Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/350b84-1aed-4e83-b158-631bcf6f14db/1/1jJTG7z24ATYT681_tawK30zVAs.mft
File:                     1jJTG7z24ATYT681_tawK30zVAs.mft (raw, json)
Hash identifier:          s2bMXWyQ13ja8r9qPXJiQ1eZNTsmN4pyixeNFqzw47Y=
Subject key identifier:   DF:B3:0F:9A:21:E4:C1:CD:FC:14:76:41:CF:8F:7F:46:A1:B4:42:F5
Authority key identifier: D6:32:53:1B:BC:F6:E0:04:D8:4F:AF:35:FE:D6:B0:2B:7D:33:54:0B
Certificate issuer:       /CN=d632531bbcf6e004d84faf35fed6b02b7d33540b
Certificate serial:       01937571018AA109BA2927B185FA61EDFB1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1jJTG7z24ATYT681_tawK30zVAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/350b84-1aed-4e83-b158-631bcf6f14db/1/1jJTG7z24ATYT681_tawK30zVAs.mft
Manifest number:          05CE
Signing time:             Fri 29 Nov 2024 01:02:40 +0000
Manifest this update:     Fri 29 Nov 2024 01:02:40 +0000
Manifest next update:     Sat 30 Nov 2024 01:02:40 +0000
Files and hashes:         1: 1jJTG7z24ATYT681_tawK30zVAs.crl (hash: FHWRqzm9rRxNlVcLUAmBkHbX+8tozyPhDSarThHovRE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:75:71:01:8a:a1:09:ba:29:27:b1:85:fa:61:ed:fb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d632531bbcf6e004d84faf35fed6b02b7d33540b
        Validity
            Not Before: Nov 29 01:02:40 2024 GMT
            Not After : Nov 30 01:02:40 2024 GMT
        Subject: CN=dfb30f9a21e4c1cdfc147641cf8f7f46a1b442f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e7:85:cb:e8:05:57:c5:4c:12:d8:44:6f:74:
                    da:5b:79:17:67:05:c0:21:29:46:e9:80:13:69:95:
                    a2:8f:86:02:08:6e:1f:c4:3d:1e:8f:8b:02:c3:82:
                    20:3f:ff:80:42:1b:95:d3:a6:67:6f:5f:e4:78:df:
                    c2:12:88:7d:56:1b:c5:ac:7b:22:99:76:1a:a6:46:
                    ca:eb:12:e3:cd:89:c0:02:bd:cd:97:a3:7a:41:8f:
                    06:7c:00:ef:91:11:bb:35:a3:d0:5d:89:2d:8b:5e:
                    ee:a7:d8:9f:5c:65:fd:7f:29:ed:09:1c:c6:1c:5d:
                    1e:94:e4:ac:5c:90:e5:cb:8f:16:9b:fc:b7:29:c3:
                    ac:43:db:27:02:31:de:1e:df:e4:e8:e1:63:49:45:
                    fc:af:db:49:2e:ff:09:8e:16:85:46:63:d1:68:85:
                    24:dd:4e:28:5d:29:ef:c9:2b:d6:ad:d9:22:56:a7:
                    79:6c:21:79:46:4d:42:d9:c4:18:cc:c5:6a:39:5e:
                    e3:03:92:ed:cf:bc:36:33:7e:5e:d8:41:21:79:0c:
                    31:c4:e8:f4:e4:e5:92:4c:e5:d2:fb:66:c9:3e:d7:
                    c7:81:32:55:63:e7:b9:aa:a5:37:44:18:b7:c4:0b:
                    05:c7:25:30:2a:8c:da:48:01:53:c1:4b:5d:5d:f5:
                    4b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B3:0F:9A:21:E4:C1:CD:FC:14:76:41:CF:8F:7F:46:A1:B4:42:F5
            X509v3 Authority Key Identifier:
                keyid:D6:32:53:1B:BC:F6:E0:04:D8:4F:AF:35:FE:D6:B0:2B:7D:33:54:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jJTG7z24ATYT681_tawK30zVAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/350b84-1aed-4e83-b158-631bcf6f14db/1/1jJTG7z24ATYT681_tawK30zVAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/350b84-1aed-4e83-b158-631bcf6f14db/1/1jJTG7z24ATYT681_tawK30zVAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d4:83:c1:a6:ee:fe:f8:f8:aa:38:49:9d:2d:55:1b:23:d4:
         a4:6e:1d:ec:ef:58:c0:14:fb:d1:82:50:74:c4:76:96:cb:88:
         68:59:30:e2:00:ac:b4:6d:5c:15:4c:e0:02:5d:97:e6:e8:4c:
         26:f7:a9:cc:75:9e:d7:46:90:b9:bc:35:7f:72:a2:40:d6:7e:
         a1:a5:0f:fe:5f:96:27:ac:a1:1e:44:87:45:99:6d:0b:9b:ad:
         2d:36:95:d2:b9:39:04:b7:c9:c9:fc:19:55:4a:bd:e3:3f:8f:
         ba:3c:0c:3a:86:be:58:fe:43:d6:c5:d5:11:29:50:21:99:b3:
         33:6b:ca:b6:bb:74:5e:f1:d8:0c:eb:71:33:d6:58:4b:84:9d:
         58:78:c2:3d:dd:d6:34:e9:a7:ba:d0:4c:96:a0:d0:7b:0a:39:
         45:26:f3:b7:2a:49:b2:a4:b4:61:9b:cc:9a:51:b4:7d:5e:67:
         d9:fa:b5:1e:ce:91:04:23:ce:14:ed:21:14:7e:53:ec:e7:53:
         9e:61:79:d2:ec:30:e3:7d:b7:47:ec:6c:a5:01:fa:71:3a:cb:
         22:3b:1d:f0:dd:75:8f:d0:0b:fb:cd:95:78:ef:c0:27:d3:9f:
         ff:c7:f8:0e:22:59:9e:0e:1e:74:d9:27:70:ca:b6:81:fc:10:
         26:96:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:14:39 2025 by rpki-client