Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.mft
File:                     j57NfU7Vn0zm40RhjK7bJ9KjWNo.mft (raw, json)
Hash identifier:          Kl1ko3VEjx21DM4VL3/lUT46m4GUsURFm+0OMr3rgMM=
Subject key identifier:   7E:03:01:24:2C:B9:62:86:AD:7E:BD:CD:11:D7:8B:DF:5E:11:B9:15
Authority key identifier: 8F:9E:CD:7D:4E:D5:9F:4C:E6:E3:44:61:8C:AE:DB:27:D2:A3:58:DA
Certificate issuer:       /CN=8f9ecd7d4ed59f4ce6e344618caedb27d2a358da
Certificate serial:       019563D18A412F52A01541F66811C690DC3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j57NfU7Vn0zm40RhjK7bJ9KjWNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.mft
Manifest number:          1480
Signing time:             Wed 05 Mar 2025 01:00:31 +0000
Manifest this update:     Wed 05 Mar 2025 01:00:31 +0000
Manifest next update:     Thu 06 Mar 2025 01:00:31 +0000
Files and hashes:         1: j57NfU7Vn0zm40RhjK7bJ9KjWNo.crl (hash: vuM6xAMvdCXprEFXMU/OUUuFZ9z55gf17Z33MUDs7HY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:63:d1:8a:41:2f:52:a0:15:41:f6:68:11:c6:90:dc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9ecd7d4ed59f4ce6e344618caedb27d2a358da
        Validity
            Not Before: Mar  5 01:00:31 2025 GMT
            Not After : Mar  6 01:00:31 2025 GMT
        Subject: CN=7e0301242cb96286ad7ebdcd11d78bdf5e11b915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:d6:40:6d:a4:d2:72:82:2f:e3:d2:c5:90:
                    0d:eb:95:bd:c3:ed:b5:ea:9e:4c:fb:d5:51:e2:6b:
                    40:4b:93:dc:4b:8a:41:4c:05:31:2a:03:3a:fa:cb:
                    15:f7:cc:82:11:30:fb:e5:fa:9b:08:5e:b4:26:c4:
                    eb:48:fe:80:66:5e:ac:20:19:d0:d1:6f:fe:d1:55:
                    3f:c8:5a:1c:2d:92:b0:79:a1:91:6b:86:69:84:7d:
                    75:61:e8:f5:26:43:cc:2a:c9:7b:b1:6c:a8:1c:6a:
                    3d:e8:8d:1d:2b:5d:07:6e:70:be:e7:e7:b5:8b:72:
                    e0:8a:c0:a4:a8:35:12:e0:d2:1e:b0:71:a7:f5:34:
                    50:e4:72:be:3d:08:44:f6:35:ed:07:20:d4:17:e4:
                    57:96:6b:a2:72:b4:42:8f:34:37:6b:c9:f1:aa:a4:
                    98:ea:1e:a6:0c:93:61:57:7e:d1:23:00:4c:0b:52:
                    a9:a6:6b:15:db:a3:60:a0:8b:3c:03:59:5a:2d:1e:
                    fb:a8:92:02:f9:69:45:83:40:83:b0:31:c9:37:88:
                    7a:40:30:0f:92:c8:79:6d:8d:16:d2:fd:33:bd:91:
                    54:23:52:3c:52:e5:39:ea:d6:31:9c:08:0c:bc:ff:
                    3e:8f:10:f7:7c:43:02:c3:14:c7:e1:37:79:a5:0e:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:03:01:24:2C:B9:62:86:AD:7E:BD:CD:11:D7:8B:DF:5E:11:B9:15
            X509v3 Authority Key Identifier:
                keyid:8F:9E:CD:7D:4E:D5:9F:4C:E6:E3:44:61:8C:AE:DB:27:D2:A3:58:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57NfU7Vn0zm40RhjK7bJ9KjWNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5c2584-5be6-4e58-b4f1-29e449318c56/1/j57NfU7Vn0zm40RhjK7bJ9KjWNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:3d:9a:02:43:09:0d:5c:27:60:2b:55:04:c9:46:83:58:
         22:3f:08:e0:6d:f5:e1:e9:7f:d9:52:fd:14:f2:d0:f8:20:4a:
         f6:27:4e:ba:c2:a7:c8:d0:6a:9a:8b:c1:48:0b:f9:25:0d:fe:
         d8:05:34:15:fd:84:25:a5:f4:e0:54:a7:48:a4:cb:b8:f8:be:
         05:9a:2c:3a:97:18:3a:f0:fd:44:a8:0c:16:d8:e7:f6:79:0b:
         60:98:4d:6f:bf:47:f5:36:8f:81:60:1b:30:f6:47:de:08:c1:
         61:1f:38:15:cf:fc:66:a9:8a:0b:5c:4b:26:87:9c:41:6f:cf:
         43:98:4a:66:db:4f:0d:7d:31:01:b2:88:d2:ca:77:fc:fc:f1:
         64:d0:7e:78:76:39:d0:0f:c2:f0:3a:db:8a:1a:95:df:c5:d9:
         d7:5f:59:7a:d6:b4:21:ef:11:c2:97:8f:a4:1d:5c:ca:6e:02:
         b8:8a:e5:7f:03:4d:1d:fe:a1:42:b2:71:07:76:bd:1a:69:2d:
         a7:fc:3f:c6:a5:8b:95:7a:35:42:2f:8e:4e:0e:90:a3:25:cd:
         e7:29:c1:2c:a8:16:92:76:da:e1:0f:76:52:06:e0:c7:bf:c2:
         47:7b:da:03:35:8b:49:5c:87:cd:40:4b:3a:cd:e8:13:8b:f8:
         58:4e:b8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:38 2025 by rpki-client