Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/58afe1-4c81-4f91-b8d8-0a287fbebe11/1/SjwbFVuMvQfjctm_DO2eIH6I_0U.mft
File:                     SjwbFVuMvQfjctm_DO2eIH6I_0U.mft (raw, json)
Hash identifier:          o/lFVJONmLwsZfGiUiHRY8//NJnRut/yWOCXBgYxG1g=
Subject key identifier:   18:8A:2B:A4:F8:C0:F3:8D:49:DC:F8:CB:34:85:CA:9B:3C:C5:03:1F
Authority key identifier: 4A:3C:1B:15:5B:8C:BD:07:E3:72:D9:BF:0C:ED:9E:20:7E:88:FF:45
Certificate issuer:       /CN=4a3c1b155b8cbd07e372d9bf0ced9e207e88ff45
Certificate serial:       0191B0089C770CA82EC1CDF7DC5A808D52FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SjwbFVuMvQfjctm_DO2eIH6I_0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/58afe1-4c81-4f91-b8d8-0a287fbebe11/1/SjwbFVuMvQfjctm_DO2eIH6I_0U.mft
Manifest number:          11B3
Signing time:             Mon 02 Sep 2024 00:00:39 +0000
Manifest this update:     Mon 02 Sep 2024 00:00:39 +0000
Manifest next update:     Tue 03 Sep 2024 00:00:39 +0000
Files and hashes:         1: SjwbFVuMvQfjctm_DO2eIH6I_0U.crl (hash: udH0/Bv0YmuaYbd7wDBpaFQriK3hP7vezhzHx1HXI6Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b0:08:9c:77:0c:a8:2e:c1:cd:f7:dc:5a:80:8d:52:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3c1b155b8cbd07e372d9bf0ced9e207e88ff45
        Validity
            Not Before: Sep  2 00:00:39 2024 GMT
            Not After : Sep  3 00:00:39 2024 GMT
        Subject: CN=188a2ba4f8c0f38d49dcf8cb3485ca9b3cc5031f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:f3:a9:b3:5e:14:3c:1f:11:5c:1f:5a:8b:
                    1c:08:f8:a1:e1:aa:5f:4d:7d:61:2d:e7:59:ff:09:
                    fe:4f:4e:06:04:86:a9:48:6f:14:b7:6c:30:fa:7c:
                    29:ad:f4:17:d7:30:50:6a:10:3c:fa:ef:90:a2:4a:
                    39:06:89:17:e1:92:3d:88:a5:34:52:a8:e6:df:68:
                    c8:d6:08:09:37:1f:31:94:8d:57:b2:31:d2:6c:f1:
                    67:62:24:f8:a9:f3:6a:97:41:40:fa:2f:3d:de:6c:
                    d1:3b:84:6f:57:6c:52:cb:25:85:07:dc:8f:ce:80:
                    db:4e:2a:9c:7f:98:9c:fb:3e:3b:cc:52:57:ba:e2:
                    93:31:e9:7d:63:ad:b5:bd:76:82:b7:9b:7e:af:42:
                    01:95:e6:b8:be:47:0e:a4:b8:b7:3f:db:48:00:ea:
                    0c:1a:a1:80:24:f8:3c:be:00:7d:a3:14:47:a6:f7:
                    26:24:84:36:33:ce:3b:30:7c:de:7d:ad:50:8c:5f:
                    9d:61:12:25:56:82:ae:73:8e:0b:77:9a:71:67:8a:
                    f5:e9:48:7b:ef:5a:72:ce:54:bc:26:4f:3a:8f:8d:
                    0e:eb:e5:d2:28:69:52:46:ff:2c:89:b4:06:8b:00:
                    1b:84:b1:ed:c9:29:2d:87:31:88:9d:d4:9f:bf:b9:
                    a0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8A:2B:A4:F8:C0:F3:8D:49:DC:F8:CB:34:85:CA:9B:3C:C5:03:1F
            X509v3 Authority Key Identifier:
                keyid:4A:3C:1B:15:5B:8C:BD:07:E3:72:D9:BF:0C:ED:9E:20:7E:88:FF:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjwbFVuMvQfjctm_DO2eIH6I_0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/58afe1-4c81-4f91-b8d8-0a287fbebe11/1/SjwbFVuMvQfjctm_DO2eIH6I_0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/58afe1-4c81-4f91-b8d8-0a287fbebe11/1/SjwbFVuMvQfjctm_DO2eIH6I_0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:3f:b6:84:e9:34:7a:fe:73:03:06:0d:42:27:a5:be:af:b6:
         f7:6a:90:04:d8:94:cb:0a:1c:e7:78:64:1f:35:c1:b3:96:7b:
         ed:88:61:c3:37:be:90:7a:ce:6c:d7:f0:ad:5c:d7:60:95:1a:
         92:38:33:f0:79:e1:ec:46:e9:83:5d:84:0f:9d:0f:bc:4b:96:
         3c:fd:ac:8e:6d:74:cc:1e:94:0b:5d:e6:af:93:93:8c:94:c5:
         04:3e:11:e7:4b:31:32:4b:ba:16:76:9b:a2:5c:5c:db:e5:6b:
         17:9b:f2:c2:c5:c0:9f:0f:34:b5:87:e5:03:fb:c3:39:b4:d2:
         a6:de:95:da:9c:cd:88:dc:dc:bc:71:3e:86:ee:e1:0e:dc:2e:
         60:a5:cf:d7:31:bf:ae:f5:ae:c3:16:db:2e:87:21:0d:a4:f6:
         8e:cd:0b:c1:b4:7b:38:b5:5a:f3:b6:65:ab:51:46:ec:09:cc:
         25:1c:9e:3a:9a:74:c2:e6:a8:29:f8:9b:89:bb:63:a7:db:c1:
         62:ba:b3:94:ae:64:2b:da:8d:51:41:19:7b:02:9f:2c:7e:68:
         49:f9:75:1b:a0:e7:f3:ae:96:6c:a1:d8:2c:1d:a9:37:b9:b3:
         23:37:a9:c1:85:ac:7f:d0:98:c9:10:e9:53:d3:7f:d1:ff:c0:
         1f:7d:f8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:16 2025 by rpki-client