Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/aabdbb-c663-4b36-9511-700e163118e1/1/vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.mft
File:                     vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.mft (raw, json)
Hash identifier:          1OpJpOXp2Cehz9abTwok/H1OOxBSROeJ7DlZbYYiVI8=
Subject key identifier:   C8:F7:6F:3A:F6:A5:EB:F2:2C:3D:DA:AF:2F:1A:4C:C9:20:7D:AC:09
Authority key identifier: BC:21:74:1F:77:C2:12:7E:49:CF:3E:99:70:66:9A:CC:7E:95:CA:E9
Certificate issuer:       /CN=bc21741f77c2127e49cf3e9970669acc7e95cae9
Certificate serial:       0194BBCEB37037083B7D4ACAC4C069CD1FFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/aabdbb-c663-4b36-9511-700e163118e1/1/vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.mft
Manifest number:          0D49
Signing time:             Fri 31 Jan 2025 10:01:13 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:13 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:13 +0000
Files and hashes:         1: vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.crl (hash: w0fIE2CuC3uT9iTXwDviLPGlrUZscgjDk7rAbDnWVm8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:b3:70:37:08:3b:7d:4a:ca:c4:c0:69:cd:1f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc21741f77c2127e49cf3e9970669acc7e95cae9
        Validity
            Not Before: Jan 31 10:01:13 2025 GMT
            Not After : Feb  1 10:01:13 2025 GMT
        Subject: CN=c8f76f3af6a5ebf22c3ddaaf2f1a4cc9207dac09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:79:fd:3a:aa:5c:25:68:ec:1c:ac:d7:a0:
                    31:01:a0:fc:c2:b0:32:4a:37:48:c4:e0:17:32:37:
                    d9:b8:14:10:63:85:82:68:30:b3:42:cf:ed:42:01:
                    c3:e0:35:2b:9c:bb:31:a2:9f:fb:08:8a:2d:28:47:
                    66:7d:01:55:01:68:7a:36:a9:54:de:64:cf:b8:85:
                    3e:c7:b2:bc:8d:81:d7:cf:73:b5:7d:06:24:a8:08:
                    df:82:aa:88:8f:15:87:2e:bc:ad:45:bf:ee:64:7e:
                    82:c3:ad:66:03:37:2b:93:df:32:97:6a:e2:c1:a6:
                    73:bd:98:ce:49:ce:06:00:ca:80:90:20:92:c2:1e:
                    17:7e:8e:5c:ad:94:65:5b:b4:82:bd:01:c5:ee:32:
                    55:08:02:e0:d5:07:10:01:a3:d9:e1:62:9b:aa:77:
                    41:79:b2:6f:be:e4:6b:10:17:a4:16:ae:2f:74:3c:
                    60:44:ce:8a:6c:04:67:63:35:0c:5b:e4:4a:35:b2:
                    ea:b7:ad:98:67:d8:70:6c:cf:5b:b4:8a:c7:20:f5:
                    56:20:e3:b4:6f:e0:e9:c6:1e:35:94:e7:fa:20:2f:
                    de:21:68:42:bf:21:23:bb:4c:8f:6f:bc:61:cb:b0:
                    20:bb:b8:df:9e:67:88:25:c1:9f:5b:f1:bd:44:21:
                    b6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F7:6F:3A:F6:A5:EB:F2:2C:3D:DA:AF:2F:1A:4C:C9:20:7D:AC:09
            X509v3 Authority Key Identifier:
                keyid:BC:21:74:1F:77:C2:12:7E:49:CF:3E:99:70:66:9A:CC:7E:95:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aabdbb-c663-4b36-9511-700e163118e1/1/vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aabdbb-c663-4b36-9511-700e163118e1/1/vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:7d:5c:ce:46:f6:9b:45:d0:2b:07:7b:b9:28:7d:53:60:99:
         02:2b:07:0a:49:c6:d2:18:15:0c:75:3f:d0:ba:19:0c:e6:42:
         30:d8:1c:fe:97:4c:b2:d6:09:4c:10:c4:a2:24:46:83:3c:2c:
         e7:e0:cf:fa:bd:1d:e4:9d:87:69:91:52:28:1f:f2:52:64:12:
         a0:d1:0c:7e:ed:c9:37:e9:04:13:8f:a7:f7:69:5c:f6:e2:10:
         2f:87:bd:e4:13:e4:83:28:cd:87:d3:c4:cf:7b:9d:af:92:4b:
         7c:69:d0:3d:cc:7e:ff:fe:15:8b:a1:81:3d:a9:ee:bb:fe:92:
         0e:67:0a:0c:34:01:c4:42:9e:27:aa:1b:ea:d4:ae:8c:ef:98:
         86:ea:46:1b:f0:48:59:1a:6d:7e:39:44:75:00:b9:ad:da:af:
         98:59:df:65:d1:44:6c:68:dd:3f:57:15:91:63:76:0f:28:dc:
         15:9e:1a:e2:e6:1d:51:5b:67:9e:85:a5:cc:42:4f:59:7d:10:
         44:29:e4:1c:32:0e:1a:4b:43:c0:80:c0:1b:7c:79:94:22:5a:
         e2:e0:bf:80:6c:93:1e:04:d2:e0:cc:45:6e:b5:50:9d:1f:20:
         7f:68:8b:3a:c0:0b:fe:a5:09:3a:39:16:48:d5:72:d4:43:74:
         83:62:d7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:39 2025 by rpki-client