Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/313b2a-73d0-4f60-99b9-8221a606c0a3/1/1mgN10jNpt4SlOof13ZbMmxnEOI.mft
File:                     1mgN10jNpt4SlOof13ZbMmxnEOI.mft (raw, json)
Hash identifier:          Y+X1EvznIVk/yCz+I3pV3KaAvoybvSHyp52Y5NnFFqs=
Subject key identifier:   21:34:7D:6C:7D:C2:77:7D:2F:A3:46:BA:D2:EE:AE:49:3E:32:7A:C8
Authority key identifier: D6:68:0D:D7:48:CD:A6:DE:12:94:EA:1F:D7:76:5B:32:6C:67:10:E2
Certificate issuer:       /CN=d6680dd748cda6de1294ea1fd7765b326c6710e2
Certificate serial:       0196A84283D98EE18092403A1A4C9ED8FA3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mgN10jNpt4SlOof13ZbMmxnEOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/313b2a-73d0-4f60-99b9-8221a606c0a3/1/1mgN10jNpt4SlOof13ZbMmxnEOI.mft
Manifest number:          0B58
Signing time:             Wed 07 May 2025 01:00:53 +0000
Manifest this update:     Wed 07 May 2025 01:00:53 +0000
Manifest next update:     Thu 08 May 2025 01:00:53 +0000
Files and hashes:         1: 1mgN10jNpt4SlOof13ZbMmxnEOI.crl (hash: Q2G0nKObUrwFxG7rCnu/d9LFbOGseJsH2zVO0naUw9M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:42:83:d9:8e:e1:80:92:40:3a:1a:4c:9e:d8:fa:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6680dd748cda6de1294ea1fd7765b326c6710e2
        Validity
            Not Before: May  7 01:00:53 2025 GMT
            Not After : May  8 01:00:53 2025 GMT
        Subject: CN=21347d6c7dc2777d2fa346bad2eeae493e327ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:77:5f:2a:bb:a9:8a:e9:29:1a:06:90:02:5d:
                    40:5a:c4:27:9f:3a:bd:ce:1f:ff:5b:dd:8a:cb:d9:
                    f0:e6:1e:2e:8a:6d:4a:d9:68:5a:70:9d:62:f0:99:
                    8a:03:40:17:11:92:fa:13:c8:5e:4c:fd:77:9c:e4:
                    ce:47:cd:1a:7b:b0:71:72:d2:7b:8f:23:75:17:b4:
                    a6:ba:a5:69:9f:71:bb:40:25:f2:bf:0a:09:65:ea:
                    c5:22:c2:7b:4f:e0:ed:cb:1d:ad:2b:3b:bb:5e:2a:
                    f0:11:22:87:e3:2d:38:d4:be:79:2a:5d:dd:5e:4c:
                    77:18:79:ff:60:d4:bc:26:28:ab:85:9f:75:ab:1a:
                    8c:d9:33:2f:34:67:60:34:ef:a8:be:92:e1:b2:e2:
                    a4:4d:42:20:5c:d7:e9:18:2e:3b:4a:e4:23:92:6c:
                    1a:3e:57:22:dc:ed:70:78:9a:bc:b7:19:c3:3f:0c:
                    8e:e6:e0:3e:af:12:6d:6e:2d:21:04:14:82:6f:25:
                    9f:e3:a5:67:d9:bd:3a:12:0f:fb:c8:de:ea:a2:e7:
                    9d:01:8f:8b:aa:59:fd:35:ab:68:27:f7:90:15:a5:
                    67:dc:3c:15:42:12:4c:ad:5c:6f:35:4e:49:ae:10:
                    f9:90:da:df:49:dd:4d:49:44:26:22:2f:b4:3e:90:
                    3d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:34:7D:6C:7D:C2:77:7D:2F:A3:46:BA:D2:EE:AE:49:3E:32:7A:C8
            X509v3 Authority Key Identifier:
                keyid:D6:68:0D:D7:48:CD:A6:DE:12:94:EA:1F:D7:76:5B:32:6C:67:10:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mgN10jNpt4SlOof13ZbMmxnEOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/313b2a-73d0-4f60-99b9-8221a606c0a3/1/1mgN10jNpt4SlOof13ZbMmxnEOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/313b2a-73d0-4f60-99b9-8221a606c0a3/1/1mgN10jNpt4SlOof13ZbMmxnEOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:6c:52:d9:c0:ac:99:04:1d:cb:44:96:79:71:c9:f4:76:ce:
         9a:fd:33:21:03:fa:9f:d1:cd:bb:51:90:42:0d:53:3e:d5:e6:
         20:f1:3e:8c:1c:d0:d4:75:6b:88:05:8e:1c:41:8f:6c:a4:62:
         37:89:36:b4:0d:09:4c:44:59:d7:08:83:ad:56:2c:4f:c5:21:
         d0:66:81:e7:22:d3:1d:7e:c5:b9:59:2a:49:18:99:6f:5a:4c:
         fd:1c:09:fe:bd:5f:f0:47:e7:c2:c6:eb:6b:df:e7:b0:39:a5:
         6e:22:a8:41:25:cc:6d:9c:fe:97:96:79:d4:fb:8d:4d:86:07:
         bb:a2:3c:19:d1:ba:4b:f5:3c:a8:77:98:b2:80:0f:34:b3:61:
         56:05:6e:60:21:b0:73:81:47:45:27:d6:e9:ea:59:aa:c0:8b:
         a6:4a:a3:a9:6f:75:8b:4f:bf:89:84:bd:d2:07:a4:f9:74:cd:
         0f:93:ab:2e:f3:f4:22:27:58:b4:ac:af:b2:51:c1:9d:e3:08:
         ac:42:cd:b4:d0:ba:8e:b3:5d:6d:53:b3:b8:05:74:79:aa:fe:
         69:ac:6e:5d:04:e8:b3:ea:1a:04:51:22:c0:af:95:57:bb:2b:
         61:ce:07:ce:3f:3c:77:2b:58:1f:d2:1d:4a:6a:c0:06:48:96:
         42:3b:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:59:54 2025 by rpki-client