Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c204b2-4f92-46eb-924e-b0814f279430/1/xDI1a8oY70s4h9aarCd5fQvDy9Q.mft
File:                     xDI1a8oY70s4h9aarCd5fQvDy9Q.mft (raw, json)
Hash identifier:          Xy1m4mdOj6AsUuaGe3EAO/E2U8L0D9DP2WrUwFya1Us=
Subject key identifier:   11:57:B9:98:9E:D4:31:5E:9D:A1:04:42:2D:28:75:A3:7E:F9:D9:3E
Authority key identifier: C4:32:35:6B:CA:18:EF:4B:38:87:D6:9A:AC:27:79:7D:0B:C3:CB:D4
Certificate issuer:       /CN=c432356bca18ef4b3887d69aac27797d0bc3cbd4
Certificate serial:       0191E5096F304ECA3D339421D61E9331C030
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xDI1a8oY70s4h9aarCd5fQvDy9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/c204b2-4f92-46eb-924e-b0814f279430/1/xDI1a8oY70s4h9aarCd5fQvDy9Q.mft
Manifest number:          0D4A
Signing time:             Thu 12 Sep 2024 07:01:26 +0000
Manifest this update:     Thu 12 Sep 2024 07:01:26 +0000
Manifest next update:     Fri 13 Sep 2024 07:01:26 +0000
Files and hashes:         1: xDI1a8oY70s4h9aarCd5fQvDy9Q.crl (hash: 7Ccf8NV6vmVtTHMDUjSjOvlpnd17fgOwQk6c7sMMoQM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:e5:09:6f:30:4e:ca:3d:33:94:21:d6:1e:93:31:c0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c432356bca18ef4b3887d69aac27797d0bc3cbd4
        Validity
            Not Before: Sep 12 07:01:26 2024 GMT
            Not After : Sep 13 07:01:26 2024 GMT
        Subject: CN=1157b9989ed4315e9da104422d2875a37ef9d93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:7a:75:cb:ce:5c:75:33:48:29:df:1e:40:
                    88:3f:2d:1f:da:25:53:6a:8e:61:d8:d0:ba:df:6b:
                    d7:6f:19:bd:f8:60:bd:66:73:ab:7a:5d:b8:6b:c4:
                    f9:4e:1f:8b:96:54:83:84:9e:58:07:71:aa:d2:78:
                    36:ce:09:ed:b5:43:e0:ed:a8:7f:1e:6f:d2:da:4e:
                    2d:0c:48:84:5f:f8:5f:22:98:26:d6:ac:b9:d5:af:
                    dd:25:e8:6f:e9:bb:68:df:a3:b4:67:ba:fc:04:da:
                    16:7b:9a:ef:4f:a3:5a:61:49:91:e6:e6:1c:1c:28:
                    3a:66:87:56:db:29:e1:5e:a6:6a:b6:ce:58:9a:18:
                    e0:64:7b:71:16:e4:d8:f8:dd:da:0a:bf:f7:bd:54:
                    6e:7f:3d:d3:78:a8:7f:a8:28:43:c7:c1:af:61:88:
                    14:37:58:bb:d0:47:45:3b:b0:ad:d9:18:4f:cf:e1:
                    3c:92:a1:17:70:0d:2a:33:a5:6b:d2:36:42:38:fc:
                    14:de:98:ac:0a:bc:8b:e7:86:e9:af:70:7b:9f:c2:
                    ff:99:ce:43:12:94:73:94:4a:5e:86:27:48:cf:9f:
                    c9:1a:57:1c:90:33:42:98:42:54:15:c1:b0:32:2e:
                    6f:79:30:a9:6f:2a:1b:1b:01:91:70:15:8e:8f:2d:
                    0a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:57:B9:98:9E:D4:31:5E:9D:A1:04:42:2D:28:75:A3:7E:F9:D9:3E
            X509v3 Authority Key Identifier:
                keyid:C4:32:35:6B:CA:18:EF:4B:38:87:D6:9A:AC:27:79:7D:0B:C3:CB:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDI1a8oY70s4h9aarCd5fQvDy9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c204b2-4f92-46eb-924e-b0814f279430/1/xDI1a8oY70s4h9aarCd5fQvDy9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c204b2-4f92-46eb-924e-b0814f279430/1/xDI1a8oY70s4h9aarCd5fQvDy9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:4e:2d:f9:21:d6:e9:86:fc:b5:d6:71:3c:d0:93:32:5b:91:
         b0:03:88:69:b0:a8:d2:9f:30:5f:2e:c1:f0:c7:c5:02:53:84:
         17:00:c0:ab:87:49:a9:f9:38:b9:bf:6b:de:f4:86:fc:80:36:
         20:a7:16:9e:9b:c7:b6:14:17:b3:7b:d4:34:88:fd:b3:34:4b:
         9c:0a:a3:ab:2d:e8:e6:31:92:f9:e0:9f:a4:45:de:68:8a:30:
         70:bd:43:a4:1f:64:31:53:80:f5:80:fa:91:3c:15:47:6e:14:
         61:84:fd:81:f4:e1:3c:b3:a4:71:b8:ea:83:bf:52:9c:ad:13:
         2d:17:15:d4:a8:7e:ac:c4:1c:9a:bd:4b:5c:66:f0:2b:5f:c7:
         9a:44:8c:c4:e6:89:2f:5c:f6:1a:c3:69:da:d4:10:62:11:8f:
         2f:72:02:8e:c5:d4:fc:2e:28:af:67:75:60:a0:4a:90:92:04:
         1f:0a:52:58:6c:69:d2:32:a5:09:65:8a:6d:92:f9:d2:79:b3:
         17:4e:61:32:2c:68:27:f7:59:3a:d0:69:5e:4c:cb:89:1d:fe:
         e6:c4:4e:15:07:5a:8e:af:a1:27:da:7d:ad:f5:35:a3:30:af:
         61:f8:26:ef:6a:82:09:8b:cc:e4:fa:2a:b3:9e:92:ec:8a:56:
         7c:1b:f2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:41:27 2025 by rpki-client