Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File:                     1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier:          XPWq54UgN+IbMi9KGFeRB2CXULlYu8w6QySrARTh0Cs=
Subject key identifier:   AB:DD:83:CB:65:41:E1:6B:B9:C3:00:40:BD:D2:93:BD:4E:55:E3:F7
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer:       /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial:       0194BC04AE536807326883736AAA7E6E8BA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number:          026E
Signing time:             Fri 31 Jan 2025 11:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:10 +0000
Files and hashes:         1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: FtHdMhQAw83SAa2lnJ6NhYD1x5qOlCOBH3iZZ1f4Dn0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:ae:53:68:07:32:68:83:73:6a:aa:7e:6e:8b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
        Validity
            Not Before: Jan 31 11:00:10 2025 GMT
            Not After : Feb  1 11:00:10 2025 GMT
        Subject: CN=abdd83cb6541e16bb9c30040bdd293bd4e55e3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:b4:a2:d1:f2:22:8f:da:1e:97:80:74:5c:
                    bd:8b:43:cb:21:32:8f:4e:4f:e9:a1:ad:1e:81:6a:
                    68:57:ff:73:eb:1e:b9:9d:f1:62:1b:31:9d:61:f9:
                    be:21:87:59:a5:75:39:e1:9a:12:66:6d:1d:d5:f4:
                    0d:a1:48:83:1e:a2:d1:b1:94:44:00:87:d9:cf:62:
                    42:1b:ae:df:d6:65:80:cb:6e:77:8a:d4:53:8a:71:
                    ad:5c:8b:89:47:5d:27:8c:b1:83:a8:cb:c1:96:a4:
                    b6:10:86:1b:85:a2:37:bc:22:48:37:b9:2e:9f:44:
                    b8:fa:12:e4:e9:93:6f:9e:5c:18:47:69:d1:bf:81:
                    b9:d4:1f:c7:9c:6d:ca:28:47:9f:b1:64:a3:78:87:
                    cb:3f:a3:7e:62:79:b6:7a:e9:8b:ac:71:0b:6c:4b:
                    94:ca:24:ca:18:df:e5:da:fe:f3:2f:be:37:2a:11:
                    e8:41:bf:5c:b9:69:10:0d:f1:19:21:43:9e:80:6b:
                    a0:f3:30:a8:6e:c1:8c:e2:f3:21:8f:34:5a:af:8d:
                    f4:76:fb:bf:69:cd:2a:3f:e7:1e:9a:70:6b:b1:77:
                    1c:78:e1:a7:b2:52:1d:e8:54:03:25:12:8d:f5:dc:
                    4b:e8:c6:0e:26:af:7a:89:1b:58:e2:c8:8f:b3:86:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DD:83:CB:65:41:E1:6B:B9:C3:00:40:BD:D2:93:BD:4E:55:E3:F7
            X509v3 Authority Key Identifier:
                keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:07:14:a8:8e:b7:a1:67:e2:2b:9f:66:8d:c7:1d:06:40:cc:
         9f:89:a8:eb:1e:d2:34:11:b0:95:e7:f6:06:c1:28:01:33:1f:
         77:af:1f:cd:a1:dd:48:4a:b1:68:10:c2:9f:c5:4a:46:19:56:
         d1:b4:4a:92:51:1c:a5:ca:5a:28:12:67:aa:69:43:e1:16:41:
         5f:d0:76:a2:5e:82:bc:6b:04:4c:31:73:38:98:a3:30:7a:81:
         a7:bb:4a:43:af:38:df:9a:54:df:89:92:7f:1b:8d:04:11:1a:
         35:0f:03:86:31:ed:48:4c:f8:50:65:81:dc:3c:f0:29:f7:ae:
         03:57:47:30:24:2e:bc:bb:44:59:8a:06:90:1e:a0:70:9c:34:
         4e:f4:c3:3c:2e:5f:6b:21:ba:f0:8b:21:19:0f:7e:ec:c6:67:
         e8:48:55:59:88:3e:af:63:1b:6c:67:60:63:31:4a:4b:27:9c:
         34:64:d1:3f:82:16:08:65:8b:28:b9:b5:d3:7f:a6:55:a1:e5:
         0e:8e:6e:0b:ee:08:70:27:a2:41:79:80:bf:96:74:15:47:ce:
         c4:81:f7:71:75:63:6c:2f:e6:86:53:a9:e8:18:37:63:08:e8:
         bc:e0:f0:16:cf:f8:e8:a5:6c:82:70:44:50:34:08:07:89:ba:
         fe:2f:a1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:25 2025 by rpki-client