Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft
File:                     4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft (raw, json)
Hash identifier:          B+OB8XtKw3GKeu+xhenqv+rkG2zNMLUWTMz8IxfVLFg=
Subject key identifier:   94:2D:2F:A4:1A:FC:E4:41:58:54:68:7D:64:C1:A2:37:BB:2C:0A:A5
Authority key identifier: E1:C1:66:B5:06:A3:AB:71:28:E1:7F:2A:FE:11:E2:2E:CA:09:F3:41
Certificate issuer:       /CN=e1c166b506a3ab7128e17f2afe11e22eca09f341
Certificate serial:       01942073729190DB944A22642EFB525C99C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4cFmtQajq3Eo4X8q_hHiLsoJ80E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft
Manifest number:          0296
Signing time:             Wed 01 Jan 2025 06:00:24 +0000
Manifest this update:     Wed 01 Jan 2025 06:00:24 +0000
Manifest next update:     Thu 02 Jan 2025 06:00:24 +0000
Files and hashes:         1: 4cFmtQajq3Eo4X8q_hHiLsoJ80E.crl (hash: YKqC0O0MYHF6cphH6kyinCrf1DM6U829cmZzg9EF1Zo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:73:72:91:90:db:94:4a:22:64:2e:fb:52:5c:99:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1c166b506a3ab7128e17f2afe11e22eca09f341
        Validity
            Not Before: Jan  1 06:00:24 2025 GMT
            Not After : Jan  2 06:00:24 2025 GMT
        Subject: CN=942d2fa41afce4415854687d64c1a237bb2c0aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:20:e4:9b:1c:9f:92:1a:10:2a:94:7d:87:
                    83:d6:bd:c3:e4:fd:42:ad:01:6a:44:05:ce:bc:a8:
                    a2:0a:70:24:9f:b2:37:2d:27:f1:41:fc:4f:ee:2c:
                    46:64:9c:c2:2c:e3:d1:0f:32:5f:bb:d4:b3:47:00:
                    3a:90:ea:66:c6:28:d3:d5:6e:9b:ac:42:d8:ad:e4:
                    77:b7:7f:e1:88:ab:20:20:f4:bb:41:80:7e:64:2f:
                    46:da:c1:2f:5c:80:65:ba:05:b1:ca:92:9e:75:51:
                    7f:83:6c:09:b0:a1:3d:40:29:98:ca:b6:d6:17:7d:
                    ad:e3:71:83:05:41:8c:e2:19:6f:24:8a:ed:62:b6:
                    ee:42:ca:2a:80:99:ef:a0:cb:59:29:60:86:7f:aa:
                    23:33:99:b0:d3:8e:f0:a6:ba:ad:2e:1a:73:46:4c:
                    2c:7b:fc:45:a4:b5:6c:0e:6a:27:2e:98:64:ff:ac:
                    36:ea:e1:dc:e7:b9:a1:7c:16:f5:9f:fe:92:2f:b7:
                    80:62:02:fa:fa:2a:7e:e3:78:0f:3c:9d:1e:ba:d0:
                    70:a5:71:3e:69:22:b3:df:99:8d:03:27:0e:d9:35:
                    b8:72:b9:3d:e8:4e:2b:df:58:b8:55:67:0d:83:b0:
                    99:21:b3:0f:9d:39:11:a9:02:69:6d:7c:30:e5:6c:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2D:2F:A4:1A:FC:E4:41:58:54:68:7D:64:C1:A2:37:BB:2C:0A:A5
            X509v3 Authority Key Identifier:
                keyid:E1:C1:66:B5:06:A3:AB:71:28:E1:7F:2A:FE:11:E2:2E:CA:09:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cFmtQajq3Eo4X8q_hHiLsoJ80E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c2:11:87:64:54:86:1c:53:35:09:55:13:0c:9f:80:60:1b:
         58:31:3d:f5:8d:f1:ff:a6:2f:63:46:2f:45:d4:39:74:2e:f7:
         34:13:9e:c3:14:2b:da:8d:58:cf:14:ef:d2:69:03:23:07:43:
         60:95:90:37:72:d9:c2:fc:5d:12:e7:b5:0e:07:61:d9:58:35:
         5b:55:b3:b5:58:44:97:85:79:c4:77:e8:b6:c1:fd:b1:0d:6d:
         51:4e:09:b2:f1:15:f4:e5:f5:05:aa:d1:eb:07:08:6b:d6:6f:
         10:10:5d:2e:81:39:32:e9:82:a4:17:49:e0:18:2d:e0:07:ff:
         96:62:c5:ee:12:e3:22:62:96:5b:3c:15:37:e6:98:d1:4e:d2:
         90:aa:90:74:48:1a:c5:52:41:87:1a:18:a9:52:85:33:27:47:
         54:7f:95:69:d9:fc:fd:8b:e1:05:e2:f5:fd:e1:22:0f:f3:a9:
         3c:f7:b5:da:b4:b7:1a:37:b7:aa:b4:15:47:ea:45:d3:84:82:
         c7:8f:02:8d:17:f2:6b:29:87:05:0d:d7:7a:b9:95:42:49:d8:
         3b:14:64:76:e6:86:2a:fe:27:10:5b:cf:19:32:63:3a:2b:4c:
         85:d2:0b:9c:54:84:ee:d6:60:54:fa:99:df:24:fb:b1:46:22:
         56:af:f1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:22:03 2025 by rpki-client