Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
File:                     cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json)
Hash identifier:          I6DR53KaGab+gXJKxdAGGBKfs7d18FA1NaLjIdHb4+o=
Subject key identifier:   64:05:A7:A9:32:5F:A4:66:EC:0F:CF:45:20:C3:D8:6E:52:FF:20:D3
Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8
Certificate issuer:       /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
Certificate serial:       0194BBCE75BD782426E8349F3343D110BD2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft
Manifest number:          0587
Signing time:             Fri 31 Jan 2025 10:00:57 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:57 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:57 +0000
Files and hashes:         1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: w3TSvr72ogyBPrhl5Rc18mTcWTmaW/LD8/5zsSzta00=)
                          2: xsLt5XL-OWIaNdR6BZ8HbsppEGM.roa (hash: fVuO1qpyondG1qElrhxFzaCfBXaBgOTcL+nbs40PcY0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:75:bd:78:24:26:e8:34:9f:33:43:d1:10:bd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8
        Validity
            Not Before: Jan 31 10:00:57 2025 GMT
            Not After : Feb  1 10:00:57 2025 GMT
        Subject: CN=6405a7a9325fa466ec0fcf4520c3d86e52ff20d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:42:4d:1d:6b:92:32:50:ca:7a:af:3f:15:
                    e0:44:3a:c3:e1:e5:64:c7:61:c5:9f:fd:33:c6:1d:
                    8f:e6:dd:88:3b:f9:58:52:9f:20:39:28:58:3e:d7:
                    ec:66:e6:c3:1b:ee:fe:3e:eb:60:2a:42:61:4b:22:
                    3c:4e:24:61:13:80:4d:9b:c2:82:20:52:c3:5a:22:
                    3b:44:8f:d4:c0:b3:e7:f8:98:a3:00:bb:48:33:18:
                    c3:6f:3a:a1:bb:70:0f:06:5b:0f:49:d9:57:40:e0:
                    4f:af:b2:bd:9c:b8:f4:f8:17:b0:47:0f:69:67:4c:
                    b5:9f:a4:14:85:5d:53:86:b5:c7:af:17:02:2d:73:
                    ff:4b:f1:82:ff:64:15:e2:41:06:b2:00:28:3a:f3:
                    20:51:5e:a4:e3:0f:b1:4b:27:49:25:c6:37:89:25:
                    0f:e9:fa:c2:ba:17:81:6f:08:bd:cf:e3:9c:80:4c:
                    05:ed:22:74:00:aa:2e:0d:61:8f:ed:81:54:ce:ef:
                    27:3f:45:86:6a:9c:25:2a:48:48:4c:cc:fb:95:2b:
                    75:ca:a2:56:8d:a3:a9:d4:1e:3b:96:39:ae:97:10:
                    d9:3f:27:f5:6a:21:81:84:9e:17:2d:8c:54:c3:04:
                    49:33:e3:1b:01:06:2e:2b:fe:f1:83:8d:e0:ce:bc:
                    f1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:05:A7:A9:32:5F:A4:66:EC:0F:CF:45:20:C3:D8:6E:52:FF:20:D3
            X509v3 Authority Key Identifier:
                keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a4:59:a4:5c:31:7b:ab:95:7e:22:f1:f3:7f:fb:f2:f0:35:
         00:99:33:cf:30:7e:b3:dd:28:b9:22:8c:3a:3e:88:be:71:25:
         5b:0b:0f:d8:ff:d7:57:35:09:71:56:d6:b5:6e:8f:23:c9:fb:
         10:4d:aa:c4:4f:87:38:e1:f6:fe:c3:43:62:d4:f6:d6:a9:f1:
         88:e5:5c:60:f3:e5:5d:ec:38:0e:0c:c9:bc:9f:74:f1:3c:a0:
         77:49:8e:27:a8:ff:59:c2:d5:3a:61:95:53:64:fd:cd:50:31:
         25:3d:fd:64:bb:1e:08:88:01:c7:f5:b8:b4:69:b8:e9:a4:03:
         af:ef:09:8e:1b:1f:23:f1:93:c0:14:a3:37:f2:36:cd:69:40:
         cf:0f:69:11:82:16:11:19:c6:28:7e:ff:17:44:5d:2a:be:86:
         b0:a4:8d:51:2c:78:e8:76:40:52:53:f7:f4:7b:c0:97:22:33:
         64:2a:ba:4c:a7:95:30:9a:45:d7:12:3d:23:5e:37:7c:41:83:
         34:93:e2:61:5c:3f:f3:eb:2b:b3:96:57:dc:55:7d:d9:ac:a0:
         24:90:4d:13:98:e8:e1:59:32:9d:c8:cf:07:18:fa:62:1c:b2:
         7e:6b:b2:52:0a:bd:2c:b2:d7:54:8a:1a:95:a6:4b:0a:ef:d4:
         f3:72:c7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:05:03 2025 by rpki-client