Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
File:                     DTr3NGYY2GMOAUanZREkQ-DCyP8.mft (raw, json)
Hash identifier:          ulf4cNkSNxTyF61VHecytxuJJRhBfPvYFCItU1Wltxg=
Subject key identifier:   C0:97:0C:09:D3:58:E2:5B:9D:3B:FF:6B:1A:31:FA:C9:81:9E:9E:0C
Authority key identifier: 0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF
Certificate issuer:       /CN=0d3af7346618d8630e0146a765112443e0c2c8ff
Certificate serial:       0194BBCDBFD2411040AE7BDD1A325C689C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
Manifest number:          04BD
Signing time:             Fri 31 Jan 2025 10:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:10 +0000
Files and hashes:         1: DTr3NGYY2GMOAUanZREkQ-DCyP8.crl (hash: vKKzfpER/vKVl/v+80WK01QbIZ19RTNhg31Gz0I/lL0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:bf:d2:41:10:40:ae:7b:dd:1a:32:5c:68:9c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3af7346618d8630e0146a765112443e0c2c8ff
        Validity
            Not Before: Jan 31 10:00:10 2025 GMT
            Not After : Feb  1 10:00:10 2025 GMT
        Subject: CN=c0970c09d358e25b9d3bff6b1a31fac9819e9e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:db:fb:72:73:37:62:55:3b:f9:16:e2:f0:
                    06:3f:13:8b:16:93:0a:52:de:af:c1:5a:74:a4:34:
                    ce:cb:6a:0b:6b:85:06:31:91:bf:4d:17:ba:5c:db:
                    bd:d8:72:75:8f:e4:7e:7d:6f:b2:4d:86:4d:30:7b:
                    b0:a0:05:12:23:68:db:f9:78:bf:bd:21:df:6f:a3:
                    0e:cc:a1:60:05:47:06:6d:0e:78:21:78:c3:94:a3:
                    39:a8:b8:e5:a9:0c:3e:ec:e0:58:24:eb:3d:e9:ba:
                    e3:a3:5c:bd:45:c4:fc:18:35:76:d3:5d:8c:57:b1:
                    8b:61:44:b8:41:e8:c3:dd:62:35:a0:5e:e1:d7:70:
                    01:d6:8f:5d:78:ff:84:e5:f8:1e:fa:d6:0a:6f:25:
                    ab:2f:e1:68:4b:5f:97:0e:c5:51:14:f7:b8:d5:10:
                    11:48:13:6a:be:db:cd:70:48:21:b7:b4:de:86:9a:
                    d7:69:0c:b5:9f:ad:d9:4e:7f:2d:dd:6c:41:42:9f:
                    1a:2a:87:78:7c:75:bf:60:c7:e3:7b:c2:20:2d:c4:
                    e8:4f:cb:c1:02:cc:c6:28:de:dd:94:95:48:e8:c7:
                    8c:4f:26:1c:19:77:f0:47:5c:cb:17:80:69:39:c7:
                    f2:24:d9:91:23:42:82:bf:09:84:69:9f:2e:78:f3:
                    30:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:97:0C:09:D3:58:E2:5B:9D:3B:FF:6B:1A:31:FA:C9:81:9E:9E:0C
            X509v3 Authority Key Identifier:
                keyid:0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e6:6f:18:26:0f:d3:aa:fa:79:3a:2e:33:85:05:49:18:40:
         8a:99:8e:d8:77:4e:d1:64:c5:81:8d:80:03:2f:93:f5:26:6c:
         c4:73:5e:07:c3:76:72:cb:7f:42:5d:ac:6a:0a:5a:34:6b:02:
         58:fd:a5:47:5c:cb:fc:f4:d9:40:2c:9b:d7:87:9e:b7:9d:d1:
         28:33:c0:90:52:59:e3:c7:9d:1b:4c:1a:77:86:62:da:04:61:
         99:cb:fe:2a:4f:e1:1f:73:29:53:cf:eb:25:f1:de:bd:8b:34:
         22:f4:af:ce:e0:94:e5:10:75:cc:90:82:af:8f:a5:a1:3f:b5:
         c3:23:96:f0:60:89:f2:50:18:aa:4e:55:e3:01:ca:73:ad:ae:
         2a:b2:44:31:b2:cf:1c:06:03:68:a0:ad:e9:ae:9a:da:bc:77:
         86:c0:45:bc:68:20:1b:06:cd:1d:45:94:cc:02:27:3a:38:f7:
         3f:a7:0d:db:44:e7:5b:27:3a:2b:a9:3b:b7:f9:d1:2e:b6:fd:
         80:9e:fb:df:f9:69:7b:ae:59:91:85:e8:bb:6e:11:aa:70:f3:
         57:54:20:03:c5:2b:5a:be:f9:75:8e:6b:a6:99:a6:d5:2b:a1:
         61:f1:5c:eb:27:6a:3a:f5:ea:29:aa:6c:02:f2:48:36:45:d0:
         7c:12:f8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:45 2025 by rpki-client