Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
File:                     tFrdzVeWSPw_YSTlWEee8LB_AYw.mft (raw, json)
Hash identifier:          PuhWGiD2uRAhSIipdD6CUqDd9jUpeJUC/sw5+Rh8RoU=
Subject key identifier:   46:B9:C8:2C:41:69:63:F3:14:D1:3E:95:0F:FA:6A:89:5D:27:9D:B3
Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
Certificate issuer:       /CN=b45addcd579648fc3f6124e558479ef0b07f018c
Certificate serial:       0194BCE069DCD95C345C226EA40A1D0CBC40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
Manifest number:          01A1
Signing time:             Fri 31 Jan 2025 15:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:11 +0000
Files and hashes:         1: tFrdzVeWSPw_YSTlWEee8LB_AYw.crl (hash: C1JkZtIG10um5heLGmFfv0ACX/E8nImjBUn4Q4/ND7g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:69:dc:d9:5c:34:5c:22:6e:a4:0a:1d:0c:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c
        Validity
            Not Before: Jan 31 15:00:11 2025 GMT
            Not After : Feb  1 15:00:11 2025 GMT
        Subject: CN=46b9c82c416963f314d13e950ffa6a895d279db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:5a:5d:40:2a:21:99:a4:2c:f3:96:09:fa:
                    f4:bb:38:f3:59:d0:fe:d4:46:09:2a:8c:48:bc:a2:
                    dc:8d:9c:2c:17:c6:a3:be:c0:0c:2e:32:d6:15:8c:
                    d2:0b:8c:a3:ee:0c:4b:30:01:14:a0:cc:6b:3c:29:
                    64:41:f6:0f:e9:3f:a7:34:ce:4c:6f:a4:92:f0:0e:
                    48:1e:06:f0:df:89:45:8c:2e:c2:6b:8a:d3:97:42:
                    78:d0:4c:25:b6:b3:31:1d:56:82:7d:4f:c0:a7:08:
                    1f:68:fd:ee:17:23:b7:81:2c:d0:64:3a:7f:20:94:
                    09:43:be:b3:66:ce:27:1c:46:c9:2e:56:79:82:e0:
                    b2:f8:ce:d4:6f:2f:fa:af:bf:fb:c5:ad:5f:18:cd:
                    52:57:4d:8e:f5:6f:58:bd:dc:44:6d:ae:63:4a:c2:
                    15:5e:8f:e9:5c:a1:ea:78:d8:1d:99:c8:de:b1:41:
                    31:9c:8b:5e:86:33:1c:4c:0d:5b:06:d3:f4:54:19:
                    7f:28:e4:4b:c7:ad:f9:a4:1c:71:d4:6a:fb:11:d8:
                    53:90:6d:56:fe:37:13:56:57:0c:62:f3:57:55:7a:
                    3c:ec:5b:f9:79:0c:2b:36:38:e3:80:9b:1a:92:a9:
                    8a:a4:d2:4d:56:71:b0:b9:b9:f3:45:b5:1a:52:f8:
                    3c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B9:C8:2C:41:69:63:F3:14:D1:3E:95:0F:FA:6A:89:5D:27:9D:B3
            X509v3 Authority Key Identifier:
                keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d4:19:31:07:c4:0f:8a:54:34:51:c3:cd:45:45:1b:7d:7c:
         04:69:38:2a:54:05:d5:86:fd:44:b2:8f:bb:de:aa:c9:d8:f8:
         9f:e7:23:b6:9b:35:43:8e:7b:60:b4:1e:1d:39:7a:24:74:7c:
         8e:fd:40:b1:6b:1a:bb:5d:6e:3c:55:da:71:2a:60:5e:46:98:
         67:12:bf:8e:a8:39:58:8f:61:40:aa:db:bf:f9:8b:c1:93:a7:
         5b:16:3f:01:35:ba:f5:d2:af:1d:8c:95:24:4b:92:cd:83:46:
         dc:58:5a:08:f5:97:ff:cb:59:67:74:f3:36:fd:72:b7:7b:2a:
         76:50:0a:e3:2c:75:4a:54:cc:99:5e:68:d4:a5:db:36:bb:05:
         9c:26:94:da:1c:de:d4:91:58:96:27:bc:f6:6e:10:cd:69:ae:
         ed:8f:a8:30:ee:33:3e:5f:bb:7d:88:4e:15:a0:cc:57:bb:61:
         71:c0:e5:d1:ba:ee:18:36:8c:21:01:2d:27:69:c8:20:fa:c1:
         81:ab:a8:14:f8:7f:cc:48:a0:85:38:2f:93:6f:37:39:72:39:
         5f:c6:de:eb:ed:7d:fd:46:2c:32:d2:1f:eb:ed:35:c5:ba:c2:
         80:5e:89:32:bb:a5:1b:3f:13:65:26:fb:29:0c:89:a5:3d:cf:
         71:a6:e9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:34 2025 by rpki-client