Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
File:                     TvYP_RC7937OmKeBY1mERCd9v6Q.mft (raw, json)
Hash identifier:          csMn3BwaHHFtat4TQ4TcA/ck7NM8KmO0sGt7Q7fIO7M=
Subject key identifier:   69:93:9F:58:D4:D5:27:72:3C:BB:6A:FB:D0:77:08:27:F6:D4:4F:1A
Authority key identifier: 4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4
Certificate issuer:       /CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
Certificate serial:       0194BBCE3C7B975C29F16D14C6370389D879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 10:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:42 +0000
Files and hashes:         1: TvYP_RC7937OmKeBY1mERCd9v6Q.crl (hash: M4QM673jRb4ziEAsOAUDvlruw1giKCVxLHjMf0gPuHI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:3c:7b:97:5c:29:f1:6d:14:c6:37:03:89:d8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
        Validity
            Not Before: Jan 31 10:00:42 2025 GMT
            Not After : Feb  1 10:00:42 2025 GMT
        Subject: CN=69939f58d4d527723cbb6afbd0770827f6d44f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:37:74:02:59:de:f9:4c:e8:a8:46:8e:8a:
                    1a:a4:38:cc:5c:fb:75:56:f0:b5:60:86:82:a6:03:
                    ad:bb:b9:6f:61:64:3f:cc:53:b2:fa:14:cd:89:80:
                    ec:73:64:ca:d8:9a:31:65:a0:f5:cb:84:5d:17:cc:
                    14:c9:33:6b:e4:83:86:c4:0e:cb:d2:5f:cd:40:2b:
                    3e:6b:c8:f5:bb:12:03:53:5f:a7:89:ea:65:77:3f:
                    1b:1c:9a:6c:6f:ae:d8:94:72:95:36:d6:53:46:ed:
                    11:e7:88:3f:3b:90:7f:41:c8:71:25:1b:cc:12:cb:
                    56:6d:35:ed:ec:db:e6:a4:67:ee:4e:27:90:01:79:
                    a8:34:36:1d:0d:c3:24:6c:40:75:62:83:7f:99:35:
                    bd:de:da:8d:70:44:92:32:b5:a1:1a:f5:44:12:e8:
                    a9:98:ef:a1:db:16:e9:5a:3b:2c:5a:9c:37:dd:bf:
                    69:7a:70:a9:bb:31:12:7f:72:ff:00:3c:13:d5:a8:
                    7c:e7:aa:e5:ef:f0:44:03:4b:e9:87:87:73:0f:38:
                    bc:b0:16:39:98:ee:c2:f1:fe:0c:50:ed:74:83:fd:
                    15:ed:6d:06:fa:0f:51:37:bb:62:2e:37:bb:e3:a2:
                    43:92:09:fd:38:9f:e6:3f:0c:25:34:ad:ef:86:62:
                    6c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:93:9F:58:D4:D5:27:72:3C:BB:6A:FB:D0:77:08:27:F6:D4:4F:1A
            X509v3 Authority Key Identifier:
                keyid:4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:74:b2:5a:f3:85:4a:50:6d:99:64:88:a4:ac:b9:2c:0e:6b:
         89:29:b7:db:aa:eb:d6:99:c6:99:bf:d2:4f:f9:c0:30:79:e8:
         8c:59:49:9d:5a:7e:28:93:c0:9f:7c:74:db:43:e4:c9:a6:66:
         17:c5:67:99:c6:a4:8b:20:c2:a2:26:5a:28:bc:c6:d3:65:f3:
         92:dc:01:9e:b5:6c:94:5a:80:2c:11:f6:f6:44:6a:cd:fa:33:
         68:dd:e4:5e:4d:87:38:27:9d:1f:0b:5e:89:d0:19:28:97:87:
         d5:e3:4d:6e:7b:da:ae:f4:28:dd:71:59:be:0a:58:ff:b5:72:
         7f:b0:c8:50:c4:b3:5c:66:8c:7c:51:35:ad:bb:f0:0a:2a:72:
         cb:ba:65:8a:45:b5:a0:11:2f:83:d3:a0:63:cc:11:ce:9b:88:
         13:0b:8d:3d:f2:c4:31:c3:2e:c8:20:7e:73:22:fb:a0:e3:1b:
         6e:32:01:c1:ed:ee:99:59:a8:fa:85:80:04:85:23:38:8d:c5:
         8a:74:36:2b:8f:fb:a4:6b:03:a4:df:5a:e3:3d:c0:20:36:07:
         1b:c5:0b:df:22:ec:96:10:96:8f:ac:de:38:30:ba:53:ed:0a:
         4a:7f:88:b8:ef:47:1e:ef:39:0e:9b:92:ce:96:76:ed:b7:ab:
         bc:99:13:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:55 2025 by rpki-client