Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
File:                     GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft (raw, json)
Hash identifier:          H7mfWjYzIMrT8GVK9PypfucJYMFH0xtF4vg9qgx6tAA=
Subject key identifier:   D7:10:3C:D7:32:5F:D7:9A:19:CC:7C:41:20:6D:41:72:B9:1F:8A:D1
Authority key identifier: 1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2
Certificate issuer:       /CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
Certificate serial:       0195E15A3C8D658BB0CD346B9EA629F32572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft
Manifest number:          04A4
Signing time:             Sat 29 Mar 2025 10:02:22 +0000
Manifest this update:     Sat 29 Mar 2025 10:02:22 +0000
Manifest next update:     Sun 30 Mar 2025 10:02:22 +0000
Files and hashes:         1: GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl (hash: S8i2fM59WYeYcGeG2KJ3j96DnNddAYrHuvpjMeE3Uuw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:5a:3c:8d:65:8b:b0:cd:34:6b:9e:a6:29:f3:25:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a6add3ea159f63ff58d6b3dffd2ca416ac033a2
        Validity
            Not Before: Mar 29 10:02:22 2025 GMT
            Not After : Mar 30 10:02:22 2025 GMT
        Subject: CN=d7103cd7325fd79a19cc7c41206d4172b91f8ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:d5:a3:44:70:b3:85:7e:da:38:f7:e1:00:
                    36:1f:9c:91:b1:11:e2:50:c3:bc:bc:07:ec:d6:8a:
                    e0:4c:db:28:8b:79:41:75:6c:2c:a3:3b:3b:0f:47:
                    12:19:c8:62:b3:a0:3a:80:55:fc:07:ac:2f:e5:d6:
                    87:28:ce:d1:35:91:92:4a:fc:e3:05:07:be:4d:2f:
                    f3:5b:35:b7:ee:e6:6d:3f:ce:de:21:82:f8:eb:95:
                    86:75:3c:e8:72:5d:75:c9:57:8a:b4:38:de:9c:e2:
                    24:49:ce:29:e0:f3:f2:78:b0:29:74:11:e3:0f:fc:
                    58:85:1c:81:5d:d1:6f:1f:10:94:af:bb:ce:1d:89:
                    b5:8c:b4:a1:74:66:be:f1:03:2d:c6:13:39:c2:81:
                    2d:80:fa:af:76:b9:6a:d5:53:0e:00:9a:da:6b:68:
                    8d:03:10:ff:4d:1b:5f:55:e0:3a:7b:dc:9c:df:30:
                    08:62:36:7e:0f:5e:d7:a3:37:9b:40:c4:22:d5:92:
                    65:bd:18:e8:54:86:02:9d:1f:e4:ce:34:3e:0e:79:
                    02:08:a5:8f:0d:1c:b2:5c:d5:73:55:5a:f3:31:77:
                    66:cf:5f:35:8e:d4:c4:52:e0:80:53:66:62:57:d1:
                    a8:d8:be:70:e7:40:32:ae:98:b3:f4:37:92:e0:d3:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:10:3C:D7:32:5F:D7:9A:19:CC:7C:41:20:6D:41:72:B9:1F:8A:D1
            X509v3 Authority Key Identifier:
                keyid:1A:6A:DD:3E:A1:59:F6:3F:F5:8D:6B:3D:FF:D2:CA:41:6A:C0:33:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ade881-ef45-4d09-b634-3a01c63f84f7/1/GmrdPqFZ9j_1jWs9_9LKQWrAM6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:97:f2:91:d6:b1:94:f4:2c:73:ae:f8:73:23:69:0a:c9:78:
         da:07:6a:8f:7f:df:2a:1f:e8:95:70:bb:b8:a1:82:df:f9:a7:
         e7:ae:db:d3:15:78:c8:42:52:cc:c5:4c:1e:16:47:db:40:d0:
         6e:f1:80:f8:31:0e:0f:13:29:09:a0:57:99:03:06:96:76:c6:
         df:71:50:24:a8:89:24:3a:8f:7d:12:4e:06:fc:80:12:82:d7:
         39:b0:9a:e5:56:26:60:01:ac:87:73:4b:55:19:34:55:65:f2:
         7c:46:8e:57:97:24:61:86:c5:70:12:c2:0b:55:20:01:29:8d:
         05:e7:c4:1b:72:f8:64:bb:8a:3d:33:43:d3:e4:6d:8b:35:11:
         80:ed:d5:dc:5a:d4:c6:cb:db:fe:d8:4a:ca:48:05:07:e4:aa:
         5d:3f:f0:30:7e:c4:22:77:2d:2b:43:b9:73:5b:c9:77:08:8f:
         29:49:7d:19:89:19:b1:6a:a7:b3:90:e2:f1:38:fa:b6:a9:d8:
         37:b8:66:93:6c:06:54:d4:5e:70:11:bc:ab:cb:bb:22:24:b9:
         ad:b9:4a:46:cf:55:9a:43:8c:03:a4:36:3f:a0:b2:f0:6f:bb:
         00:ad:67:f7:48:9f:2e:eb:6c:12:f4:62:a5:d4:b8:f2:a7:19:
         7e:6d:62:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:46 2025 by rpki-client