Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274c34-40bb-4150-a5a9-da06d6fa4b61/1/LI-vVywgir73nHDr3uhjWcznO4g.mft
File:                     LI-vVywgir73nHDr3uhjWcznO4g.mft (raw, json)
Hash identifier:          PsDMoochYsfE8mQPHVBmBCr23Izb6Zka9YZDVQ1wH4o=
Subject key identifier:   95:9D:1C:BC:40:97:3D:0E:46:39:AE:5F:16:BE:CD:E0:CA:52:E5:4E
Authority key identifier: 2C:8F:AF:57:2C:20:8A:BE:F7:9C:70:EB:DE:E8:63:59:CC:E7:3B:88
Certificate issuer:       /CN=2c8faf572c208abef79c70ebdee86359cce73b88
Certificate serial:       01904868C6DCAF10F9B9FC14DC4B5686899C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LI-vVywgir73nHDr3uhjWcznO4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/274c34-40bb-4150-a5a9-da06d6fa4b61/1/LI-vVywgir73nHDr3uhjWcznO4g.mft
Manifest number:          087A
Signing time:             Mon 24 Jun 2024 04:02:24 +0000
Manifest this update:     Mon 24 Jun 2024 04:02:24 +0000
Manifest next update:     Tue 25 Jun 2024 04:02:24 +0000
Files and hashes:         1: LI-vVywgir73nHDr3uhjWcznO4g.crl (hash: XG+3Eub4X3xbTWNv6KATpJ9n0M0PcdAGjR8wOdoXnkw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:68:c6:dc:af:10:f9:b9:fc:14:dc:4b:56:86:89:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c8faf572c208abef79c70ebdee86359cce73b88
        Validity
            Not Before: Jun 24 04:02:24 2024 GMT
            Not After : Jun 25 04:02:24 2024 GMT
        Subject: CN=959d1cbc40973d0e4639ae5f16becde0ca52e54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:31:aa:bb:3d:9e:20:92:9d:d0:2d:53:df:
                    b9:9c:14:27:e8:b0:d5:ff:78:84:18:f5:93:f8:70:
                    ad:5e:fe:eb:61:1b:0d:b7:f1:8f:ec:bd:d3:33:2b:
                    9c:08:1c:78:a7:f5:14:d8:70:92:f4:0a:f1:bf:f6:
                    c2:c6:48:88:75:2d:e9:20:13:ee:fd:e6:fe:7e:1b:
                    c5:f8:e1:9d:ac:61:9a:73:51:71:3d:4a:9f:bc:1d:
                    ec:6f:b4:0f:82:9e:f0:2e:c0:a1:f9:c0:16:48:b2:
                    00:62:23:f8:31:15:c2:84:ca:a1:2e:7f:8f:f4:60:
                    21:27:56:b5:b5:f0:7a:95:95:d4:5a:b1:0f:e0:68:
                    eb:a0:80:20:48:78:be:f1:79:d0:ee:2a:bc:c9:e6:
                    89:02:09:d9:67:b5:a4:c4:dc:02:7c:f6:ad:55:66:
                    fc:bb:f8:ad:10:27:64:a0:df:6b:53:d4:7d:93:f3:
                    15:75:a2:22:35:2b:64:c7:5b:a7:ae:c5:40:dc:7d:
                    a7:cf:e9:f9:37:73:6c:80:b0:8a:da:f0:72:a8:7b:
                    00:a5:8d:a6:45:6a:80:cd:aa:c3:28:82:a8:34:84:
                    e4:eb:25:b9:2f:13:19:2a:62:3f:1d:25:ad:4f:3f:
                    9a:d5:2e:78:35:71:4c:28:8e:eb:05:7b:95:bb:9a:
                    0e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9D:1C:BC:40:97:3D:0E:46:39:AE:5F:16:BE:CD:E0:CA:52:E5:4E
            X509v3 Authority Key Identifier:
                keyid:2C:8F:AF:57:2C:20:8A:BE:F7:9C:70:EB:DE:E8:63:59:CC:E7:3B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-vVywgir73nHDr3uhjWcznO4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274c34-40bb-4150-a5a9-da06d6fa4b61/1/LI-vVywgir73nHDr3uhjWcznO4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274c34-40bb-4150-a5a9-da06d6fa4b61/1/LI-vVywgir73nHDr3uhjWcznO4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c3:69:3b:f4:96:f6:09:dd:04:dd:92:6b:fc:6a:73:8b:d1:
         55:1d:05:0f:0d:d0:ce:dc:1a:94:f6:98:1e:f8:b1:13:1b:e0:
         34:39:90:fd:9b:9c:8b:63:40:18:06:2f:1d:6c:99:47:89:4e:
         a7:bd:52:94:41:17:1d:63:87:82:25:93:dc:97:90:a2:f4:88:
         a0:03:ae:40:cf:f2:dd:c0:3d:9d:a5:8d:04:3d:a1:c0:f0:d9:
         bc:86:ad:cf:30:a5:07:3f:af:e0:b8:a0:60:54:73:fa:5b:8f:
         6e:9f:a3:c3:fd:68:c6:46:ca:82:be:ff:ab:ea:45:cf:be:32:
         ef:48:d9:47:31:27:0b:c1:c2:4a:bb:46:96:d5:61:6f:8d:9e:
         34:fd:28:e4:8a:23:2c:b7:d9:11:13:4a:f0:17:2e:13:06:45:
         60:08:6d:2a:4f:1b:65:24:aa:11:02:c3:cb:19:f4:7c:de:43:
         27:37:f0:de:23:9a:75:b0:92:af:b4:e6:84:3f:5e:d6:a2:6b:
         5c:d4:a8:d1:ce:f1:95:84:5d:eb:bc:60:e2:30:27:a9:56:62:
         5e:a5:0c:03:5b:47:da:d4:29:8a:6b:30:53:5a:6d:79:1a:79:
         b1:ec:75:89:f1:cd:1a:b2:79:ba:9e:07:9a:43:67:38:77:90:
         63:66:f6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:43:24 2025 by rpki-client