Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/JUussnEsJZyHPN8MEZbCHlI6ETg.mft
File:                     JUussnEsJZyHPN8MEZbCHlI6ETg.mft (raw, json)
Hash identifier:          LsV34rCI0STErDqbZWCHA2y/ofNF2+nnDvSN5o7CiEA=
Subject key identifier:   0E:EA:17:6F:22:C7:12:37:13:B2:81:2F:03:D1:C0:7C:1D:6B:90:39
Authority key identifier: 25:4B:AC:B2:71:2C:25:9C:87:3C:DF:0C:11:96:C2:1E:52:3A:11:38
Certificate issuer:       /CN=254bacb2712c259c873cdf0c1196c21e523a1138
Certificate serial:       0184314AC8AF2ECCC2B6DC20FFA088C5EEF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUussnEsJZyHPN8MEZbCHlI6ETg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/JUussnEsJZyHPN8MEZbCHlI6ETg.mft
Manifest number:          0B47
Signing time:             Tue 01 Nov 2022 03:44:55 +0000
Manifest this update:     Tue 01 Nov 2022 03:44:55 +0000
Manifest next update:     Wed 02 Nov 2022 03:44:55 +0000
Files and hashes:         1: JUussnEsJZyHPN8MEZbCHlI6ETg.crl (hash: LsmfagE1c52T16ADH6VmuRzpQS1qbRt5XUZz0aU+U7E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:31:4a:c8:af:2e:cc:c2:b6:dc:20:ff:a0:88:c5:ee:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254bacb2712c259c873cdf0c1196c21e523a1138
        Validity
            Not Before: Nov  1 03:44:55 2022 GMT
            Not After : Nov  2 03:44:55 2022 GMT
        Subject: CN=0eea176f22c7123713b2812f03d1c07c1d6b9039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:13:de:89:9b:38:6b:5b:4b:62:a4:b0:79:
                    82:9f:c3:ed:4d:42:37:81:68:f4:d1:2a:e3:65:5a:
                    00:a6:62:29:a8:f2:91:ba:9f:47:ea:c6:ed:7b:8c:
                    e8:66:89:db:d3:ab:57:34:68:38:ce:39:10:a8:c7:
                    d8:4d:49:3b:4b:6a:b6:49:56:4d:d7:50:31:3c:6c:
                    1d:50:bf:01:ae:95:d1:29:94:1a:2b:89:c3:7c:25:
                    a8:4b:80:a2:eb:ab:18:16:df:60:3e:5d:1d:41:41:
                    61:72:f5:f5:89:67:33:04:f0:43:c7:94:c9:0a:89:
                    f3:a0:22:09:70:73:0d:08:6f:4b:56:a6:13:d0:20:
                    2f:a7:94:69:21:82:f5:66:f6:82:bc:58:59:3a:f0:
                    12:23:4e:a7:82:61:a1:6d:b9:75:1b:cb:c7:8d:ad:
                    b2:bd:62:d3:f0:02:bb:06:aa:26:88:45:d7:a4:b7:
                    7e:9a:d7:03:0b:e7:2c:d1:81:b8:e2:5a:78:9c:ce:
                    20:c5:e7:7a:9e:32:18:32:b0:3b:0a:f2:a5:c3:31:
                    5d:d2:85:f9:e3:6f:fe:b8:6a:ea:5e:04:78:98:2c:
                    58:56:21:63:d3:c1:f8:b8:03:da:9a:3f:a9:9f:a1:
                    9a:78:dd:af:88:4c:f6:b4:c6:bd:78:60:e7:54:60:
                    8b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EA:17:6F:22:C7:12:37:13:B2:81:2F:03:D1:C0:7C:1D:6B:90:39
            X509v3 Authority Key Identifier:
                keyid:25:4B:AC:B2:71:2C:25:9C:87:3C:DF:0C:11:96:C2:1E:52:3A:11:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUussnEsJZyHPN8MEZbCHlI6ETg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/JUussnEsJZyHPN8MEZbCHlI6ETg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/JUussnEsJZyHPN8MEZbCHlI6ETg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d5:f1:9c:76:b0:df:91:f1:ce:aa:9d:4b:25:12:73:d9:9a:
         b5:79:b3:89:0b:42:31:04:a6:b0:44:c2:f8:e8:62:03:a4:b8:
         ed:9b:79:3a:d1:58:1e:39:7b:20:a5:a7:8d:cb:23:ea:ad:75:
         11:35:5d:6d:53:e8:15:a0:1a:23:e6:8e:d6:07:16:02:88:19:
         04:a0:c0:5f:4c:e8:06:e6:43:c0:6c:64:83:50:e5:66:13:0d:
         84:fd:d5:97:a1:4f:e3:30:b2:18:5b:e6:17:9b:95:c5:d5:f4:
         69:9e:51:99:74:0c:34:4e:81:1b:47:f7:75:d4:83:eb:7e:a0:
         4e:70:1d:47:36:78:d4:2e:11:f4:4b:49:68:65:3b:9c:1e:13:
         48:0e:1c:20:17:5e:ac:80:59:9a:0c:7d:67:cc:c2:11:46:fa:
         f6:0c:8e:75:53:44:94:f0:d3:16:33:ca:46:7c:38:c4:8b:f8:
         47:bc:35:c7:72:be:52:a9:dc:74:e1:ad:b3:81:0a:80:db:99:
         88:68:77:df:32:25:36:3c:c5:f2:04:48:fa:a1:ed:0f:93:13:
         92:71:80:8e:2e:b6:78:26:fe:d9:a5:03:23:06:b1:ae:fc:b6:
         8b:27:c6:c9:cb:e3:f3:34:11:1e:04:55:19:4d:c2:02:f9:9f:
         a2:8d:c8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:07 2025 by rpki-client