Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File:                     0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier:          MLHncpAVq+REiJ3A40YtSRQnQYOmyl3mwMg02NxYBUc=
Subject key identifier:   7C:B0:13:19:E0:4D:71:55:5F:15:15:7E:A1:33:C2:24:87:42:3C:10
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer:       /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial:       0194BBCEC8F6843F2DCDBA48229C3930A1E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 10:01:18 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:18 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:18 +0000
Files and hashes:         1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: dn/8Plal80h6DlA11eOg6Gpj4LSj+kdo6NJJ94XlDqI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:c8:f6:84:3f:2d:cd:ba:48:22:9c:39:30:a1:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
        Validity
            Not Before: Jan 31 10:01:18 2025 GMT
            Not After : Feb  1 10:01:18 2025 GMT
        Subject: CN=7cb01319e04d71555f15157ea133c22487423c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d3:c4:0f:67:f1:fb:47:1b:90:97:40:41:5d:
                    63:57:12:d4:33:e6:66:56:a9:72:60:78:73:c2:9d:
                    c0:99:23:14:c3:47:03:44:16:e0:0f:92:0c:30:c6:
                    4f:93:53:6b:66:eb:98:30:9f:3f:7d:27:d0:9b:25:
                    ad:67:8d:c5:45:f7:b1:df:3c:1c:6c:6e:b6:22:be:
                    5f:67:b0:b1:89:bd:bd:c8:ca:cb:20:05:7c:1f:ad:
                    d0:dd:58:dd:96:53:5f:bd:1f:ac:e8:ee:48:f2:d6:
                    82:38:8c:da:04:8f:73:4a:fb:27:0d:d2:be:8f:7a:
                    d1:9d:9e:b8:a4:fc:b7:35:71:ec:6b:9a:38:36:19:
                    0b:a1:76:27:9c:9e:ab:58:ee:51:bf:b0:28:cb:b6:
                    6e:f8:a5:78:4d:7b:b1:8f:e6:1c:40:d5:37:86:42:
                    78:ec:f1:65:e1:f0:79:80:4d:78:bf:44:8c:5e:a0:
                    93:8d:f1:0e:a9:dc:fd:60:60:4c:d8:9a:61:80:f0:
                    f2:b0:47:89:65:4c:85:6d:69:90:3a:d6:ec:37:f1:
                    05:ad:9f:b6:16:dd:49:17:0e:aa:fb:d1:60:71:02:
                    9b:80:d5:aa:2e:32:26:95:3f:94:73:f7:22:65:40:
                    b3:74:90:c2:51:c8:5d:0a:ee:d0:44:99:f0:85:0d:
                    13:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B0:13:19:E0:4D:71:55:5F:15:15:7E:A1:33:C2:24:87:42:3C:10
            X509v3 Authority Key Identifier:
                keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:77:78:07:33:42:2b:c0:6d:4e:03:0b:04:1a:8b:2f:0c:7d:
         d6:a2:ef:43:c4:84:c3:1e:08:3c:1d:30:43:f7:30:63:95:69:
         9f:e9:39:c2:29:72:85:1a:75:62:1c:08:27:b8:6e:8d:4e:ae:
         a4:95:5a:da:47:25:e6:4f:7e:0e:45:05:4b:c9:eb:c2:9c:aa:
         3d:a1:1a:63:06:f5:bd:9b:f1:20:88:56:7b:7c:50:6c:e9:77:
         1d:af:0f:70:5d:4d:5b:bb:b3:94:ec:e4:49:a5:77:43:38:74:
         fb:3b:ec:65:18:49:25:15:c8:9e:e9:f3:48:14:03:74:fd:c9:
         16:39:c7:35:7b:7b:a8:1f:68:3d:4c:bc:39:31:12:4d:88:59:
         19:0b:e4:a7:4e:a6:4d:9e:ba:32:63:b6:ae:39:ed:9d:6b:d3:
         cc:f4:83:8a:09:5c:94:c6:95:2f:bc:d2:d1:f5:58:ec:cd:65:
         2f:4a:75:fb:f7:4c:d4:7f:7a:19:07:46:40:68:cc:16:65:f6:
         86:9e:f7:86:f5:69:47:df:a9:83:55:a3:26:cc:5d:f6:80:21:
         ef:f6:36:a9:b8:c2:89:c6:56:6f:44:dc:e1:c8:55:3d:00:49:
         01:d9:58:b6:ab:ae:2e:b8:7e:4b:7a:41:d0:37:36:85:15:62:
         68:a9:5f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:29 2025 by rpki-client