Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
File:                     rrc9JyyxdKRjjbIVZ44-57kin_o.mft (raw, json)
Hash identifier:          xMb/rhiMbb7rz/4/LZURD3m4n/z2MpdeiBUmTrvKW40=
Subject key identifier:   F2:1C:84:74:85:1C:DD:32:94:38:62:53:BA:E2:E6:3D:D4:15:A9:82
Authority key identifier: AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA
Certificate issuer:       /CN=aeb73d272cb174a4638db215678e3ee7b9229ffa
Certificate serial:       0194BCA9BD6327B354D1E547E9F670790929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 14:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:28 +0000
Files and hashes:         1: rrc9JyyxdKRjjbIVZ44-57kin_o.crl (hash: /YYASxjVsRBK4kMAK9ojhAlFVJnmgTL+zRh4qs/IZQs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:bd:63:27:b3:54:d1:e5:47:e9:f6:70:79:09:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb73d272cb174a4638db215678e3ee7b9229ffa
        Validity
            Not Before: Jan 31 14:00:28 2025 GMT
            Not After : Feb  1 14:00:28 2025 GMT
        Subject: CN=f21c8474851cdd3294386253bae2e63dd415a982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:47:44:77:4d:32:3b:45:7d:87:f1:86:62:
                    a6:92:34:2a:53:31:f7:30:73:af:e2:99:24:b8:89:
                    48:d1:08:9b:17:3d:69:3e:8b:06:47:91:ca:75:39:
                    be:67:00:16:6a:87:6f:f8:fa:14:e2:84:9e:41:df:
                    97:81:55:35:49:b5:a8:db:66:16:e4:13:6e:91:0c:
                    ae:b7:02:a4:1d:f6:ed:cd:9d:c1:c9:6e:f5:f9:bd:
                    5e:ec:15:84:39:f9:42:be:df:9c:98:43:a5:73:02:
                    65:09:c0:ad:c4:21:ff:6e:ea:d5:3d:c5:ef:78:1e:
                    31:0a:58:c2:63:06:7b:ff:b8:c3:35:97:05:1d:1e:
                    f6:1c:51:27:93:ba:14:79:82:52:e2:fe:fd:57:e1:
                    26:bb:5b:b4:b7:c0:dd:f4:d0:31:91:56:39:fe:e9:
                    87:60:bc:d5:92:19:c4:66:69:4d:11:36:22:88:1b:
                    e8:32:f4:32:d5:e4:67:78:06:39:45:24:02:80:97:
                    d1:a0:61:1b:cf:c5:90:52:97:53:9c:94:30:e8:02:
                    6d:a5:ed:77:b6:af:0d:7c:f9:f3:19:32:1a:3f:13:
                    7b:33:32:50:59:95:85:b3:93:67:7b:93:53:00:4c:
                    9a:47:4a:45:6f:a5:11:47:2f:6e:81:2e:a9:56:69:
                    05:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1C:84:74:85:1C:DD:32:94:38:62:53:BA:E2:E6:3D:D4:15:A9:82
            X509v3 Authority Key Identifier:
                keyid:AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:17:ff:fc:60:47:ce:b2:9f:05:26:ce:eb:aa:f2:f4:92:43:
         a1:e6:34:4d:00:77:b8:99:c5:86:fe:0e:99:d6:67:70:d4:2e:
         c4:e3:d0:1e:8f:e4:b4:34:73:c4:9e:3d:ee:5f:61:98:0a:29:
         89:2f:34:d4:e0:1c:24:13:96:8b:e8:45:a9:a7:c5:b9:a9:b1:
         d0:74:24:c1:97:da:c0:cb:50:01:92:51:66:6d:82:bf:39:b3:
         37:5f:3d:27:5b:31:ac:fd:e8:e6:80:51:61:fb:f1:a3:cb:e7:
         ad:59:2b:d6:d5:ac:67:82:86:b3:90:04:33:b0:f2:18:bf:4f:
         06:28:70:f4:39:c6:70:23:a6:f6:b0:a5:57:7c:9f:a2:c0:77:
         20:6f:04:31:57:b2:82:87:9d:a6:97:04:0a:23:36:39:e0:69:
         f4:df:c2:02:31:9e:cf:4d:40:9a:5b:ab:9c:49:4d:dc:d8:16:
         f6:34:02:91:f6:8d:55:39:bd:49:89:f5:e7:85:c6:0d:6c:be:
         0d:f5:13:a4:2e:a2:57:27:2b:4d:80:41:cf:d4:5d:d7:45:c3:
         73:ad:c5:de:95:93:ba:b1:25:88:e6:41:16:ab:0f:32:8c:8e:
         b1:15:5f:47:8b:57:41:95:fb:2a:72:e5:25:05:b2:16:d7:77:
         ee:34:c6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:26 2025 by rpki-client