Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
File:                     4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft (raw, json)
Hash identifier:          y88nXXZJzA3U+Rm4mbuJqosIuv88yO46iE0B68RVXi4=
Subject key identifier:   77:CF:CD:F3:FA:4B:AA:CC:04:5D:81:1E:12:77:E6:52:53:E9:39:08
Authority key identifier: E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4
Certificate issuer:       /CN=e0b867131100c15de890110063e638a5f02367c4
Certificate serial:       0194BCAA11367040D94EC94413DF5D690756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 14:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:49 +0000
Files and hashes:         1: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl (hash: 3Cq0bIYJsYuuuIyrPve2cP9rn7xxDVOO9YX6YtSdTVo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:11:36:70:40:d9:4e:c9:44:13:df:5d:69:07:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b867131100c15de890110063e638a5f02367c4
        Validity
            Not Before: Jan 31 14:00:49 2025 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=77cfcdf3fa4baacc045d811e1277e65253e93908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:36:59:61:2c:74:1d:cd:82:cd:1a:dd:85:
                    be:16:63:ef:ec:b0:08:32:0e:d4:84:ea:7f:97:13:
                    3a:6f:53:12:84:e3:af:7d:9a:2a:66:38:74:3c:ee:
                    f1:b3:29:cc:38:6f:c9:25:74:a4:5e:df:63:01:e6:
                    f4:74:89:35:d2:09:95:5d:05:e9:e4:df:cf:4a:96:
                    02:77:ae:3f:2a:61:82:f6:53:e7:69:bf:61:14:5a:
                    0a:a4:b2:32:58:32:3c:9f:d8:b5:6a:4d:6c:b5:a0:
                    4c:bd:02:59:bd:7a:69:e9:1a:71:65:8e:55:bd:af:
                    95:d5:d0:dd:69:16:a8:f6:cc:bd:87:eb:79:b9:46:
                    11:e0:31:a9:53:63:c8:ff:e2:70:8b:ff:8f:08:b6:
                    7b:9f:3e:94:99:8b:90:7f:03:fc:e4:97:6f:f4:2c:
                    f9:6a:1c:80:19:47:24:f9:91:08:0c:01:b9:e8:bd:
                    ae:66:6c:ec:e2:c1:61:10:e2:bd:22:cd:6b:70:69:
                    06:a7:5f:e7:46:45:3b:b5:55:fc:03:09:11:c2:39:
                    b2:7c:69:d5:5e:04:9e:9c:e6:d1:7a:4b:a2:fe:00:
                    93:05:0c:4d:62:1f:91:3b:d0:32:53:25:58:f2:52:
                    d7:6c:11:92:3f:bc:ce:17:61:54:41:bc:de:ca:32:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CF:CD:F3:FA:4B:AA:CC:04:5D:81:1E:12:77:E6:52:53:E9:39:08
            X509v3 Authority Key Identifier:
                keyid:E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c6:aa:f7:1c:13:f9:9a:89:b0:3b:1d:4e:35:f7:b6:a1:79:
         1a:ed:2d:3e:13:a1:bb:05:cf:80:75:9f:57:96:35:d0:e7:41:
         69:b7:e9:a1:c6:ee:0c:c2:4e:05:30:de:69:65:9c:3e:6d:d6:
         4b:6e:c7:5b:18:a6:b7:86:80:7f:2e:32:05:e5:1b:88:b8:4e:
         3a:e3:13:08:cf:d4:8e:36:08:e4:da:d1:ce:8e:22:a1:7f:e0:
         25:9a:f2:02:56:60:92:0c:b1:56:ce:b6:1e:40:dc:c0:81:62:
         ea:0c:03:57:1a:1a:25:0b:de:11:6f:9f:d8:3f:5f:16:91:a0:
         9a:1e:3e:ad:eb:42:98:aa:05:a5:95:b4:43:1b:1e:dc:1b:44:
         a4:d6:b5:91:11:40:35:6e:a9:40:b8:e5:f8:51:76:da:b6:8f:
         ee:45:35:0d:27:c5:d4:7d:78:5f:e6:ec:87:13:83:d7:13:13:
         e7:11:73:fd:86:61:57:25:05:b0:18:c0:86:09:1d:d1:15:c9:
         e0:83:cb:73:33:2d:93:28:ad:a3:d5:18:2c:88:72:76:b7:86:
         fa:ed:2b:0d:20:8c:64:9e:24:5f:f6:bf:2f:51:ad:1e:6e:9a:
         2c:15:a0:49:83:62:04:e0:73:2a:3a:13:dd:1f:03:f2:fa:3b:
         fd:d6:0d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:00 2025 by rpki-client