Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.mft
File:                     4SGVC1Am_t2W9uUCmPkLrC28T-I.mft (raw, json)
Hash identifier:          laT31wN8cXFh3zjSqGxet+eCRw9jN8lb08XJM9GFKOM=
Subject key identifier:   66:05:6F:CD:B1:4F:0C:7C:FB:21:84:CB:21:F8:82:0C:B7:B9:9C:A5
Authority key identifier: E1:21:95:0B:50:26:FE:DD:96:F6:E5:02:98:F9:0B:AC:2D:BC:4F:E2
Certificate issuer:       /CN=e121950b5026fedd96f6e50298f90bac2dbc4fe2
Certificate serial:       0194BCAA3497C0035C7A09AC7FFDB5D7906B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SGVC1Am_t2W9uUCmPkLrC28T-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.mft
Manifest number:          0453
Signing time:             Fri 31 Jan 2025 14:00:58 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:58 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:58 +0000
Files and hashes:         1: 4SGVC1Am_t2W9uUCmPkLrC28T-I.crl (hash: L74Jw120c9DnzjeqNtMyjsNlVsGrCTdEd4sbol9N2+U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:34:97:c0:03:5c:7a:09:ac:7f:fd:b5:d7:90:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e121950b5026fedd96f6e50298f90bac2dbc4fe2
        Validity
            Not Before: Jan 31 14:00:58 2025 GMT
            Not After : Feb  1 14:00:58 2025 GMT
        Subject: CN=66056fcdb14f0c7cfb2184cb21f8820cb7b99ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:44:22:35:17:ba:14:d7:7b:43:92:79:5c:
                    8b:80:65:3a:cd:e6:84:1c:2b:b8:fa:fd:f1:c8:c0:
                    34:31:d9:a9:47:ca:99:55:33:58:21:b2:4e:92:5b:
                    3d:b4:23:f7:64:9f:0f:c5:9a:ea:70:c2:24:06:4d:
                    8d:d8:7f:09:6d:27:56:98:32:c2:b3:95:9c:85:1b:
                    38:f6:cf:f0:65:21:4f:67:be:71:68:72:20:c6:6d:
                    4b:88:89:c7:41:5b:10:e5:18:74:3f:6d:d3:cd:fe:
                    e2:43:8a:28:3b:0e:38:2f:8b:42:66:d5:36:cd:f0:
                    9e:71:a2:ea:bc:a7:d0:a2:22:ec:9e:6d:e5:16:fe:
                    1f:8e:a0:11:89:69:c9:ff:62:1e:fd:c0:7a:32:4a:
                    63:2b:50:75:0b:06:55:94:6f:da:14:1f:46:d6:66:
                    fc:e4:98:d7:35:50:48:1f:6b:f8:23:10:51:da:36:
                    c6:6c:8b:2e:97:fe:aa:83:63:2f:7c:5a:14:a4:24:
                    7c:98:60:3d:f5:dc:1d:34:9e:44:89:6a:5b:ed:d2:
                    5b:33:08:1f:48:b6:fa:fe:eb:58:c0:49:e9:58:c4:
                    53:5e:0d:f2:d0:4b:76:b1:b8:a3:36:4c:d6:88:17:
                    8b:4f:56:39:29:61:85:ab:a0:31:fe:61:76:67:57:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:05:6F:CD:B1:4F:0C:7C:FB:21:84:CB:21:F8:82:0C:B7:B9:9C:A5
            X509v3 Authority Key Identifier:
                keyid:E1:21:95:0B:50:26:FE:DD:96:F6:E5:02:98:F9:0B:AC:2D:BC:4F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SGVC1Am_t2W9uUCmPkLrC28T-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/67547d-4cef-423f-87d9-82b0bbc6799f/1/4SGVC1Am_t2W9uUCmPkLrC28T-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:25:7b:2b:ef:d0:7a:2b:4d:08:a4:13:e0:9e:79:9d:f0:87:
         25:6a:35:fe:de:4b:ea:a7:7d:cd:f9:2d:04:de:ff:52:5d:c3:
         65:75:4d:2e:65:d7:31:b6:c7:56:d0:b6:26:6b:fe:47:3e:a1:
         40:ce:9a:01:f4:fe:72:1a:b8:e6:67:88:33:d3:25:d0:82:63:
         fd:bb:42:81:d1:8c:58:4c:ed:95:49:a0:5d:dd:93:5d:3b:fc:
         34:b3:22:b3:a8:51:68:05:60:38:30:95:f5:b8:45:56:f1:63:
         be:1c:18:8e:88:4c:1f:4e:de:a2:fa:41:7e:6b:0e:7e:0b:52:
         9b:7e:85:94:34:33:61:84:5d:ea:ed:e8:7a:bd:a7:7b:11:78:
         7d:69:bb:52:25:50:ec:bc:6d:3a:78:d7:f2:b7:44:1c:33:be:
         72:79:98:c4:53:0d:a6:9c:d7:50:88:b3:e9:08:21:f0:0d:a5:
         8a:b4:77:e4:d3:f3:63:25:18:28:89:8b:a1:09:26:ca:aa:31:
         9b:dc:eb:fa:c8:87:85:bc:5c:ed:50:5d:c7:e3:7e:de:74:1d:
         0d:ed:b3:78:e6:7f:95:45:e8:f5:1b:af:91:b9:26:df:fa:34:
         04:cd:eb:de:84:16:34:5b:6b:19:4f:9c:1b:76:9f:75:41:3a:
         ae:52:82:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:46 2025 by rpki-client