Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.mft
File:                     JDPLPigynY7phe1GyEKDubN0CPM.mft (raw, json)
Hash identifier:          UVLA/SyrqNrp+U2JKo4mihNjAOrztsrqGjmZ7vaeP40=
Subject key identifier:   9D:29:15:5C:23:A8:4A:83:8B:FD:DE:0B:A6:7F:D4:BE:22:3A:60:E5
Authority key identifier: 24:33:CB:3E:28:32:9D:8E:E9:85:ED:46:C8:42:83:B9:B3:74:08:F3
Certificate issuer:       /CN=2433cb3e28329d8ee985ed46c84283b9b37408f3
Certificate serial:       0194BD17BE14ED6F31478D4B4DDB2F8456A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JDPLPigynY7phe1GyEKDubN0CPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.mft
Manifest number:          0887
Signing time:             Fri 31 Jan 2025 16:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:37 +0000
Files and hashes:         1: JDPLPigynY7phe1GyEKDubN0CPM.crl (hash: sD7iiWYI0L9Ql8FGDAfAZGl/V88EkBf8t9e83npUGb4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:be:14:ed:6f:31:47:8d:4b:4d:db:2f:84:56:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2433cb3e28329d8ee985ed46c84283b9b37408f3
        Validity
            Not Before: Jan 31 16:00:37 2025 GMT
            Not After : Feb  1 16:00:37 2025 GMT
        Subject: CN=9d29155c23a84a838bfdde0ba67fd4be223a60e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:88:9d:dd:61:b8:ce:cd:f6:3e:66:0d:2f:fd:
                    94:c4:44:7f:ac:43:35:a7:08:2d:5f:64:be:cc:fc:
                    10:12:d0:f5:cd:2c:2a:53:7e:76:86:b6:5e:0d:41:
                    ea:c6:56:5f:f6:cc:87:d5:9d:bf:30:75:73:5f:fa:
                    a3:99:97:fe:84:51:4a:52:d7:d9:a4:10:91:7a:3f:
                    ee:c4:20:33:60:1c:15:b9:5e:a6:98:8c:31:15:5a:
                    45:63:f2:6e:51:43:84:dc:e3:c1:18:6e:50:8a:86:
                    b5:4a:8c:fb:cf:8c:c6:6b:a4:7d:72:2f:7b:9a:f8:
                    fa:aa:0c:cb:84:02:5e:52:ee:0e:95:f2:07:f5:aa:
                    1f:14:e2:9b:f4:eb:b8:12:eb:ea:76:1f:f4:de:b9:
                    56:c8:89:7c:9a:ac:0f:71:1a:9c:81:d9:bf:e3:9c:
                    f2:2b:80:31:f4:42:b0:2a:5b:5a:07:06:f4:a5:49:
                    c5:a4:91:f8:f5:1a:86:6f:12:f7:93:0a:05:cf:41:
                    7c:dd:42:9c:d9:31:3a:dd:fd:e2:72:57:4e:85:e2:
                    08:34:55:77:3f:93:32:f4:ea:88:4a:b3:25:19:fb:
                    e7:3c:d3:0c:4d:b8:19:e5:fa:86:86:af:57:aa:1f:
                    a3:f1:93:ba:84:51:bc:c6:ca:6d:5c:d0:8a:50:06:
                    e7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:29:15:5C:23:A8:4A:83:8B:FD:DE:0B:A6:7F:D4:BE:22:3A:60:E5
            X509v3 Authority Key Identifier:
                keyid:24:33:CB:3E:28:32:9D:8E:E9:85:ED:46:C8:42:83:B9:B3:74:08:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDPLPigynY7phe1GyEKDubN0CPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9c:ed:8a:fe:80:dd:52:65:c9:09:c6:31:35:61:d1:e8:7b:
         80:9d:26:0f:4c:b0:84:87:6c:d6:a9:ec:27:be:fe:ee:dd:d6:
         df:fa:42:c1:03:15:ea:03:1f:b3:05:a3:d7:6f:33:8d:19:b9:
         eb:bf:bd:7c:b6:2e:2a:1d:98:e1:b0:29:ef:88:ac:70:8d:ad:
         d9:1e:ab:fe:b1:33:d3:5b:35:4d:73:37:3c:2f:ce:83:e7:33:
         80:80:3b:1e:9a:9b:5c:b0:10:49:3a:2b:59:99:d6:6f:ce:19:
         e1:9e:76:20:f1:87:c4:1a:bf:3f:17:2a:05:0b:a6:7a:14:81:
         dd:39:c3:49:a4:01:4e:e1:14:4d:8c:f6:c3:db:48:c2:cc:9b:
         52:5e:00:1f:87:f6:59:a3:e4:2f:79:d3:80:de:ea:8b:1b:2e:
         9a:db:99:a7:0a:9f:77:7d:02:1e:f8:e0:6a:18:8d:9c:56:f5:
         ae:5a:d1:34:2c:77:43:7c:35:db:27:62:28:99:63:70:e1:a0:
         d4:f7:36:d9:a6:58:42:18:2b:a8:ae:b0:95:10:92:4b:63:af:
         0f:8d:46:42:ba:3b:21:5e:8f:12:04:06:57:25:bf:65:4c:b9:
         fe:54:fd:bf:4c:9e:5f:34:a7:b0:4a:75:ca:aa:18:f9:8c:05:
         1a:f2:01:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:58:27 2025 by rpki-client