Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
File:                     wR_52bpVx9lQjFpNwe7MDilWHC4.mft (raw, json)
Hash identifier:          AOEiu/KLibMPfyYJB+g0o1J/BMfkijDAyGu+lFmyr2M=
Subject key identifier:   1B:7B:59:17:BE:8C:48:85:5B:DD:84:30:1A:33:4A:DE:E1:70:1C:8C
Authority key identifier: C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E
Certificate issuer:       /CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
Certificate serial:       0194BCAA14A4E1038F0FD5E5BE022E162EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 14:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:50 +0000
Files and hashes:         1: wR_52bpVx9lQjFpNwe7MDilWHC4.crl (hash: 4OhILzt/1TI2pvGtBgLv0mL0LnjxY9Vo51wqKyA9BRA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:14:a4:e1:03:8f:0f:d5:e5:be:02:2e:16:2e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
        Validity
            Not Before: Jan 31 14:00:50 2025 GMT
            Not After : Feb  1 14:00:50 2025 GMT
        Subject: CN=1b7b5917be8c48855bdd84301a334adee1701c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:37:64:7d:9f:c3:13:55:96:0e:2d:5c:18:a0:
                    25:96:65:40:74:de:cd:fc:7f:e8:80:0d:d4:19:2d:
                    1b:99:4b:63:f3:a2:53:48:91:1d:71:89:c1:d9:bc:
                    d4:d3:eb:eb:9d:5d:d1:40:e5:b5:85:1e:f6:68:2c:
                    39:55:6f:b0:3b:9e:aa:94:d6:8f:5b:72:fb:52:ec:
                    fc:3c:5f:71:3f:fa:f6:9e:05:69:d4:30:fd:9b:d8:
                    dc:cc:f1:b3:9a:eb:77:73:4b:f3:06:94:d7:46:b0:
                    a3:89:b9:70:51:ed:68:0f:14:24:41:fd:58:92:5f:
                    2b:b0:ea:97:c8:eb:33:d8:44:41:fb:36:93:f3:c8:
                    e9:b6:3e:da:f7:2f:60:ed:62:53:5e:1a:6d:be:a8:
                    e3:56:ea:dc:44:31:91:5b:da:c4:54:83:66:ae:14:
                    28:4e:55:f5:86:17:15:2e:49:e2:64:e0:ba:dc:55:
                    25:ba:f3:0b:ab:22:5c:23:11:b5:6c:0a:79:83:e1:
                    f9:58:67:9f:1b:54:18:fc:47:d1:3a:9e:32:f2:21:
                    10:29:65:bb:c3:6f:6f:36:d0:5b:fd:2e:83:a8:e7:
                    a3:16:2c:90:01:f4:7f:fb:05:15:13:2f:ba:73:52:
                    01:ca:3c:0f:98:d2:a4:1a:7d:3f:e7:20:fc:b4:25:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7B:59:17:BE:8C:48:85:5B:DD:84:30:1A:33:4A:DE:E1:70:1C:8C
            X509v3 Authority Key Identifier:
                keyid:C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:79:b0:6f:a2:3a:7d:4a:68:c5:c0:f9:d9:76:cd:bf:b6:00:
         cd:82:e7:be:a3:c6:db:da:8a:ed:8c:bb:d2:64:ba:d3:0c:6d:
         c4:c7:03:47:f6:ba:23:0b:c6:29:dc:cf:8b:77:45:c6:ec:f8:
         50:36:32:d3:f2:8a:01:be:78:91:da:98:e9:ce:51:c9:c6:1d:
         1c:b2:f4:3f:05:10:ae:bb:08:98:38:7d:e8:93:6b:df:c5:0b:
         1e:eb:89:e2:9e:21:6f:18:b1:29:16:be:a6:b2:84:2e:74:7c:
         23:b8:91:55:88:e2:2b:18:9c:c5:fe:d7:d9:79:d5:72:8a:db:
         a4:c5:0c:26:c2:b3:28:4a:4f:be:1c:ff:be:f8:85:59:79:38:
         91:67:f9:54:c9:81:3d:80:06:89:25:b0:dc:a3:4a:7f:3d:f3:
         ca:49:27:2c:17:3f:2b:67:b8:e9:92:36:0a:d5:47:f4:21:6c:
         93:dd:b0:2a:f8:2b:04:00:b5:6e:f9:b1:4c:bb:f0:a2:ff:09:
         c9:00:8a:8a:30:3d:2b:6c:24:0b:ab:56:e8:99:8d:a8:53:f7:
         cf:9b:23:5a:57:46:0c:70:90:95:45:63:ea:45:60:41:0d:b4:
         91:ef:ce:77:7d:b0:65:89:2e:94:6c:ba:7e:4f:ea:5f:3e:3c:
         29:5e:70:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:46 2025 by rpki-client