Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File:                     Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier:          /cIElwhzwvpI6JV2AhpO4eax6OcK6QWzxBmygTy9oOs=
Subject key identifier:   0A:8B:BE:02:58:78:D8:D0:D2:5D:58:40:A5:A0:5D:C3:5D:69:D8:CD
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer:       /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial:       0194BCA9C63384170BD28B101F246E86DF95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number:          141D
Signing time:             Fri 31 Jan 2025 14:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:30 +0000
Files and hashes:         1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: ee+pocbl2XWhF9wLZA/nZGRoo857EkTdKO0jx1PQRsA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:c6:33:84:17:0b:d2:8b:10:1f:24:6e:86:df:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
        Validity
            Not Before: Jan 31 14:00:30 2025 GMT
            Not After : Feb  1 14:00:30 2025 GMT
        Subject: CN=0a8bbe025878d8d0d25d5840a5a05dc35d69d8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4e:15:81:61:bd:16:ed:4a:fb:17:0a:04:7a:
                    33:d0:74:90:f1:94:17:bc:24:a4:95:21:08:c0:ba:
                    6f:73:49:0f:fd:bb:c1:19:99:b5:49:fd:6d:d1:79:
                    9a:5d:c6:90:3d:17:43:89:c0:29:4c:8d:e4:3f:0e:
                    f4:7e:f3:fd:1e:6c:08:27:58:4c:67:1d:8f:0a:86:
                    82:a0:19:ee:29:99:0f:a5:6d:d3:f0:b9:be:35:a1:
                    e5:d1:00:12:30:f8:1b:9c:cf:65:bc:0b:12:87:3a:
                    68:fa:c9:2f:d4:f7:fd:d7:18:cb:e3:93:0c:9f:4d:
                    95:84:1f:ee:59:6f:09:54:60:13:56:b7:b3:12:95:
                    b8:f0:07:2f:26:14:5a:c4:39:7c:c1:f6:80:7b:52:
                    ea:f4:ef:8c:8c:80:37:34:20:95:3d:83:9d:3d:71:
                    d6:0f:d5:e1:1b:8c:ab:af:d6:29:75:17:68:c4:6d:
                    c3:36:37:a3:14:92:a2:cf:9a:8c:4b:f8:a2:20:39:
                    2a:8c:a6:cc:4d:31:df:3f:9c:e6:dc:69:96:39:21:
                    0a:9f:1c:cc:8c:b3:ae:18:c1:b1:2c:95:40:38:99:
                    72:b7:40:d0:5e:97:27:2e:3c:b7:86:d4:d3:2b:c6:
                    0d:bc:53:e4:fb:d6:b3:5a:1b:7d:73:e1:ad:b1:06:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8B:BE:02:58:78:D8:D0:D2:5D:58:40:A5:A0:5D:C3:5D:69:D8:CD
            X509v3 Authority Key Identifier:
                keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:07:5e:f0:99:da:a6:e0:37:3d:b2:b5:32:aa:bc:9e:d3:dd:
         fe:2b:49:de:71:06:6d:88:04:0e:26:97:a2:76:6c:96:c9:e3:
         62:25:1e:aa:52:ae:5d:3f:45:b0:fd:6e:09:3b:b7:39:42:e4:
         5e:14:5f:27:9e:9e:e8:58:07:b8:a5:99:c7:80:09:7e:78:77:
         d3:f5:cd:32:63:67:cb:eb:55:80:3d:d6:0a:7d:fb:78:f7:dd:
         e3:64:f5:52:e7:d6:7b:ea:81:09:24:c3:5a:f8:0d:10:09:c9:
         45:74:d1:88:e6:d8:3f:c1:bb:8c:cd:41:fc:12:fc:05:51:4b:
         16:9a:76:30:b6:51:cb:50:4d:26:b5:a9:2e:34:79:09:71:a2:
         0e:b3:0d:8d:86:47:a6:28:c3:c3:d5:9f:f4:04:ab:08:ba:00:
         8e:1a:55:80:31:01:0f:9e:8d:94:d8:e0:a4:c3:dc:88:42:8e:
         87:50:7d:fb:50:53:50:9a:e0:f8:a7:49:fa:1b:57:3d:a6:54:
         9c:f8:4c:ad:32:62:9d:b5:56:4a:7c:fe:39:65:bd:e3:6b:0a:
         0f:09:c8:93:a4:e0:32:a8:f0:75:af:2b:47:43:05:18:1c:ad:
         9d:dc:92:2a:03:34:4b:91:c2:e4:89:86:26:04:22:cd:7b:cd:
         ea:7b:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:24 2025 by rpki-client