10:26:32:5a:70:a9:ef:d3:
                    61:89:77:49:7e:3b:f8:1b:65:a9:6c:14:f6:f3:d3:
                    21:c0:15:50:4e:1b:30:90:a7:4f:55:bf:7a:23:ec:
                    4a:04:d0:08:8e:22:3a:9b:0b:06:a5:89:cb:3c:45:
                    0e:5b:e1:45:85:87:2f:fd:9e:3e:5f:64:4f:78:ee:
                    0c:e6:bd:4f:86:9c:37:3f:89:36:0c:96:79:05:d8:
                    38:7c:19:87:5e:c5:f9:d5:0d:3f:c8:2f:f9:73:56:
                    06:88:32:17:fe:ba:ad:69:c8:cb:b1:4c:17:e5:d8:
                    f0:73:8a:b7:34:78:91:0b:2f:85:31:a2:5a:04:e0:
                    94:77:15:eb:15:52:39:a5:b2:af:e8:41:ea:49:c9:
                    03:83:e1:95:87:8f:d1:7a:b3:10:fd:a6:f5:3c:e4:
                    2d:76:35:38:d3:de:e1:d2:8e:03:a9:0d:3f:64:6d:
                    73:65:18:51:63:1c:67:b3:e9:6a:a6:39:f2:76:e5:
                    66:0f:58:58:59:6e:15:c1:8f:d4:48:0e:3d:88:84:
                    01:a3:a9:51:a9:44:3d:a0:ed:be:6b:a4:65:6b:b8:
                    c4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2E:9D:9B:0E:88:A7:69:9A:EA:3B:29:64:E8:48:79:5D:AA:CD:08
            X509v3 Authority Key Identifier:
                keyid:F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:80:58:dd:a5:a3:48:62:38:0e:11:36:94:df:09:57:34:4c:
         25:b6:f8:4f:93:e9:f1:aa:37:66:c0:05:f3:09:e8:0a:22:24:
         8f:2b:e7:bd:a9:3f:17:5c:19:b6:b1:60:4b:9b:1c:9a:3b:15:
         c3:85:3e:2a:c8:0f:c1:c7:c2:45:77:a9:b6:55:e7:c2:1a:1c:
         30:c4:2b:c6:09:1c:97:73:f1:a9:61:77:47:01:04:c6:1f:2f:
         df:32:91:ec:e7:53:2a:d8:e9:9f:57:7f:dd:b0:6d:09:3e:55:
         75:41:db:78:ef:c0:66:ed:83:32:6a:25:9a:30:5e:89:88:a0:
         af:7d:f7:db:37:be:de:80:b0:fa:52:69:5f:ff:2a:80:52:c4:
         64:f9:22:b6:c6:c8:4b:95:b0:bd:49:91:d2:a6:50:c3:4f:71:
         8d:f9:68:46:c2:e8:ae:c0:d3:0f:60:01:73:7b:e9:17:e2:d9:
         89:52:48:22:8a:47:59:a1:a4:f1:03:55:3d:b0:be:25:97:57:
         1a:c1:81:85:5f:56:4d:41:5a:23:dc:7c:23:0a:17:b4:7d:2b:
         37:b9:e9:f9:96:27:c3:9e:12:52:55:a9:d7:58:d3:0e:7a:ff:
         68:bb:c9:2f:a7:e8:b4:55:f5:2a:e7:cb:ca:11:11:34:08:18:
         bc:d9:19:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:10:04 2025 by rpki-client