Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a4c5-9bb3-4fd7-8c8f-94c169a77e32/1/e1mygXMFmoXUpUDCKO1lwPKQMrA.mft
File:                     e1mygXMFmoXUpUDCKO1lwPKQMrA.mft (raw, json)
Hash identifier:          EaYRRov4VMm0RpUhVQJQFxJBJnyUuhGEOL+2RVgx4DY=
Subject key identifier:   2A:19:5D:7F:0E:09:81:D8:50:10:D0:6F:9E:D6:97:36:B4:12:52:AF
Authority key identifier: 7B:59:B2:81:73:05:9A:85:D4:A5:40:C2:28:ED:65:C0:F2:90:32:B0
Certificate issuer:       /CN=7b59b28173059a85d4a540c228ed65c0f29032b0
Certificate serial:       0193696AC6BC84F531F1FEDB8EC3BB5093EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1mygXMFmoXUpUDCKO1lwPKQMrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/03a4c5-9bb3-4fd7-8c8f-94c169a77e32/1/e1mygXMFmoXUpUDCKO1lwPKQMrA.mft
Manifest number:          5E
Signing time:             Tue 26 Nov 2024 17:00:25 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:25 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:25 +0000
Files and hashes:         1: e1mygXMFmoXUpUDCKO1lwPKQMrA.crl (hash: Hed7mwhY122iYg/yy9LoBtuvD8W6/YUo6snEfCJo9pU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:c6:bc:84:f5:31:f1:fe:db:8e:c3:bb:50:93:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b59b28173059a85d4a540c228ed65c0f29032b0
        Validity
            Not Before: Nov 26 17:00:25 2024 GMT
            Not After : Nov 27 17:00:25 2024 GMT
        Subject: CN=2a195d7f0e0981d85010d06f9ed69736b41252af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:96:1f:10:bb:4e:96:1c:fc:d3:05:5f:fc:
                    52:83:9d:a9:9d:a4:15:81:63:f7:fa:a8:77:4e:79:
                    2d:fe:c0:26:13:04:da:64:c6:21:98:b0:92:d1:03:
                    49:fc:78:c8:8a:ef:4a:1c:9d:79:44:e8:e5:f1:c4:
                    da:86:52:b4:c9:a0:d8:14:fb:5e:8b:25:0c:d4:9c:
                    9b:90:25:a3:70:01:55:82:6e:b4:74:80:a8:be:9b:
                    04:c9:f3:19:50:46:73:c5:12:56:0b:da:f6:1a:55:
                    70:83:4f:9a:17:f4:9e:33:7d:18:89:b6:74:1a:c4:
                    67:22:13:1e:f2:d4:3a:52:17:1e:5e:61:20:ff:6b:
                    ba:ae:8a:b2:3e:56:7b:3b:87:6c:5b:0f:7d:9a:28:
                    d8:8c:5c:b1:58:b8:24:0b:06:45:0f:bb:20:52:60:
                    93:48:a1:e1:07:93:0a:f2:e9:fe:3b:b0:3d:19:16:
                    b0:29:75:44:cf:67:98:11:9f:e6:2e:b9:5d:89:6d:
                    b9:e9:f9:e9:13:75:13:5d:0b:9b:69:88:e4:01:21:
                    d4:29:52:ff:81:59:0c:aa:64:d3:68:84:ba:cb:f2:
                    52:aa:59:15:35:62:1d:b5:38:b5:55:fe:ca:a9:8d:
                    11:85:33:ce:ff:5c:db:f8:31:9d:46:e8:6c:7c:f6:
                    67:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:19:5D:7F:0E:09:81:D8:50:10:D0:6F:9E:D6:97:36:B4:12:52:AF
            X509v3 Authority Key Identifier:
                keyid:7B:59:B2:81:73:05:9A:85:D4:A5:40:C2:28:ED:65:C0:F2:90:32:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1mygXMFmoXUpUDCKO1lwPKQMrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a4c5-9bb3-4fd7-8c8f-94c169a77e32/1/e1mygXMFmoXUpUDCKO1lwPKQMrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a4c5-9bb3-4fd7-8c8f-94c169a77e32/1/e1mygXMFmoXUpUDCKO1lwPKQMrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:de:84:5f:9e:4d:98:a4:36:ad:e7:81:10:5f:1a:31:22:c5:
         9f:e7:7b:06:d9:af:84:2b:82:29:87:e6:29:69:ec:38:b7:26:
         e9:d4:7f:32:f5:65:bb:0e:06:71:a9:48:98:3f:f1:b1:b5:11:
         1e:24:15:81:0f:1d:64:81:df:42:f0:51:77:5d:a5:28:9c:8d:
         b2:29:c3:f3:5d:b6:ac:78:6d:e9:bf:2f:bf:36:81:69:bf:20:
         13:9f:d9:b7:0b:9d:33:01:52:8c:6a:cc:5c:6a:92:3e:c3:1b:
         7e:e0:b9:db:55:54:5b:a8:d5:57:ed:e2:ac:87:30:f6:93:58:
         f8:58:a6:4d:9d:4c:d2:97:65:82:07:c6:97:ce:d6:5d:aa:b8:
         35:90:48:01:b1:36:8b:c3:67:a9:43:42:c8:02:67:ae:93:78:
         f1:b0:17:ca:b7:e9:f0:79:ff:43:c2:ca:fe:1c:7a:24:19:43:
         55:f5:5b:cf:4d:bb:91:e0:74:29:0f:1f:52:72:a1:61:6e:fe:
         2c:fb:4f:d3:cd:41:b4:df:1e:8c:4f:b9:7e:ab:52:42:e3:03:
         e7:50:cc:29:b1:42:20:04:b4:23:e5:08:a2:78:0c:7d:73:77:
         ea:08:10:4b:ef:38:34:7d:f9:61:32:78:97:3c:fd:3e:31:a2:
         ff:7f:7d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:29:06 2025 by rpki-client