Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3ace88-7021-4c39-9dd9-b893bb07fe50/1/mhU_Od12IydNhl3LiFChYTKkIgY.mft
File:                     mhU_Od12IydNhl3LiFChYTKkIgY.mft (raw, json)
Hash identifier:          iLVIEIQWqoPJb6KokhxKAzAzuQckB+/r0EGRYUKinT4=
Subject key identifier:   A9:CF:7D:AC:2F:BE:3B:3C:5B:F5:21:E2:83:4B:11:82:41:42:60:B3
Authority key identifier: 9A:15:3F:39:DD:76:23:27:4D:86:5D:CB:88:50:A1:61:32:A4:22:06
Certificate issuer:       /CN=9a153f39dd7623274d865dcb8850a16132a42206
Certificate serial:       0194BD4EACDC6013185A6719D98CE9328B23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mhU_Od12IydNhl3LiFChYTKkIgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/3ace88-7021-4c39-9dd9-b893bb07fe50/1/mhU_Od12IydNhl3LiFChYTKkIgY.mft
Manifest number:          01B5
Signing time:             Fri 31 Jan 2025 17:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:37 +0000
Files and hashes:         1: mhU_Od12IydNhl3LiFChYTKkIgY.crl (hash: YjyP78V1gMpJFuM0Rc6Qwc71Uty+7CiiXerTOOvYgco=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:ac:dc:60:13:18:5a:67:19:d9:8c:e9:32:8b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a153f39dd7623274d865dcb8850a16132a42206
        Validity
            Not Before: Jan 31 17:00:37 2025 GMT
            Not After : Feb  1 17:00:37 2025 GMT
        Subject: CN=a9cf7dac2fbe3b3c5bf521e2834b1182414260b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:12:97:c0:2a:30:33:6d:eb:54:fc:bb:de:
                    b4:10:6c:30:8e:3f:09:fc:2a:a3:84:8c:1d:6d:c5:
                    69:bc:de:29:83:fd:ea:44:2b:8c:3a:ce:3b:c7:bf:
                    4e:5b:32:0d:13:f9:4b:9e:7b:d7:6e:bb:e8:bc:27:
                    1f:00:67:17:fe:ac:9a:02:db:7e:46:58:42:fb:01:
                    e7:93:17:5c:c8:17:2b:f3:98:34:c2:07:db:f7:6a:
                    3d:fe:06:f0:9c:04:3c:c1:da:e1:d7:e9:6b:75:7f:
                    43:b2:14:ba:e2:3f:f7:5d:1d:57:ec:aa:af:39:90:
                    4f:87:ea:fa:01:6f:aa:d0:fd:cf:7e:19:b9:a6:02:
                    9b:a6:11:a1:d7:7f:1e:18:03:1f:74:3b:76:df:28:
                    41:eb:e5:02:74:70:f3:1b:05:33:2a:e6:a8:6c:55:
                    79:38:23:c6:a6:ef:e9:f5:2d:32:7f:f2:1c:6b:b2:
                    4d:ed:af:37:94:ee:71:be:41:4a:26:83:63:25:d2:
                    0d:c8:16:63:6e:d1:0b:74:a3:aa:73:a1:9c:55:7b:
                    06:41:78:05:23:a2:d3:0f:76:44:e4:4f:72:6a:80:
                    01:63:73:3c:f5:84:bc:52:64:9f:5c:a6:26:3d:90:
                    5b:0c:45:29:39:f2:e4:3d:55:0d:73:d1:a1:6e:64:
                    42:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CF:7D:AC:2F:BE:3B:3C:5B:F5:21:E2:83:4B:11:82:41:42:60:B3
            X509v3 Authority Key Identifier:
                keyid:9A:15:3F:39:DD:76:23:27:4D:86:5D:CB:88:50:A1:61:32:A4:22:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhU_Od12IydNhl3LiFChYTKkIgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3ace88-7021-4c39-9dd9-b893bb07fe50/1/mhU_Od12IydNhl3LiFChYTKkIgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3ace88-7021-4c39-9dd9-b893bb07fe50/1/mhU_Od12IydNhl3LiFChYTKkIgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8b:1c:38:96:58:2f:f3:be:f5:cf:d8:0d:7a:e3:c1:e3:86:
         1f:5e:3b:99:36:33:51:31:ad:31:fb:3f:58:b7:79:ac:be:1d:
         fa:c9:95:42:f9:cd:a6:3b:f8:48:cb:64:08:50:5f:53:39:ee:
         66:dc:b7:3c:60:83:88:cb:b1:49:fb:8f:71:e2:bd:43:96:ea:
         83:b7:e5:c7:97:d3:47:d2:77:5c:a6:56:36:12:8d:97:ef:fe:
         9a:08:62:79:e4:c0:49:ca:33:9d:15:df:94:a2:0f:3e:c4:fa:
         df:b0:75:b3:14:f7:af:a9:00:1f:e3:62:02:1c:6e:a5:ef:4b:
         e1:fc:76:88:75:61:fe:f2:52:1a:34:95:4f:42:db:31:e0:e2:
         41:d0:f8:67:07:b7:d0:eb:ae:c1:54:19:67:ca:32:e3:a8:28:
         01:ea:fa:57:04:82:6a:31:4a:f2:44:2c:85:57:9c:d7:5e:21:
         ae:84:f3:aa:a9:c7:88:f0:1b:93:c0:b5:40:8b:9a:4c:c3:58:
         25:e0:2b:25:21:3f:d8:16:e6:bc:25:aa:91:9a:27:c3:95:b2:
         f6:42:e6:03:c8:ae:86:bb:23:ad:a1:3e:e6:52:fa:67:0a:21:
         63:4d:b2:55:c4:16:d1:8b:c0:28:5f:fa:3a:42:05:85:34:da:
         22:b4:df:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:51 2025 by rpki-client