Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File:                     1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier:          OpsbYgBcCuWGKZQEiWJf18qUuILPZFbr27MQ9Ws4VYU=
Subject key identifier:   59:84:A4:04:5D:B8:6E:F3:01:44:42:7E:DE:B1:8F:8F:5A:28:2B:0C
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer:       /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial:       0194BBCDC54B795BD9F50D388D80A443A396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number:          0935
Signing time:             Fri 31 Jan 2025 10:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:12 +0000
Files and hashes:         1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: rJaOR0lk6ZpnlDHkCaVSHlcRAVMneTasseTDgiCcD70=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:c5:4b:79:5b:d9:f5:0d:38:8d:80:a4:43:a3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
        Validity
            Not Before: Jan 31 10:00:12 2025 GMT
            Not After : Feb  1 10:00:12 2025 GMT
        Subject: CN=5984a4045db86ef30144427edeb18f8f5a282b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:59:01:5e:33:6a:9b:3a:92:ed:8a:ab:49:
                    86:88:8f:eb:43:1c:8e:24:73:98:1d:1f:4b:74:85:
                    0a:f5:34:f9:c1:4c:02:41:ee:e6:71:01:57:db:0f:
                    46:a0:e1:97:b7:1b:f6:f0:34:92:0d:c9:fb:ec:ab:
                    22:42:88:c4:1e:a8:db:e9:2c:00:d9:a4:c3:c4:3a:
                    da:d3:62:df:ec:ee:93:aa:1b:6b:76:e0:7d:3a:b5:
                    6a:9d:ca:d5:51:f3:8d:ba:c9:62:cb:89:1e:02:37:
                    55:01:80:7b:77:a2:85:a9:28:d3:af:10:b8:9e:b7:
                    6a:bb:b4:b3:99:b6:50:de:5b:9b:71:1f:94:9b:0d:
                    df:e7:76:fa:85:28:a8:41:4d:74:a1:49:48:c6:73:
                    fe:f1:17:b2:7a:e4:7c:93:c0:03:6a:8c:47:9c:c7:
                    65:cc:83:aa:26:f2:33:8f:f8:46:e1:e1:26:cb:93:
                    ca:d2:93:f2:ff:0c:34:28:4f:36:09:9d:00:5d:bb:
                    f6:9f:d9:12:25:3a:52:fc:60:e8:ae:d6:30:22:30:
                    87:7c:a0:65:8a:0b:29:ef:40:d1:99:c2:75:e2:af:
                    67:ce:59:37:cd:a4:62:ba:26:cb:68:a3:f6:cd:64:
                    14:d8:6c:ce:15:e1:04:97:17:73:f1:e4:1a:11:54:
                    cd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:84:A4:04:5D:B8:6E:F3:01:44:42:7E:DE:B1:8F:8F:5A:28:2B:0C
            X509v3 Authority Key Identifier:
                keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7c:b9:87:8d:80:c9:68:6d:75:f2:2f:0f:4e:d8:a6:7d:e7:
         ec:88:9d:8e:e3:59:01:0a:d1:51:9d:a6:c2:86:2b:53:0f:17:
         b7:48:da:c1:32:a4:66:53:e4:6f:96:9e:3a:b0:06:84:9f:e5:
         07:0c:01:10:06:e4:29:d6:f2:1a:67:b8:bd:7f:ed:de:d5:28:
         46:d4:f6:39:64:fd:1f:c7:ad:b0:a8:9a:5a:4b:50:5f:4b:fa:
         c3:ab:e1:92:ce:5c:64:bc:64:88:50:9c:07:fc:d3:6a:13:0c:
         d2:36:07:c8:bf:bd:3e:5a:de:80:52:7f:2c:da:b6:28:cd:17:
         11:bc:ec:ea:8e:45:4e:9e:a4:b5:2f:2c:f0:eb:cd:37:b3:9f:
         e9:0f:4e:0f:5c:56:ad:7a:87:ae:12:26:74:0c:0c:3b:80:31:
         43:f8:fb:ec:4e:8a:8a:d7:f3:40:b7:a7:09:18:eb:7e:cc:ca:
         55:dc:a6:ab:66:78:ec:49:69:fb:f6:98:4f:e2:95:8e:83:d9:
         31:06:8d:e4:fe:2e:9b:e4:93:50:d9:4e:8a:78:24:52:1f:ea:
         0c:34:dd:c2:c4:be:62:cc:32:dd:c9:56:33:44:5d:42:76:01:
         0d:ce:b0:8f:05:e3:e0:d7:9e:c7:1d:d2:d5:d5:6e:06:32:63:
         a9:77:cb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:23 2025 by rpki-client