Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
File:                     gAFl6Volo3uHPPup9TJKfiU7vdg.mft (raw, json)
Hash identifier:          guNS4EwLMGT6S+IwSWKYabP0ZTRWP3Prb7a+HutbF2w=
Subject key identifier:   E6:EE:04:C6:1A:02:E0:49:94:F1:53:60:02:40:DB:8E:0C:A8:CE:C1
Authority key identifier: 80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8
Certificate issuer:       /CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
Certificate serial:       0194BBCE8481C49689F536763AE7875C8855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft
Manifest number:          1425
Signing time:             Fri 31 Jan 2025 10:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:01 +0000
Files and hashes:         1: gAFl6Volo3uHPPup9TJKfiU7vdg.crl (hash: iAzFGvISlZr3qbtKwjLm8peAKrtIv8rA4KARoKO3JNE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:84:81:c4:96:89:f5:36:76:3a:e7:87:5c:88:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=800165e95a25a37b873cfba9f5324a7e253bbdd8
        Validity
            Not Before: Jan 31 10:01:01 2025 GMT
            Not After : Feb  1 10:01:01 2025 GMT
        Subject: CN=e6ee04c61a02e04994f153600240db8e0ca8cec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:37:28:8d:a9:dd:33:f2:2b:f6:21:f0:66:
                    79:a6:d3:c7:73:34:b5:2b:8a:06:04:02:7b:ad:f1:
                    28:ad:a0:99:a5:5c:a0:69:d8:f8:0e:a6:14:08:25:
                    76:48:20:e3:ed:b1:ef:76:d2:68:71:0c:ad:a1:e4:
                    8a:3f:ae:ea:60:ef:74:1e:c4:ee:ce:37:a0:9e:17:
                    81:d5:35:76:a4:3e:6b:5e:9a:c9:20:3e:4a:f3:59:
                    47:ca:11:9f:e2:f2:a6:5c:a3:e8:82:11:3d:d5:01:
                    29:63:89:58:a4:0b:ee:6c:10:ec:28:8d:cb:03:42:
                    df:2e:b4:f3:ab:ef:34:b6:bc:39:bd:2c:b7:c4:62:
                    3d:93:07:59:e9:d2:2f:16:0a:83:69:62:95:84:a1:
                    e5:96:86:f0:77:ef:e2:78:fd:99:ee:84:fc:c2:96:
                    99:59:5f:e1:05:08:a6:a8:54:8f:40:93:87:bd:70:
                    1b:36:98:1f:c2:38:c7:dd:13:39:68:43:b2:a5:09:
                    e9:ce:16:31:84:86:b2:7c:7e:d5:f1:85:83:45:3b:
                    b7:9b:e9:02:09:e4:f9:ff:64:b0:5b:35:2b:de:58:
                    61:13:2d:56:d4:60:4a:3f:0b:20:30:bc:59:7a:5f:
                    5f:6f:fb:44:3a:85:73:38:ae:11:b2:b6:69:30:e9:
                    70:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EE:04:C6:1A:02:E0:49:94:F1:53:60:02:40:DB:8E:0C:A8:CE:C1
            X509v3 Authority Key Identifier:
                keyid:80:01:65:E9:5A:25:A3:7B:87:3C:FB:A9:F5:32:4A:7E:25:3B:BD:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAFl6Volo3uHPPup9TJKfiU7vdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4bd469-4925-4eee-b6a2-d9aeb93051ab/1/gAFl6Volo3uHPPup9TJKfiU7vdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9f:ce:8c:d9:64:e7:39:6e:a1:b2:0f:88:c6:4e:be:fa:3d:
         9a:29:f9:4f:14:6c:92:7f:19:9e:42:3e:99:a0:09:f1:69:4d:
         01:4d:21:3d:03:09:37:d1:92:45:dd:4c:b5:06:e4:ef:ec:ec:
         e1:ab:68:df:a9:f9:d1:c6:c3:3e:00:fb:bb:59:ad:97:4f:74:
         ab:00:8b:c6:3d:d0:7e:e5:75:6c:f0:1a:89:00:4e:75:89:39:
         17:7b:89:fd:74:10:57:ab:58:e3:3a:d1:87:f8:a5:19:ae:b4:
         e2:8e:63:bd:b3:eb:3c:a7:79:48:cd:5a:a7:fc:a6:3c:c3:22:
         49:d5:c1:93:b2:6c:a3:50:19:46:1e:21:c8:a3:0a:1d:28:11:
         47:be:49:db:35:3b:af:3f:1f:27:5d:8c:a9:bf:b4:ea:9b:25:
         11:b2:57:7a:25:a0:b7:72:8a:a9:08:7b:7b:e4:22:76:8b:9f:
         ae:e7:77:80:09:e2:6e:6f:bc:a8:f0:f6:da:aa:1c:1b:e2:6d:
         99:fc:bc:05:84:f0:9b:33:4e:6d:78:35:d9:90:2a:80:55:e3:
         5c:5d:51:7f:82:e6:95:d6:82:dc:2e:39:14:07:aa:f9:76:b7:
         6c:25:4c:3d:da:8d:2e:01:77:81:56:1e:a1:80:ff:be:5e:8b:
         8f:8a:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:32:28 2025 by rpki-client