Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d1f1e7-8e7f-4d19-80a8-faea750754c4/1/Bd45LPnOlCom18dqJcoPXuLVy-M.mft
File:                     Bd45LPnOlCom18dqJcoPXuLVy-M.mft (raw, json)
Hash identifier:          G1TNELnddKaaO/diw1DVyEcYOO0IwV3fvpG8o+IpyTg=
Subject key identifier:   CE:B8:D0:9E:1D:7E:AB:43:4C:47:62:EC:0B:93:FF:5C:50:34:EA:8C
Authority key identifier: 05:DE:39:2C:F9:CE:94:2A:26:D7:C7:6A:25:CA:0F:5E:E2:D5:CB:E3
Certificate issuer:       /CN=05de392cf9ce942a26d7c76a25ca0f5ee2d5cbe3
Certificate serial:       01948C98DD9687A8D59096432B713A8F5C57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bd45LPnOlCom18dqJcoPXuLVy-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/d1f1e7-8e7f-4d19-80a8-faea750754c4/1/Bd45LPnOlCom18dqJcoPXuLVy-M.mft
Manifest number:          0393
Signing time:             Wed 22 Jan 2025 06:00:15 +0000
Manifest this update:     Wed 22 Jan 2025 06:00:15 +0000
Manifest next update:     Thu 23 Jan 2025 06:00:15 +0000
Files and hashes:         1: Bd45LPnOlCom18dqJcoPXuLVy-M.crl (hash: 9IV+kJzRh0GS0ABvsPpfl5da6uG4x7Hzn1VnkrI2wfw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8c:98:dd:96:87:a8:d5:90:96:43:2b:71:3a:8f:5c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05de392cf9ce942a26d7c76a25ca0f5ee2d5cbe3
        Validity
            Not Before: Jan 22 06:00:15 2025 GMT
            Not After : Jan 23 06:00:15 2025 GMT
        Subject: CN=ceb8d09e1d7eab434c4762ec0b93ff5c5034ea8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:18:03:ad:4f:c1:ce:21:5a:a6:e0:a6:90:
                    66:e0:3b:c7:5e:24:da:1e:02:84:84:0f:31:8d:09:
                    ef:33:12:2a:32:c1:cf:18:43:19:bc:1c:4a:81:cf:
                    22:33:06:da:d2:07:ed:71:6c:e8:b8:dd:8b:cc:c5:
                    e2:08:21:5d:e8:b2:38:b7:49:76:fe:43:98:e2:0e:
                    43:44:6e:3a:8a:d7:c4:49:36:12:28:0d:0b:1b:19:
                    43:09:8d:3b:1c:5c:46:c7:75:fd:24:0e:f9:ee:ec:
                    e4:ae:0b:b8:88:f9:0e:6d:26:53:df:7b:dc:00:72:
                    57:a9:00:0f:18:eb:a0:1f:92:e6:37:8f:f5:52:0f:
                    3c:7d:e0:7f:6b:bb:53:45:5b:45:35:60:b0:50:af:
                    d6:37:9e:25:8a:74:15:69:b3:82:f1:b0:88:27:76:
                    be:91:36:5e:9a:6c:51:0e:1e:b9:13:82:2d:63:1b:
                    47:fc:c0:7b:24:01:02:66:e1:c1:79:de:97:fc:33:
                    7d:f9:b8:2f:0c:19:13:2f:03:a8:82:ce:24:e0:e3:
                    60:a4:e9:6a:8e:3e:fc:57:57:a6:63:f6:47:aa:32:
                    6a:e9:fc:bc:73:1d:71:2d:a5:02:71:16:a4:8e:80:
                    3e:da:55:2c:93:02:41:f7:72:23:42:34:60:c5:8a:
                    6a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B8:D0:9E:1D:7E:AB:43:4C:47:62:EC:0B:93:FF:5C:50:34:EA:8C
            X509v3 Authority Key Identifier:
                keyid:05:DE:39:2C:F9:CE:94:2A:26:D7:C7:6A:25:CA:0F:5E:E2:D5:CB:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd45LPnOlCom18dqJcoPXuLVy-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d1f1e7-8e7f-4d19-80a8-faea750754c4/1/Bd45LPnOlCom18dqJcoPXuLVy-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d1f1e7-8e7f-4d19-80a8-faea750754c4/1/Bd45LPnOlCom18dqJcoPXuLVy-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:eb:19:b1:eb:d8:2d:bb:90:5d:e1:83:06:a6:57:b1:ec:03:
         4d:52:84:26:51:35:70:5b:37:8a:0b:a7:67:95:10:e6:23:41:
         31:b2:b4:09:48:0f:f4:72:96:b3:49:8e:05:a9:35:b4:5e:cf:
         19:da:40:11:b8:20:47:e7:a8:0c:41:90:8a:31:5e:f4:74:63:
         cd:09:53:45:c0:74:ec:16:d1:3a:2a:0a:57:27:f6:47:bc:46:
         27:cc:ab:e9:a4:3d:08:8e:8d:f0:1f:2e:fc:d6:67:0c:35:f1:
         68:dc:99:ce:09:e7:0d:e4:fe:0f:24:b9:25:ec:29:3b:b1:7b:
         16:b2:31:7a:e2:60:8f:c4:5d:45:e6:f3:08:68:b2:15:f1:23:
         45:d4:15:4b:97:5e:4e:f5:32:07:46:48:9a:d0:60:2c:d1:f1:
         c5:bf:7b:74:e5:2a:e7:61:26:5b:5a:ec:cc:9c:3f:46:cd:a9:
         8f:05:2b:1d:59:a9:c5:94:ca:29:2a:72:44:ec:78:ea:33:ef:
         ef:29:3c:60:6a:c2:6f:1c:3c:31:d9:e4:54:a3:47:0e:89:2a:
         63:c0:ce:31:b9:c4:f7:31:9b:79:42:fd:4c:5d:46:55:42:31:
         e2:de:12:1a:64:25:c3:60:e8:eb:b9:07:aa:0e:78:ce:b3:3d:
         cc:f7:81:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:34:04 2025 by rpki-client