Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.mft
File:                     3edtMFKVeG1Q5jSpan25PzEWzNc.mft (raw, json)
Hash identifier:          bH1QDBbLasYvKxfupVKWLTyfI/+gBwG19WsUSb1VMfI=
Subject key identifier:   CD:54:A1:7E:AF:34:1A:6D:67:C1:77:B5:99:24:22:C4:41:46:7F:EA
Authority key identifier: DD:E7:6D:30:52:95:78:6D:50:E6:34:A9:6A:7D:B9:3F:31:16:CC:D7
Certificate issuer:       /CN=dde76d305295786d50e634a96a7db93f3116ccd7
Certificate serial:       019444128DAD7F6AB2B4BFC28F5E0AA925DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3edtMFKVeG1Q5jSpan25PzEWzNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.mft
Manifest number:          050D
Signing time:             Wed 08 Jan 2025 04:00:54 +0000
Manifest this update:     Wed 08 Jan 2025 04:00:54 +0000
Manifest next update:     Thu 09 Jan 2025 04:00:54 +0000
Files and hashes:         1: 3edtMFKVeG1Q5jSpan25PzEWzNc.crl (hash: kGwGAGlevyKcY5rGjzrIOVS/SH31kWq30Roq7sDqRk0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:44:12:8d:ad:7f:6a:b2:b4:bf:c2:8f:5e:0a:a9:25:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dde76d305295786d50e634a96a7db93f3116ccd7
        Validity
            Not Before: Jan  8 04:00:54 2025 GMT
            Not After : Jan  9 04:00:54 2025 GMT
        Subject: CN=cd54a17eaf341a6d67c177b5992422c441467fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3a:65:1d:0b:af:e7:b7:2d:db:6e:83:03:b6:
                    ba:78:f2:c6:4c:e7:b0:1d:9d:34:88:02:c3:75:7f:
                    74:15:06:f9:8e:2b:94:d5:e2:2d:db:08:3f:c3:d2:
                    f5:44:18:4d:62:fd:37:ab:c7:dc:83:3d:cd:21:2c:
                    c2:e1:ad:5c:f8:8a:cb:db:34:50:5b:ee:15:a7:0b:
                    ec:7f:53:58:42:e8:05:be:68:60:f4:5a:be:a8:dc:
                    28:31:fe:37:36:98:28:73:68:35:15:7b:2d:35:e7:
                    14:cf:a7:6b:70:2e:93:7b:a0:9e:1f:83:b7:b6:5d:
                    0b:38:61:3b:85:99:d4:1e:9f:e3:0d:65:c1:38:fd:
                    62:05:ec:7a:a9:b8:c6:45:71:2c:75:68:36:70:fe:
                    74:78:e5:d9:5e:45:ca:8b:1d:cf:35:f0:30:dd:66:
                    4a:ae:99:06:b0:32:0c:6c:4c:4a:c4:a5:53:35:0b:
                    20:ee:32:42:ee:6b:82:e5:bf:f9:ab:da:5a:04:8a:
                    42:64:ac:e0:df:30:28:7e:73:88:7c:cc:be:31:70:
                    e9:1c:5e:a5:a0:d6:d5:97:75:80:f4:62:29:48:31:
                    09:91:cb:d4:4d:25:0e:d7:e1:14:c1:60:1c:d1:c1:
                    b8:27:6c:b9:24:7b:20:f1:47:13:4d:ea:85:63:34:
                    4d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:54:A1:7E:AF:34:1A:6D:67:C1:77:B5:99:24:22:C4:41:46:7F:EA
            X509v3 Authority Key Identifier:
                keyid:DD:E7:6D:30:52:95:78:6D:50:E6:34:A9:6A:7D:B9:3F:31:16:CC:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3edtMFKVeG1Q5jSpan25PzEWzNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5be0ae-81ad-49ea-818d-136a759e061d/1/3edtMFKVeG1Q5jSpan25PzEWzNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d6:a4:b7:85:56:e8:49:14:28:20:ca:8a:81:f7:a4:4b:a2:
         82:2f:cb:3f:14:0f:a1:1b:d1:a4:39:3c:1b:b2:05:2f:88:f4:
         65:7a:f9:c4:e0:9a:95:cf:cd:86:07:88:86:44:4c:88:79:f5:
         35:e6:cb:91:8d:25:84:82:ee:63:84:11:56:37:d8:8d:4b:5e:
         45:e9:05:42:99:2c:d2:7f:83:bc:fd:c7:2a:60:32:9c:04:43:
         45:a7:42:1c:cb:e0:50:c3:b5:d3:92:60:c1:60:ad:6b:6e:e7:
         72:d5:b2:4e:15:dd:35:b5:5f:bc:87:08:c0:14:8e:c0:98:58:
         1c:05:8d:07:07:cc:d7:48:bd:44:ae:49:8d:6e:2b:24:8f:13:
         5f:e9:6b:43:6b:95:34:1f:c9:a0:2d:39:8a:6e:31:6c:df:3a:
         cf:ab:ed:5d:08:8c:c7:14:87:e2:2d:b9:09:ae:ca:39:b0:80:
         50:0d:56:a9:a3:e6:12:74:47:84:da:7a:b7:87:b5:31:56:2c:
         b1:7c:a9:0c:22:34:e8:e6:6b:7c:2c:ec:2c:7f:1c:21:fb:d4:
         65:78:11:f2:00:24:31:e5:33:ac:4c:5f:dc:cd:cc:4b:c8:fa:
         41:38:2e:e2:d8:99:17:dd:96:2c:b1:29:38:12:5d:ca:d1:fc:
         da:4d:0d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:14:48 2025 by rpki-client