Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File:                     1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier:          B+WHjmhjEwyTAKfYvfYtZkxEz5KB2GAkwBvK8VfcbvI=
Subject key identifier:   56:CA:93:6D:13:1D:29:CD:7B:9A:23:DB:7C:52:D8:FD:5F:0F:F6:8A
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer:       /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial:       0194BBCEEC94704ED49E1B837F3B00686CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 10:01:27 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:27 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:27 +0000
Files and hashes:         1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: fwRLZY4epXMpbE4Oue8lE/MSZd4H4+Tfkigw8WBiYL4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:ec:94:70:4e:d4:9e:1b:83:7f:3b:00:68:6c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
        Validity
            Not Before: Jan 31 10:01:27 2025 GMT
            Not After : Feb  1 10:01:27 2025 GMT
        Subject: CN=56ca936d131d29cd7b9a23db7c52d8fd5f0ff68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d3:f3:e2:e1:b8:6c:14:b8:a0:98:29:d9:bd:
                    03:2e:06:6f:48:18:ef:29:dd:fa:ea:fa:f8:0e:99:
                    ad:eb:6c:dc:cd:ff:73:17:30:da:aa:76:f4:23:b3:
                    ff:5a:c0:2b:51:96:62:31:14:b8:6a:c5:ec:55:73:
                    00:f2:d5:76:09:f6:60:28:96:c9:cc:b3:89:9a:a5:
                    26:1e:81:cc:18:c1:23:db:8b:61:b1:8e:0d:af:f5:
                    9f:0a:b9:ef:81:92:a6:29:36:96:15:d6:b4:8c:92:
                    6e:81:79:28:16:1e:65:b8:0c:32:18:ff:1e:fa:33:
                    31:11:cf:fc:93:82:a2:c1:ae:08:02:a9:8a:c4:bb:
                    bb:8c:f8:49:8d:86:a5:92:00:de:02:c4:bb:28:d1:
                    00:56:c0:e6:59:64:ab:4f:9c:2d:41:66:af:d8:23:
                    1f:73:3b:b4:9c:16:e9:98:70:6d:e2:2f:df:38:04:
                    1e:d9:5c:2d:fe:cf:a9:59:89:db:ef:9e:2f:29:90:
                    a4:d6:87:3d:0d:3d:0e:e3:5b:d0:cc:ee:b2:05:3e:
                    76:41:c8:bd:92:1c:4b:a7:47:a8:88:cb:05:0c:88:
                    79:e6:e1:2c:67:e1:53:68:4f:27:64:28:d3:8d:ab:
                    c1:00:f2:2d:ee:72:00:79:99:ff:cd:f2:67:03:07:
                    df:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CA:93:6D:13:1D:29:CD:7B:9A:23:DB:7C:52:D8:FD:5F:0F:F6:8A
            X509v3 Authority Key Identifier:
                keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:2f:8a:84:2f:8d:38:c0:03:02:66:d3:2d:7d:d6:20:ae:0b:
         24:d1:6c:a1:45:28:59:8e:c3:74:1b:55:fe:8f:c0:a4:a8:41:
         c3:dd:36:4f:db:d4:0d:9e:9f:1f:65:c0:cc:61:ca:30:76:86:
         c4:fc:ad:06:bb:8a:73:cc:eb:4c:b1:06:de:fa:13:bf:95:87:
         86:c7:63:71:3d:1d:f6:63:b8:dc:77:4f:f1:df:4d:c2:68:9d:
         ee:40:bb:57:c0:d4:45:cb:d3:2f:1b:ad:de:56:ed:a0:ab:60:
         bd:95:99:89:f7:5c:9e:50:3e:e6:58:9b:10:fa:c8:4f:3d:b2:
         c2:a5:b9:91:94:83:68:a9:e0:f2:73:87:3e:21:cb:5c:50:76:
         93:fc:70:04:1b:69:e2:71:ee:27:77:07:c9:65:3d:5c:d5:a1:
         79:4d:86:72:bc:dd:f9:24:30:a3:3e:9a:f5:ee:55:19:44:be:
         89:3f:37:a0:64:11:0a:36:0f:e0:c1:ec:29:f9:bb:b0:83:ff:
         8c:ca:8a:ae:83:3b:bf:55:6d:3a:ce:3d:f3:21:90:40:56:53:
         f0:74:f3:d0:b2:f5:47:67:86:1a:71:0e:ec:3d:b0:3c:8c:be:
         16:58:b5:ac:ea:aa:95:41:23:76:b6:51:63:ab:1d:de:c3:9e:
         21:59:6e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:48 2025 by rpki-client