Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
File:                     MWg4BbI9i3h9aSEFPX666XBAihk.mft (raw, json)
Hash identifier:          YaIAngLWlZCWmUQyY7eqoHQAdz4BhHtnVweDCSfSyVc=
Subject key identifier:   1F:47:E6:74:24:11:8A:D9:82:22:1E:18:56:09:4E:BF:73:96:46:48
Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
Certificate issuer:       /CN=31683805b23d8b787d6921053d7ebae970408a19
Certificate serial:       0194BD17661D360672099C0DF4BF413E3E2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
Manifest number:          0272
Signing time:             Fri 31 Jan 2025 16:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:14 +0000
Files and hashes:         1: MWg4BbI9i3h9aSEFPX666XBAihk.crl (hash: LhfHzmlPiHGmgXATwxcVfV/6G550WSGkoKfQUZggFNs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:66:1d:36:06:72:09:9c:0d:f4:bf:41:3e:3e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19
        Validity
            Not Before: Jan 31 16:00:14 2025 GMT
            Not After : Feb  1 16:00:14 2025 GMT
        Subject: CN=1f47e67424118ad982221e1856094ebf73964648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:29:fb:51:cc:5b:cb:d5:40:69:20:ec:75:07:
                    f6:35:99:3a:04:06:42:96:46:27:39:23:4b:92:6b:
                    29:07:47:76:d9:73:43:9f:6e:d5:93:f3:cf:1c:12:
                    e8:e7:a9:b8:5e:fe:61:a4:9f:22:36:69:21:51:31:
                    85:bc:4b:54:fd:d5:94:25:c4:c8:98:40:ab:4d:b0:
                    1e:76:65:9b:6a:9b:f1:97:85:b3:86:fd:bd:63:25:
                    4f:14:d2:7b:6e:5d:32:de:1f:aa:de:ae:5f:e2:84:
                    99:cb:4c:ea:a0:39:e3:d7:ca:6a:97:db:88:26:8b:
                    e4:8a:ae:82:45:b6:c5:8b:11:b9:6c:a5:92:c9:43:
                    0b:10:1c:d6:e2:0d:29:4a:b1:50:6c:22:82:ac:cc:
                    6e:5b:2f:04:c5:cd:67:fb:47:60:cc:4f:2e:3b:b7:
                    06:3e:af:b5:9f:09:69:53:79:9c:a7:4f:0f:86:8d:
                    43:fa:74:82:cc:3a:ef:bc:09:83:36:8a:ad:cb:bc:
                    6b:81:35:40:8e:b6:3f:8c:bc:4e:fa:84:2d:bf:d3:
                    26:30:af:7c:b5:bf:a6:34:b5:d7:6e:23:f0:f4:7b:
                    a0:af:15:41:22:97:8a:59:3b:96:ae:aa:87:30:44:
                    7d:b6:ef:fd:09:39:52:91:cb:bc:31:93:ee:b1:b3:
                    dc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:47:E6:74:24:11:8A:D9:82:22:1E:18:56:09:4E:BF:73:96:46:48
            X509v3 Authority Key Identifier:
                keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3e:57:78:0d:fb:25:7f:20:a1:8a:7b:21:19:2c:b6:1f:48:
         0c:45:da:bb:07:ea:2f:41:20:e1:dd:4c:42:05:73:cb:e9:af:
         6e:9a:1d:49:62:f0:8a:03:18:4d:c2:bb:53:58:6e:99:f6:56:
         2e:ad:bd:36:75:c3:bc:3b:dc:0f:0d:dc:62:80:a2:9d:db:38:
         1b:5e:3c:8a:38:ea:e3:65:2e:0f:11:c8:c4:93:16:90:eb:19:
         27:1b:e6:8f:c9:4a:d6:9b:8a:2c:0f:b0:40:f8:41:84:72:2a:
         e2:b4:9b:b3:47:e3:08:72:39:d6:73:c9:68:68:df:3e:d4:f2:
         66:16:03:d5:f7:d0:75:19:9d:f2:bc:3a:82:ef:bd:32:8c:5f:
         5e:f9:f9:92:a6:e6:bd:56:fa:22:33:37:da:47:1f:9c:d1:31:
         fe:49:49:4a:7d:cc:e7:22:e1:58:91:3c:27:10:2e:64:3f:b3:
         ef:a4:36:57:4f:a6:f0:2c:cd:85:31:0e:91:73:64:5d:b3:cd:
         04:d7:92:8b:9c:35:63:c3:a3:10:b4:08:45:ae:45:d0:67:0e:
         d6:e9:7f:3d:bf:19:30:90:df:14:68:49:52:84:e5:f9:5b:4f:
         ed:e2:55:f9:63:5f:b5:90:84:7b:78:bb:33:7e:9e:f6:9b:0c:
         b4:d0:f5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:07 2025 by rpki-client