Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
File:                     lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json)
Hash identifier:          IGlXrTlKlkgM4RAP/D04Uye0MezVuLdPnuM9x5fTcnM=
Subject key identifier:   6E:6B:35:7C:88:52:C1:9C:22:50:AA:48:75:11:D2:58:E1:C5:2A:B3
Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
Certificate issuer:       /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Certificate serial:       0194BCA97E7D49A12108C2B2CE8D0CBF9666
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
Manifest number:          11D8
Signing time:             Fri 31 Jan 2025 14:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:12 +0000
Files and hashes:         1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: diUairoOMssk0u3kghtaLyMado4EGv5uW75oU18Xd+8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:7e:7d:49:a1:21:08:c2:b2:ce:8d:0c:bf:96:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
        Validity
            Not Before: Jan 31 14:00:12 2025 GMT
            Not After : Feb  1 14:00:12 2025 GMT
        Subject: CN=6e6b357c8852c19c2250aa487511d258e1c52ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:09:f6:53:e4:bd:4d:74:43:a9:81:4b:a0:c9:
                    8d:35:99:58:3e:a8:33:71:73:b7:98:8e:a4:fd:72:
                    cb:e3:39:64:3b:17:01:5f:1d:12:21:7a:fc:c2:d3:
                    c7:0b:e2:81:a5:46:de:9d:ed:a7:ae:9c:f9:33:71:
                    5d:9a:65:b4:aa:fc:8a:5c:04:8f:82:05:4b:a9:6e:
                    3c:f5:10:58:63:b6:71:fe:4a:8f:ac:48:74:e8:b1:
                    20:50:c7:d1:66:81:f0:89:3f:b4:4d:ed:48:d3:fa:
                    87:e5:ef:ad:6b:a6:4c:d5:0a:0e:bc:0f:a4:2b:66:
                    43:fe:23:67:00:cf:c7:1d:ea:e6:ef:70:2c:47:ad:
                    01:52:99:cb:62:9a:9d:43:46:9a:56:fb:5e:dc:54:
                    bb:a4:de:b4:32:45:aa:77:71:a9:73:76:aa:ce:7d:
                    8a:ad:ee:d0:af:44:b2:08:69:e1:51:32:a0:30:dd:
                    62:00:5c:d2:a0:6d:3b:8c:50:46:a1:28:38:7c:fd:
                    50:d4:f1:99:a5:78:53:e4:a6:88:b2:55:51:0d:ad:
                    af:99:f5:a7:0b:a4:63:a9:dd:a4:4c:44:04:63:e8:
                    ed:6e:6f:e4:a9:30:67:74:f0:9c:b0:bf:6f:ab:44:
                    9b:6c:15:a8:e9:b2:fd:9c:f2:67:6b:a1:8d:d5:4a:
                    ba:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6B:35:7C:88:52:C1:9C:22:50:AA:48:75:11:D2:58:E1:C5:2A:B3
            X509v3 Authority Key Identifier:
                keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e3:0c:c6:b2:db:4c:d6:09:aa:63:10:12:be:d3:f8:16:9b:
         37:bc:b4:78:ae:94:a9:ac:7d:58:ba:d1:7b:e1:a2:f2:6b:07:
         78:39:5b:5e:d1:79:ae:ee:5e:ae:c0:8d:7a:ab:99:f9:7e:d0:
         4d:28:a9:d8:c3:f1:ea:90:9a:3d:5a:5b:74:42:59:39:27:25:
         a7:30:72:16:3c:51:c6:f7:bd:43:5a:da:01:89:b4:84:4b:c1:
         8e:f5:3b:7c:4f:e6:a4:8d:47:f1:e1:cf:c5:30:ea:21:c6:96:
         e3:53:50:35:b8:2c:28:b0:00:cc:16:f2:0f:fc:a8:f8:0f:b7:
         fc:3e:80:d9:2a:a7:52:da:49:45:ac:9a:c7:18:9c:24:2f:e6:
         78:9a:8f:a6:49:d6:37:4c:e1:e4:00:81:a9:4b:db:c5:53:ad:
         10:6d:dd:a2:e9:17:92:d5:a5:2a:37:05:25:3d:a7:93:01:59:
         19:ed:35:be:dd:c9:c1:51:10:68:2a:21:54:43:e6:1c:c0:6f:
         1b:84:a7:b4:d7:78:35:a5:26:ea:2c:c8:10:cf:56:15:2e:d7:
         98:89:56:46:89:d5:23:f9:ab:9b:9e:fd:1e:aa:70:08:9d:ab:
         f5:2f:25:03:9e:fd:3c:d3:32:07:38:50:ff:f2:fd:46:36:81:
         8a:22:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:38 2025 by rpki-client