Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
File:                     8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json)
Hash identifier:          cnGWiR8Xap5qfDF1oMxMD0exRlMY/CM4tLpUdjjuxhI=
Subject key identifier:   4C:65:F8:20:C5:E3:C6:97:0F:94:F4:58:98:F8:B0:FD:BA:62:41:19
Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
Certificate issuer:       /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Certificate serial:       0194BBCDB04A7949052B151F6781D5321374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 10:00:06 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:06 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:06 +0000
Files and hashes:         1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: H9PBmjMq6oDhWV26WA9G6JXNAZhCoqbu7NHRIMkm4pc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:b0:4a:79:49:05:2b:15:1f:67:81:d5:32:13:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
        Validity
            Not Before: Jan 31 10:00:06 2025 GMT
            Not After : Feb  1 10:00:06 2025 GMT
        Subject: CN=4c65f820c5e3c6970f94f45898f8b0fdba624119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:da:24:15:6c:d8:45:7f:b3:8b:ec:d9:11:2f:
                    04:9e:9f:af:ac:7c:0c:71:c9:55:ff:56:20:8c:25:
                    3e:b8:8c:69:03:cf:05:0a:1f:e4:27:27:64:1c:c3:
                    6c:bd:f9:da:68:a0:0f:87:a9:68:74:73:2e:c5:27:
                    02:78:58:2e:a1:2f:3a:7f:b9:a6:0a:2c:08:a2:ec:
                    90:c3:9b:01:61:0f:b6:60:1d:5b:af:1c:e3:39:34:
                    f1:a7:8e:7f:02:fb:1e:83:d2:bf:22:ff:72:ed:a0:
                    c7:04:2e:6e:01:f8:27:03:96:0e:ba:60:be:ed:dc:
                    01:3e:5a:dd:d7:c8:62:2f:af:72:a9:4a:2f:15:54:
                    83:f2:04:5d:b6:d8:9b:87:da:56:5f:ae:b7:a4:ee:
                    48:3b:2a:9f:fa:f9:76:96:e8:48:ac:ab:20:07:eb:
                    f8:8e:96:1d:43:a6:bf:97:9f:87:39:64:95:1a:9f:
                    74:08:54:dc:49:0a:8d:18:54:1a:49:38:c8:4f:18:
                    78:69:ef:f1:40:e6:9e:67:26:34:69:ac:c1:eb:75:
                    ae:aa:70:17:85:2d:9e:3a:9e:e2:55:63:67:e6:34:
                    36:36:e5:5b:e1:8c:4b:cd:05:ea:e9:9c:e2:bb:58:
                    a7:a0:40:e0:89:fc:7c:70:de:b2:b7:7d:dd:88:d1:
                    f4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:65:F8:20:C5:E3:C6:97:0F:94:F4:58:98:F8:B0:FD:BA:62:41:19
            X509v3 Authority Key Identifier:
                keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:57:09:b7:b3:30:40:b5:7c:61:2c:5a:15:78:f9:32:c1:84:
         21:8f:7e:2e:df:2a:f3:6f:92:13:88:b5:6c:b6:88:e0:2e:ef:
         a1:f9:7b:71:d4:f9:53:0c:ba:42:75:24:61:f2:bf:0f:18:e2:
         ce:81:9f:00:81:53:e0:a2:fd:a3:1d:5a:34:4c:67:9b:42:b9:
         19:30:df:62:bd:ed:b2:ae:ef:4f:a9:c8:1d:9f:df:93:bc:b2:
         b6:8e:da:fd:b5:9a:7e:3f:f1:74:17:1a:b7:7c:29:3a:9b:04:
         fa:3b:f2:7a:c4:fe:ba:1b:c8:0e:7a:03:87:16:a6:1c:f1:a2:
         19:b5:b0:4a:f3:ed:ab:58:89:1d:51:94:43:c0:a4:01:47:c7:
         fb:32:a6:b3:80:23:ca:b6:ba:6e:49:89:65:e6:1b:5d:a7:32:
         1b:48:da:c9:7a:66:3e:35:64:fb:ff:70:6a:fa:ca:66:ff:22:
         16:fd:9f:0f:c2:4b:43:44:00:44:cd:f4:1e:51:c6:10:8f:2a:
         d5:4e:69:92:0a:28:0e:c8:c8:fc:f0:5a:fd:0b:97:f7:c0:15:
         2d:e4:4f:43:ba:f4:55:2c:bf:e1:51:a9:a0:19:c1:0c:a1:30:
         55:72:e3:a3:f0:b9:7c:89:4d:6d:da:cf:e8:4a:8d:36:54:dd:
         46:4f:78:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:15 2025 by rpki-client