Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
File:                     GR0Irp2FEZYMPHuEweKmZiHiReE.mft (raw, json)
Hash identifier:          9xTdYfCBMA2aC46qqEDWcrmMnTvPVCbXNPojn+K8bpc=
Subject key identifier:   0F:E1:47:92:BA:BE:C3:44:84:31:2E:4F:DF:CB:18:45:83:8A:27:34
Authority key identifier: 19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
Certificate issuer:       /CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Certificate serial:       0194BCA9F4BF36CB6F81521613F0A1EB247C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 14:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:42 +0000
Files and hashes:         1: GR0Irp2FEZYMPHuEweKmZiHiReE.crl (hash: XkcakC39nRNOYcVDrFTelZcm5nlA6milQDxUZw8YuHs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:f4:bf:36:cb:6f:81:52:16:13:f0:a1:eb:24:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
        Validity
            Not Before: Jan 31 14:00:42 2025 GMT
            Not After : Feb  1 14:00:42 2025 GMT
        Subject: CN=0fe14792babec34484312e4fdfcb1845838a2734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:72:10:22:e8:a5:02:36:fb:eb:b1:93:4f:
                    f4:84:bb:b8:a9:3d:b9:02:c5:2b:b0:9f:33:f6:3b:
                    3a:f3:0a:73:48:21:8f:19:9d:b2:1b:af:8d:3b:3d:
                    cd:16:08:aa:a8:2b:40:32:a5:59:f6:75:eb:34:6c:
                    d1:ca:b3:5b:9d:12:7e:c2:9a:48:2f:cf:0b:a1:ba:
                    c6:92:da:2c:f9:7c:7f:60:43:29:31:75:ff:a9:c1:
                    ab:30:37:6c:70:3a:12:a6:46:18:5a:32:93:a6:f5:
                    3a:e0:46:4e:49:b7:2c:6c:99:8a:ae:27:f8:52:a0:
                    3e:f5:63:80:f6:a1:5f:6f:85:64:94:e9:9d:24:c7:
                    5d:2e:f5:d8:28:ee:9d:59:61:d8:78:60:7e:83:1b:
                    af:92:8f:ca:e6:f7:f4:22:42:08:11:9e:ae:af:a3:
                    8d:a6:16:09:58:5d:83:db:43:11:ed:fc:95:b3:82:
                    06:7d:9c:10:ea:79:4b:e9:79:7a:b2:56:86:a9:aa:
                    62:6d:25:c2:8d:50:b7:47:89:52:6e:f7:85:5c:6f:
                    a4:40:bc:43:87:5b:ed:3a:2a:b1:2b:bd:6e:8a:8b:
                    77:8b:92:d5:2b:28:6b:48:da:5d:39:05:70:24:03:
                    b9:9a:bc:37:f1:80:8e:f4:9b:28:cd:25:60:cf:7c:
                    59:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E1:47:92:BA:BE:C3:44:84:31:2E:4F:DF:CB:18:45:83:8A:27:34
            X509v3 Authority Key Identifier:
                keyid:19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:51:24:f8:5f:e7:44:5d:98:6b:fc:c2:61:04:01:15:24:5a:
         bf:48:e2:fa:2f:dd:b4:c3:18:a0:d6:9b:f2:ee:1c:60:4c:ed:
         a7:be:10:96:a6:c2:79:18:b9:75:42:a7:40:7d:2a:37:fb:ee:
         c1:26:b7:7a:58:52:ac:f1:94:be:01:80:20:31:73:e8:64:31:
         2e:37:b3:e0:4d:ac:6b:83:d3:0c:70:d3:4c:46:80:5c:96:1d:
         c4:47:f7:c9:e4:cf:96:08:64:e3:59:7f:2f:f2:33:16:c4:a8:
         8e:62:87:d4:58:15:a7:2d:b9:80:93:10:75:ec:e1:5c:a5:30:
         08:12:9a:cb:30:d7:25:e6:a5:02:1f:81:ab:aa:96:e4:5e:6b:
         51:06:ee:9c:76:75:4c:5b:1b:18:c9:eb:81:89:bd:ee:ed:ea:
         22:58:c1:20:74:d9:a1:a7:f0:41:8a:ba:ea:33:bd:c1:26:71:
         99:94:c2:31:c0:93:39:1f:b1:3d:fc:3d:2f:6e:d9:db:a7:dc:
         8b:0d:74:38:cd:ad:3c:33:f7:e8:10:82:e7:b7:3a:75:17:10:
         7b:c7:ae:d7:9a:77:97:23:65:00:27:80:eb:7d:b3:44:25:e8:
         ae:1c:3c:5a:bc:b5:8d:5d:65:d3:1c:ff:cb:a9:e7:91:81:32:
         f5:92:94:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:16 2025 by rpki-client