Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
File:                     rK67C7Ozijz0QMgf97PhaTMqpm0.mft (raw, json)
Hash identifier:          3sqXIv3Xt9HalXbi3pOJhJ+KpgLNCVkuKdetXvRF0N8=
Subject key identifier:   11:69:58:2E:D9:11:5E:3A:82:4A:D3:35:6B:12:92:54:4B:3E:48:E6
Authority key identifier: AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D
Certificate issuer:       /CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
Certificate serial:       0194BBCE805C0C406C590D90ED58BB8C32EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
Manifest number:          1031
Signing time:             Fri 31 Jan 2025 10:01:00 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:00 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:00 +0000
Files and hashes:         1: rK67C7Ozijz0QMgf97PhaTMqpm0.crl (hash: wAxEwhZiU5Az6FLZeklO8laIyv5Vw1K/Tco7VlcHzvY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:80:5c:0c:40:6c:59:0d:90:ed:58:bb:8c:32:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
        Validity
            Not Before: Jan 31 10:01:00 2025 GMT
            Not After : Feb  1 10:01:00 2025 GMT
        Subject: CN=1169582ed9115e3a824ad3356b1292544b3e48e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bf:20:c8:78:ec:0e:45:88:af:4e:7d:96:ff:
                    85:47:64:a9:6c:0c:46:bd:c6:77:ab:3f:8a:e0:f4:
                    d5:b1:82:47:d2:41:e0:ff:c7:50:0a:76:1c:b2:08:
                    cf:29:d1:9f:95:a5:da:13:68:d3:35:de:1f:c2:05:
                    a4:e2:00:42:f5:4c:cf:d9:ab:ee:d7:01:0e:43:18:
                    1c:f9:a3:d9:1f:eb:23:6e:81:f5:7d:ae:8b:66:e0:
                    2d:45:06:50:95:4d:ca:83:ce:66:bd:53:3c:4f:06:
                    07:3b:b7:dd:94:33:d9:d1:87:e6:84:7a:b0:f4:c1:
                    2d:da:9b:0d:e9:75:88:6d:9a:77:cf:ca:25:43:cc:
                    c7:61:41:12:d1:48:d5:e4:c9:37:db:2a:23:96:0d:
                    75:e3:b2:51:88:e1:1c:2a:55:3b:c6:4f:2a:01:2e:
                    91:0c:e2:60:9b:6b:07:d1:79:78:58:33:13:45:d0:
                    fc:5e:89:0f:fc:05:ed:69:90:a9:9f:77:d4:a3:d9:
                    89:45:15:84:ab:36:45:32:41:93:98:45:11:23:1e:
                    88:9b:58:cc:f3:7e:ab:a5:59:7c:19:ef:a1:05:d4:
                    41:fe:ed:7d:74:26:8c:57:e7:16:19:3f:4f:0e:4b:
                    31:4d:d1:07:0a:78:9e:f5:bd:21:e4:43:ae:8b:ca:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:69:58:2E:D9:11:5E:3A:82:4A:D3:35:6B:12:92:54:4B:3E:48:E6
            X509v3 Authority Key Identifier:
                keyid:AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:df:6e:2b:97:ad:36:19:fd:21:85:c0:25:a4:b9:54:8a:b3:
         37:38:3d:b3:fc:06:d2:6a:e7:6d:a1:15:cd:4f:e0:9a:d8:35:
         b2:16:62:ed:53:0e:b0:69:f6:3f:2d:bb:78:82:31:92:89:fa:
         b8:5d:fb:08:79:29:a5:14:6c:cf:d8:a2:78:06:81:6a:79:d6:
         a2:27:da:a9:2c:e4:47:c2:6d:2f:a4:5e:8e:d6:00:d9:0c:74:
         3d:9c:fe:13:10:c2:df:90:e2:b3:2a:6a:a8:f6:8e:7b:65:25:
         d7:1c:32:50:86:33:83:b0:05:b8:6d:d5:cd:42:1e:f8:84:57:
         1f:2f:52:6d:a0:67:d1:08:dc:cc:a5:7a:bb:2e:78:f4:db:8e:
         d1:2b:24:3b:19:b6:5c:ad:5c:3b:f9:4c:5d:f3:cb:82:fc:ab:
         da:10:13:df:73:ce:cd:de:b0:76:b6:db:2b:8c:8f:42:bf:82:
         30:6f:7f:3d:bd:ff:89:ae:99:4b:cd:77:95:ea:3b:01:33:67:
         aa:3c:5f:9b:94:be:2d:9f:a5:6d:f6:44:e5:51:bc:7d:45:8a:
         77:2a:cd:65:f6:af:3b:8d:1c:d5:4b:d7:2e:94:04:47:5c:43:
         db:e4:09:75:8e:4f:b9:89:a5:9b:a3:74:ef:ef:69:7f:e7:0c:
         65:7f:6f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:47 2025 by rpki-client