Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
File:                     TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft (raw, json)
Hash identifier:          CM8cVDyub3+8CyxqO0kPk6r+edde0FBwIlzNKLdPZg8=
Subject key identifier:   AB:27:FF:CE:49:77:19:BC:74:D5:5D:14:92:33:9C:B5:C7:CC:0A:94
Authority key identifier: 4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE
Certificate issuer:       /CN=4ce966383e078ef40b5ed822e6e2a301b0510ece
Certificate serial:       0194BC3C27A0F8412A35909A235977AC5677
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 12:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:46 +0000
Files and hashes:         1: TOlmOD4HjvQLXtgi5uKjAbBRDs4.crl (hash: ZbmuVyyRGP3MV5RfrH/cAvBgoNNQhv6LjL2KAGTEF5A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:27:a0:f8:41:2a:35:90:9a:23:59:77:ac:56:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce966383e078ef40b5ed822e6e2a301b0510ece
        Validity
            Not Before: Jan 31 12:00:46 2025 GMT
            Not After : Feb  1 12:00:46 2025 GMT
        Subject: CN=ab27ffce497719bc74d55d1492339cb5c7cc0a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:31:f2:96:d0:1e:b6:cb:b6:d6:b6:7f:a7:
                    7c:b1:c3:5b:fb:81:4b:27:2f:21:7f:96:ea:96:ef:
                    58:51:31:91:1f:02:ae:ee:d8:27:a7:e3:8d:e3:5e:
                    f8:4b:f9:a4:31:e6:3b:98:f7:7e:8f:6b:bc:97:b6:
                    77:e8:03:5e:ec:12:03:04:02:31:ab:54:59:4b:ab:
                    13:51:f4:b0:63:94:a3:30:0c:b0:15:0f:0e:31:13:
                    ae:83:72:10:7a:87:cc:cf:8a:00:59:65:46:52:8c:
                    9b:7c:c9:df:20:93:c0:e0:8a:68:b1:81:a6:b8:de:
                    99:0a:7e:31:2b:6f:8b:46:0d:60:c6:1d:19:a0:89:
                    06:bf:37:41:58:ad:c3:5d:10:48:da:a9:20:87:00:
                    42:60:38:f1:85:8e:34:da:c7:0e:7e:da:50:1d:8f:
                    81:74:0a:12:fd:e1:b4:d4:8a:66:b0:41:37:5c:78:
                    73:7c:c1:41:e9:6d:59:05:56:70:9d:65:fe:46:8d:
                    5f:1e:a0:c0:89:e6:a0:53:b6:34:4e:c1:d4:d7:e5:
                    01:3e:43:a9:1f:8c:60:19:00:89:20:06:fc:26:d2:
                    3d:10:39:79:9f:30:44:a5:bf:1f:21:34:2a:22:91:
                    9b:bd:a4:53:78:77:07:a2:57:bd:5e:38:8a:37:98:
                    21:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:27:FF:CE:49:77:19:BC:74:D5:5D:14:92:33:9C:B5:C7:CC:0A:94
            X509v3 Authority Key Identifier:
                keyid:4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a3:17:9f:e8:c8:18:3d:a3:04:1a:43:23:17:d6:93:8e:17:
         71:10:75:cd:f2:36:fc:1e:7c:21:22:97:82:93:74:55:b7:9b:
         c9:ae:70:83:18:04:52:41:7a:cd:44:d5:d2:d6:0e:d9:bb:ce:
         70:38:b2:a3:2d:1d:29:71:5e:4e:0d:7e:8c:a8:ed:d4:fc:0c:
         00:12:6a:01:f4:a8:36:03:9d:8f:e0:ba:7b:df:28:33:dc:a3:
         1e:0e:da:bc:65:88:e4:21:d0:7b:8e:5e:af:ab:16:96:3b:59:
         c0:55:42:c3:6a:62:eb:17:8f:96:c4:73:4d:b2:ef:88:9d:cf:
         3c:58:8b:a2:23:0d:3f:e8:80:5c:49:93:dd:4c:c7:a0:6d:64:
         fe:e6:a4:b7:34:99:38:c1:6e:06:0a:ad:ce:e5:7b:fd:b0:3d:
         76:4e:7e:16:dd:2d:27:7e:04:b4:70:1c:fc:c8:52:82:83:76:
         fb:a4:c7:7e:98:a0:71:e2:ee:cd:d2:18:ba:0a:d9:5d:4a:05:
         ce:5a:af:bf:e8:50:cd:6d:19:90:2c:ce:3d:b5:39:35:7e:08:
         55:72:ab:b9:16:74:9b:55:4e:fd:66:f7:8c:9e:30:54:68:70:
         6a:ed:da:8f:8e:8f:6d:44:56:de:d6:8b:f9:b4:85:b0:fb:32:
         79:bc:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:15 2025 by rpki-client