Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File:                     4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier:          2OgYJh8TljQh0Ns/OkVYzejcmOPrGdIr4uUNwEM67Z0=
Subject key identifier:   BC:E1:13:2A:D4:78:2C:B4:9F:7C:6C:4E:57:2A:5E:48:4A:3C:EF:E9
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer:       /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial:       0194BD17695D7413DD5C3831109AA74B402A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number:          05AD
Signing time:             Fri 31 Jan 2025 16:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:15 +0000
Files and hashes:         1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: M5TzrBGyyoSsrTg6nQZ6aRqNLsT+zml3gnoX11v9/Qg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:69:5d:74:13:dd:5c:38:31:10:9a:a7:4b:40:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
        Validity
            Not Before: Jan 31 16:00:15 2025 GMT
            Not After : Feb  1 16:00:15 2025 GMT
        Subject: CN=bce1132ad4782cb49f7c6c4e572a5e484a3cefe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a8:3e:57:32:dd:2d:ae:a5:b4:4a:fc:5f:8a:
                    ab:20:94:bd:1f:39:ee:70:8a:52:c8:83:09:20:55:
                    fd:e1:63:ee:71:aa:92:81:1e:84:8e:ae:8a:a5:5a:
                    cd:18:3b:50:fd:c7:f2:6e:0f:3e:86:22:dd:22:3c:
                    6f:cc:f6:82:f7:28:61:5d:5f:81:34:ee:fd:eb:8b:
                    e4:4a:33:67:99:79:1f:cb:b3:30:70:dd:27:31:bc:
                    ac:7c:78:5e:a4:48:d1:c6:71:a7:ae:65:09:24:1b:
                    9f:2e:e3:73:15:91:7d:9e:fe:fd:e0:a0:b1:9b:ef:
                    bf:d3:c5:48:ad:9f:47:db:60:53:54:ca:1f:ac:4c:
                    87:f4:5a:0a:09:31:77:18:72:d1:7d:89:88:23:d4:
                    88:eb:29:85:f6:aa:51:38:75:63:a8:37:e9:e1:fb:
                    a1:7d:1b:ba:50:e3:92:c6:17:d0:1f:1f:11:bf:a1:
                    cc:69:eb:cb:5e:30:88:8b:40:1c:df:ef:8a:e9:53:
                    a9:a4:ad:7c:8a:29:ca:d0:e7:8c:16:3f:96:45:7f:
                    2a:0d:6f:02:02:8b:8e:1e:08:09:e5:33:81:e5:b0:
                    db:e5:23:f4:a6:b1:37:04:82:f2:62:cd:2f:fb:ea:
                    4e:42:5f:59:95:ea:1b:78:ba:37:b3:55:b9:c1:0a:
                    2a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E1:13:2A:D4:78:2C:B4:9F:7C:6C:4E:57:2A:5E:48:4A:3C:EF:E9
            X509v3 Authority Key Identifier:
                keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:30:a9:2f:5e:63:a7:69:31:a5:dd:27:e4:ce:34:0e:23:0e:
         96:18:78:95:10:db:99:52:b0:f0:ec:90:45:ce:15:54:e8:df:
         fb:58:90:1f:a2:ea:bf:b5:3b:26:5e:9a:9d:ea:23:c2:3d:4b:
         5f:6d:48:74:a5:40:9a:b0:a2:ab:2d:29:fa:f3:ce:fc:0d:50:
         55:45:80:c9:f5:2c:47:80:8e:f3:7e:a7:76:c8:f3:b3:8d:6e:
         b4:17:23:9a:c7:4b:61:63:d4:93:3c:9c:bf:6e:b0:b2:32:9c:
         1b:8f:69:26:69:97:b6:aa:5e:5f:34:da:32:c6:e7:99:66:6e:
         60:9d:b0:59:0b:fa:c3:c1:f1:8b:f7:66:6f:78:33:67:8e:ea:
         a1:1a:4c:6c:b1:da:fc:31:47:28:a3:fa:fa:63:da:6e:d4:58:
         7c:76:9a:e6:96:b6:1e:4c:a6:34:5d:5a:f5:bb:47:25:fd:c8:
         bc:70:bc:72:a0:34:b1:c0:c7:e4:08:b0:0c:39:f5:96:fe:62:
         d4:f1:7a:ee:30:84:1b:33:ce:8d:25:10:7f:b7:3b:7f:05:07:
         03:9d:16:92:90:26:05:6c:8b:58:3e:62:27:f9:dc:d0:08:e5:
         16:10:b6:ea:eb:dd:83:79:aa:87:39:88:f4:e3:32:92:18:bf:
         78:f1:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:32 2025 by rpki-client