Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf4f41-2797-41b9-baf6-29762c1aaf65/1/iYDaJ6VQ15vmUa15rnGcz8vFo28.mft
File:                     iYDaJ6VQ15vmUa15rnGcz8vFo28.mft (raw, json)
Hash identifier:          39lFSdD17zPPhMvo7rZtQwqDqf2StHqYWPbyMLnXj2Q=
Subject key identifier:   FB:52:76:3C:40:86:B1:5B:7D:21:57:41:7C:6A:D4:D3:F0:FE:C8:03
Authority key identifier: 89:80:DA:27:A5:50:D7:9B:E6:51:AD:79:AE:71:9C:CF:CB:C5:A3:6F
Certificate issuer:       /CN=8980da27a550d79be651ad79ae719ccfcbc5a36f
Certificate serial:       0194BC3CA84AB8F0B56C6288F80BB76DA0D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iYDaJ6VQ15vmUa15rnGcz8vFo28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/bf4f41-2797-41b9-baf6-29762c1aaf65/1/iYDaJ6VQ15vmUa15rnGcz8vFo28.mft
Manifest number:          0194
Signing time:             Fri 31 Jan 2025 12:01:19 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:19 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:19 +0000
Files and hashes:         1: iYDaJ6VQ15vmUa15rnGcz8vFo28.crl (hash: rkMs3IO59BrzRV+cKuyca12x94n88p0lhNNNJCikIqw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:a8:4a:b8:f0:b5:6c:62:88:f8:0b:b7:6d:a0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8980da27a550d79be651ad79ae719ccfcbc5a36f
        Validity
            Not Before: Jan 31 12:01:19 2025 GMT
            Not After : Feb  1 12:01:19 2025 GMT
        Subject: CN=fb52763c4086b15b7d2157417c6ad4d3f0fec803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d5:45:9e:32:d4:2b:e2:f3:fa:39:01:ae:2b:
                    1c:bb:5c:18:ce:64:14:f9:b1:7b:9c:bb:ff:7e:74:
                    3b:cc:8b:a4:ae:9a:e5:a4:8a:17:ad:10:fb:b3:90:
                    df:ac:4d:c3:d9:6c:cd:ff:db:13:1e:a7:5f:dd:1c:
                    47:6a:53:d1:c6:8a:89:07:bb:49:2f:cf:a8:8e:65:
                    0e:83:67:d0:fd:c5:79:37:0e:6b:f8:84:f8:e4:32:
                    c0:f8:d0:81:32:ca:c1:0b:6a:47:df:e4:d5:6e:3a:
                    5a:3d:7a:5f:fb:2b:33:77:cf:47:11:9b:a8:94:97:
                    ba:41:47:76:5e:20:b5:56:8d:a5:cf:56:a3:a8:7a:
                    af:f7:63:ba:f7:07:2e:38:5c:ef:4d:8d:17:d9:27:
                    04:5f:a0:1b:95:ba:07:2f:4a:fe:24:c5:40:d9:02:
                    5d:16:43:44:b3:f1:45:d7:85:7b:de:83:62:5e:ad:
                    1c:36:5e:ad:f7:2c:79:77:05:87:17:e2:59:49:10:
                    94:b4:eb:6f:c9:fd:9d:08:e3:26:0c:20:db:ae:b6:
                    48:db:e7:0e:9f:c5:72:9b:2d:71:b3:73:e9:82:09:
                    e2:79:fc:40:ce:18:00:95:cf:8d:77:26:78:1b:09:
                    26:c9:86:0c:34:e7:29:dc:ab:fa:8a:95:0c:4c:f8:
                    89:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:52:76:3C:40:86:B1:5B:7D:21:57:41:7C:6A:D4:D3:F0:FE:C8:03
            X509v3 Authority Key Identifier:
                keyid:89:80:DA:27:A5:50:D7:9B:E6:51:AD:79:AE:71:9C:CF:CB:C5:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYDaJ6VQ15vmUa15rnGcz8vFo28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf4f41-2797-41b9-baf6-29762c1aaf65/1/iYDaJ6VQ15vmUa15rnGcz8vFo28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf4f41-2797-41b9-baf6-29762c1aaf65/1/iYDaJ6VQ15vmUa15rnGcz8vFo28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cf:ab:2f:52:31:1c:bb:10:6e:9a:6e:fe:73:5e:68:14:75:
         9b:3b:af:11:cc:88:5d:36:5e:ec:66:5e:b6:97:7c:7f:51:3f:
         2a:c9:b9:2d:3b:df:c4:4c:cc:b8:ac:d1:0a:ab:58:ec:70:ef:
         fd:c6:13:7c:f1:01:2a:cf:64:71:43:d3:83:36:ee:f9:77:20:
         68:73:9a:f6:11:9d:ea:13:c7:c3:99:a6:3b:07:96:bd:a7:7b:
         f5:79:65:ce:62:02:64:92:66:0e:0b:df:98:cc:10:32:3b:f4:
         0a:79:b9:b4:55:41:0b:b8:59:74:79:b5:a5:db:12:b9:16:58:
         ec:f9:3f:f8:f4:fd:c3:24:5a:2e:aa:43:9b:07:03:89:3f:b0:
         e7:c4:6c:90:09:40:5b:5b:ec:98:a7:96:84:3a:8e:fb:13:34:
         6b:a3:77:c0:57:8d:4a:81:d9:27:43:c4:74:08:44:7c:3a:94:
         0d:e6:d5:43:90:f3:20:82:6f:b6:30:60:97:9b:4f:8c:7f:26:
         1b:e9:04:4c:5b:1c:54:e1:16:88:57:7b:cf:2d:9b:b9:5c:cb:
         1c:d5:15:a4:a6:c9:41:09:69:6b:0e:ea:a4:cd:26:59:6b:3a:
         4e:60:7b:18:d5:e2:6a:d5:41:45:e7:74:ad:c2:c2:73:49:f3:
         19:82:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:43 2025 by rpki-client