Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
File:                     H83UEOElAi3gfKWWP5L3jo-JSG4.mft (raw, json)
Hash identifier:          Z17SbE+spo7yWrk8Q44bkP1Vl2DUsm6Jlz1VrcOd3jk=
Subject key identifier:   82:12:3F:BA:A8:04:9A:CC:7E:07:31:97:1A:7F:33:5C:37:92:0E:FC
Authority key identifier: 1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E
Certificate issuer:       /CN=1fcdd410e125022de07ca5963f92f78e8f89486e
Certificate serial:       0194BC3BDC0A85EAE041ADD6377D2B5E826F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 12:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:27 +0000
Files and hashes:         1: H83UEOElAi3gfKWWP5L3jo-JSG4.crl (hash: k0SnN3waYOzKhkTZGeXZQ/SMP+amw0zxC3UlQ6SkEck=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:dc:0a:85:ea:e0:41:ad:d6:37:7d:2b:5e:82:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fcdd410e125022de07ca5963f92f78e8f89486e
        Validity
            Not Before: Jan 31 12:00:27 2025 GMT
            Not After : Feb  1 12:00:27 2025 GMT
        Subject: CN=82123fbaa8049acc7e0731971a7f335c37920efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:27:7a:c0:96:57:aa:47:5e:26:16:8d:ee:90:
                    fd:23:45:cb:aa:70:3f:d2:d2:85:e5:43:2f:ff:69:
                    d9:d4:5b:5b:d3:11:e2:12:7d:ae:fd:f6:35:36:a4:
                    2d:b9:0a:1f:85:d2:36:49:43:91:31:02:dd:0e:90:
                    8c:eb:20:53:6d:58:b5:01:39:e3:e5:24:5f:bd:4a:
                    ab:a4:35:1f:7f:ff:c4:64:77:2b:42:2c:99:c7:1a:
                    59:9b:84:97:e8:33:28:31:65:bc:3d:67:a5:78:99:
                    a4:66:52:37:08:97:33:10:2f:e9:a3:1a:76:97:75:
                    97:12:71:52:ea:2e:60:6a:84:b4:b6:0a:70:2b:ae:
                    cc:5a:8a:4c:d2:84:ba:6a:94:54:1d:a0:83:ff:a5:
                    ab:f9:b5:7f:af:54:f7:49:a8:4e:68:aa:a3:de:0d:
                    96:ef:85:23:7a:40:1e:92:e8:93:6f:54:8c:1a:84:
                    24:33:13:bd:79:31:72:00:31:82:2f:c0:ea:70:52:
                    7d:60:b6:35:6b:70:c4:a3:bc:08:79:d3:36:b7:bb:
                    a0:52:96:c6:47:0f:c1:c2:ff:65:7f:b7:a3:75:cd:
                    b6:9b:53:d0:bd:6f:b9:80:9e:72:c3:86:3e:18:7a:
                    cd:0d:38:e7:60:9b:55:1d:ed:34:d5:42:cb:6d:fe:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:12:3F:BA:A8:04:9A:CC:7E:07:31:97:1A:7F:33:5C:37:92:0E:FC
            X509v3 Authority Key Identifier:
                keyid:1F:CD:D4:10:E1:25:02:2D:E0:7C:A5:96:3F:92:F7:8E:8F:89:48:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H83UEOElAi3gfKWWP5L3jo-JSG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5fa81b-1f3f-482d-9525-ab69da8f37ec/1/H83UEOElAi3gfKWWP5L3jo-JSG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:84:03:83:f4:83:ec:42:b0:a8:1a:12:70:f1:3f:a0:4d:b3:
         d3:dc:93:0b:d8:bf:49:03:d1:78:6b:d6:b1:e0:4c:e1:d4:ab:
         0d:7e:4f:03:5b:e1:9a:83:a8:56:49:c0:41:f1:83:95:61:ff:
         40:98:41:4d:1d:97:c5:bd:d2:8e:bf:c7:f2:96:81:32:a6:40:
         41:61:9b:de:92:e8:0a:fc:a2:f3:e5:9b:62:f3:95:f9:cf:60:
         fd:99:fa:97:21:1c:02:5b:2f:7e:84:15:1b:f0:2e:a1:7b:a1:
         7c:3d:29:be:c3:06:58:3d:09:90:1e:9c:dc:c8:5e:fc:6d:ac:
         2c:b4:7d:e3:c6:cf:16:66:aa:06:03:ca:57:11:11:ba:29:44:
         7b:f4:02:c1:1d:38:40:3b:19:fe:54:f5:2c:a4:53:a4:22:73:
         92:be:34:14:ce:93:ce:2e:e7:8a:86:82:f8:ec:f5:a2:b7:e1:
         4c:51:1e:d8:5b:93:1e:b1:cb:cb:4c:73:23:17:65:6c:41:d6:
         6c:d0:88:4d:51:93:9d:de:24:4d:c8:1d:e7:2f:dd:11:d8:71:
         a3:8c:4b:13:2b:f4:7c:3d:cd:0a:9f:8c:8d:88:97:3a:b6:00:
         f4:b8:6b:bb:39:1e:39:d3:60:4f:77:e5:8d:d1:b0:3d:70:75:
         81:d1:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:35 2025 by rpki-client