Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.mft
File:                     9Mc6eveuE8OM0fhZ-3-TnRRXSIc.mft (raw, json)
Hash identifier:          GW76LdnHHh3iVG//5d5ZZMfYqka1Y0mBAOYlrHuL5yI=
Subject key identifier:   B1:4A:82:83:21:43:7E:CF:0F:22:D3:C4:60:CB:6D:98:DE:2E:3B:31
Authority key identifier: F4:C7:3A:7A:F7:AE:13:C3:8C:D1:F8:59:FB:7F:93:9D:14:57:48:87
Certificate issuer:       /CN=f4c73a7af7ae13c38cd1f859fb7f939d14574887
Certificate serial:       0194BBCED2B7B81B8BB035D55972D4930B0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.mft
Manifest number:          1047
Signing time:             Fri 31 Jan 2025 10:01:21 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:21 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:21 +0000
Files and hashes:         1: 9Mc6eveuE8OM0fhZ-3-TnRRXSIc.crl (hash: Pa4TFH4JGatTgujqz2NGbJy5p3W59DG0Sy2wWmQH7z8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:d2:b7:b8:1b:8b:b0:35:d5:59:72:d4:93:0b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c73a7af7ae13c38cd1f859fb7f939d14574887
        Validity
            Not Before: Jan 31 10:01:21 2025 GMT
            Not After : Feb  1 10:01:21 2025 GMT
        Subject: CN=b14a828321437ecf0f22d3c460cb6d98de2e3b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:25:97:31:57:9a:d9:0e:69:39:fa:ae:c8:97:
                    5b:ab:61:f3:0e:8c:d1:c2:ee:22:1e:0b:c0:50:54:
                    83:32:8b:de:09:a1:ae:cf:ba:f3:f3:a0:5c:1b:07:
                    08:f0:68:ae:25:73:25:73:d4:af:7e:c9:56:6a:86:
                    18:a0:59:f0:8e:3c:14:e9:43:0a:e6:78:5b:fe:ba:
                    7c:d5:9e:cf:9b:a2:10:cf:7a:97:67:50:21:86:b9:
                    66:74:e2:71:fe:f5:8a:b0:30:15:de:d8:0f:43:b8:
                    54:6e:47:a5:83:86:e7:98:39:12:3f:60:0b:78:df:
                    79:c3:5f:63:17:fe:ad:e7:b2:d5:98:d7:86:96:32:
                    a7:85:30:05:35:35:61:06:7d:19:77:d7:45:74:3d:
                    f5:97:a6:45:a2:39:ca:65:24:39:49:93:d2:83:94:
                    e7:c1:66:d5:46:80:8c:e1:51:cd:1f:ad:f3:a1:7b:
                    2a:54:95:16:3c:5c:26:4a:24:3d:80:58:5d:ec:76:
                    f3:4a:88:a8:b8:fc:a5:42:2f:46:b4:30:35:0b:1d:
                    f4:7d:f9:74:ea:de:d9:a9:46:6f:4b:ec:b8:69:77:
                    8d:a4:47:5c:80:0a:c8:7e:2d:02:f0:7c:ba:81:cb:
                    7f:52:c7:be:22:fb:7a:80:c2:16:4e:6d:ab:f5:a7:
                    f5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4A:82:83:21:43:7E:CF:0F:22:D3:C4:60:CB:6D:98:DE:2E:3B:31
            X509v3 Authority Key Identifier:
                keyid:F4:C7:3A:7A:F7:AE:13:C3:8C:D1:F8:59:FB:7F:93:9D:14:57:48:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:37:df:b4:38:42:85:c1:14:23:56:8c:08:66:41:dd:b0:
         82:30:4b:dc:58:e6:c3:cf:e6:2d:70:ba:69:f6:67:1a:59:b2:
         6e:8f:a2:f0:6d:ed:d6:8c:bb:d4:77:7b:f2:44:94:d1:5f:99:
         bb:36:c8:ee:b0:d4:00:de:71:ba:19:a8:9c:37:85:cb:38:dd:
         ca:bc:ca:4a:22:32:7b:63:6f:4f:18:0b:08:d8:48:af:4e:51:
         83:90:3e:f5:91:64:bb:1e:f8:e0:46:b0:d8:6e:70:26:4e:f0:
         67:2f:49:b3:4f:02:8a:b5:6e:c1:f1:d3:38:bb:46:80:57:e3:
         d5:07:6f:de:c1:88:29:72:10:cf:5c:7b:7e:6a:09:c1:4c:fd:
         e1:e5:a4:7b:d2:bc:25:e8:96:99:ac:12:53:e9:e0:2c:2f:46:
         27:b9:14:e5:7b:82:29:d7:4b:0f:8c:d4:49:e5:56:cc:2a:db:
         f1:84:1d:1f:7e:6d:fd:82:a1:79:43:66:d8:2d:6d:1e:3e:02:
         b3:de:45:db:e4:74:eb:ac:fd:e5:67:be:bc:51:ad:2a:5b:c0:
         8f:cb:4f:2a:8f:68:ea:bc:0a:e6:4a:b3:e2:c6:82:3c:e2:d2:
         60:04:cb:57:da:75:f6:fb:94:68:f7:46:ac:fa:ee:98:fc:a2:
         1b:36:1e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:47 2025 by rpki-client