Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
File:                     EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json)
Hash identifier:          auhVHomF2lKKq8Gtn86JR25fSZCrhwjCJgcrBT1GmU8=
Subject key identifier:   CC:40:62:83:CE:57:BA:6A:83:94:C8:1F:4C:18:6F:72:62:86:BB:CA
Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Certificate issuer:       /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Certificate serial:       0194BBCF08C9C2E55E460951025B1A44FAB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
Manifest number:          0666
Signing time:             Fri 31 Jan 2025 10:01:35 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:35 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:35 +0000
Files and hashes:         1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: 9AO1W9q8HHcmWDOtF6cNSR1QXHnxM5Byf0d6IMmmc9c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cf:08:c9:c2:e5:5e:46:09:51:02:5b:1a:44:fa:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
        Validity
            Not Before: Jan 31 10:01:35 2025 GMT
            Not After : Feb  1 10:01:35 2025 GMT
        Subject: CN=cc406283ce57ba6a8394c81f4c186f726286bbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dc:76:c4:fa:bd:3d:66:48:ab:62:64:ba:eb:
                    95:6c:b9:65:8b:88:9d:e5:86:ec:30:c0:60:4a:eb:
                    ca:fc:3b:05:b1:6e:49:27:7d:74:a7:fd:79:15:87:
                    0f:18:89:0c:e6:5f:c6:e8:e1:0b:da:00:a7:40:bc:
                    bd:a0:65:e5:ab:af:34:ec:15:0e:c3:75:0e:de:8a:
                    df:4d:fd:e6:4f:44:94:25:83:b8:71:4a:73:b4:ef:
                    7e:dc:cb:92:4f:58:37:bd:91:bf:ed:24:40:dd:79:
                    4e:a9:eb:fa:a6:3c:7f:80:ce:42:d9:a3:3f:31:e1:
                    d9:32:a3:e4:bd:88:c7:af:a9:ea:4a:4e:41:a4:d9:
                    12:1c:82:00:30:ec:7d:ef:23:9f:a3:db:7c:de:ee:
                    b1:5b:f1:50:87:bb:ca:46:ad:a4:90:bf:69:8b:96:
                    37:3d:97:a5:53:c2:09:cb:71:8b:39:a9:fb:3c:24:
                    94:93:a3:ad:ab:f9:a8:96:a1:34:58:17:c2:ac:ae:
                    d2:8a:cd:73:d1:4f:17:19:2b:c5:5a:97:03:19:dd:
                    a0:c6:a9:a3:29:2d:1e:64:4b:01:83:5d:48:13:51:
                    86:8d:59:aa:8d:2a:df:a3:7d:c7:9d:7b:2a:81:6d:
                    20:14:3a:4b:ea:04:f6:18:f2:92:1a:79:cc:10:58:
                    ba:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:40:62:83:CE:57:BA:6A:83:94:C8:1F:4C:18:6F:72:62:86:BB:CA
            X509v3 Authority Key Identifier:
                keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5c:90:f9:46:a0:81:06:69:75:04:1b:83:98:e1:12:db:ec:
         00:02:41:c0:93:20:54:f7:aa:42:90:e7:4a:0a:6e:2a:37:9c:
         40:95:ef:c5:20:f3:b3:83:97:da:24:39:0a:61:98:7d:3f:3e:
         30:22:85:02:0a:2e:7e:9e:a7:8e:60:54:19:ee:09:40:29:84:
         39:f9:72:9e:ef:96:45:31:a3:5c:49:6b:ba:4b:7c:52:ab:4b:
         86:a3:03:97:35:4a:ac:83:5e:6e:c2:fa:6e:b9:0b:9b:17:b0:
         19:47:c4:07:2c:b2:45:eb:0b:e2:09:c4:41:8e:13:5a:ad:91:
         a4:43:8a:b9:d2:3f:8c:6d:42:55:2d:09:88:98:2d:6e:6b:72:
         23:bd:fa:12:25:82:7c:b7:d7:b0:0c:62:10:0f:34:2f:75:3a:
         72:3c:6c:e0:fc:f5:3b:13:d3:d6:fd:91:1a:f0:59:2c:ff:27:
         a0:cd:1a:50:bc:0b:12:53:a0:0c:cb:ce:b8:23:ba:2f:79:a9:
         20:2f:1f:db:34:de:b1:06:46:26:1a:87:b7:cf:e0:0d:a8:9a:
         68:69:7b:ff:f5:de:76:3f:b7:28:13:1b:46:f4:06:db:f1:24:
         38:6f:03:bb:59:d8:0f:ba:3c:1f:a2:7d:a2:ba:a4:67:5c:6e:
         b0:ac:a2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:01 2025 by rpki-client