Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
File:                     Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft (raw, json)
Hash identifier:          mJ05qCw+jQvfnD4fblUPD5zAj00nP7SYab5EvTJQQs8=
Subject key identifier:   EF:21:C8:BD:85:D7:F2:A4:BB:9A:2C:75:48:21:93:48:50:7F:05:A7
Authority key identifier: 43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A
Certificate issuer:       /CN=43a2ef27472a9604bf626fea0e187f8db624134a
Certificate serial:       0194BC04F8150A0B093D8D23C24DD7C8F65C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
Manifest number:          0BC8
Signing time:             Fri 31 Jan 2025 11:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:29 +0000
Files and hashes:         1: Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl (hash: PKpARB/4wUX4PlzsvzQMovsU1eOrbsYq6PAY0GY7zDY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:f8:15:0a:0b:09:3d:8d:23:c2:4d:d7:c8:f6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a2ef27472a9604bf626fea0e187f8db624134a
        Validity
            Not Before: Jan 31 11:00:29 2025 GMT
            Not After : Feb  1 11:00:29 2025 GMT
        Subject: CN=ef21c8bd85d7f2a4bb9a2c7548219348507f05a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:70:40:6c:21:b1:4a:eb:db:f4:3e:10:10:
                    38:a5:d0:46:74:2c:9a:e3:0f:72:f2:5b:a3:6c:ad:
                    14:db:72:95:ff:9d:0c:db:30:21:00:98:ab:57:21:
                    1a:47:bd:8b:f1:ba:7e:18:c6:37:99:40:93:6f:23:
                    0f:6b:27:f5:17:1b:52:22:4a:e5:e7:e1:bd:49:a5:
                    a4:01:2c:9a:e5:f4:16:fd:36:cc:ac:97:7e:87:87:
                    a6:cf:b5:5a:b0:9c:f4:88:83:30:2c:33:04:e1:08:
                    ef:89:2f:de:5d:62:00:a3:ec:95:04:36:5a:7d:e8:
                    ff:a6:48:8f:1a:a9:c5:c7:22:47:6e:80:75:1d:93:
                    2e:bb:8a:ab:40:f9:01:34:fb:c5:b3:a2:07:f5:c2:
                    ac:f2:47:1c:76:61:de:5e:20:ab:b5:86:6e:9a:da:
                    e0:26:24:0d:45:4e:7e:12:82:af:14:6b:e7:73:57:
                    ac:88:94:60:02:7c:6f:80:a4:3a:ea:90:f8:c2:02:
                    38:90:1f:1b:d4:66:4e:36:db:96:f0:31:1c:89:e6:
                    9a:48:60:cd:12:28:18:b6:fe:51:9f:c3:57:18:27:
                    ba:ca:cb:4e:27:9e:b8:b0:24:97:96:a2:ee:8a:44:
                    bf:97:78:41:e1:63:b9:d4:c8:d2:c7:43:52:a3:cb:
                    78:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:21:C8:BD:85:D7:F2:A4:BB:9A:2C:75:48:21:93:48:50:7F:05:A7
            X509v3 Authority Key Identifier:
                keyid:43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:80:b4:8f:8b:e8:83:10:04:2a:54:f5:1a:a1:d2:e9:0b:94:
         21:fc:4c:07:ba:14:31:a9:09:46:f5:e4:14:e5:bd:34:0b:aa:
         89:64:99:2f:44:d8:99:29:dd:5a:4e:77:ab:52:25:53:87:30:
         d8:4d:cf:9f:2f:34:83:cf:bb:74:f6:78:45:c1:05:0c:cb:ea:
         ec:fd:78:c0:25:f6:80:79:c1:df:ed:53:e3:44:f4:1d:2c:a4:
         27:1d:44:96:fb:b9:c5:84:2d:9a:4d:84:f5:78:97:04:a7:2a:
         36:82:8e:9b:90:37:11:4a:06:64:5a:fc:34:32:e5:35:f5:5b:
         0a:57:fa:79:4e:93:e4:e1:93:df:75:3c:64:ca:72:92:f4:2a:
         bf:cf:c1:7f:e4:a7:01:59:2b:e7:f8:73:e2:55:e6:2c:5c:81:
         83:27:69:49:fb:8a:45:55:ef:d0:7c:43:ce:bc:83:58:7b:c1:
         56:ad:32:a2:02:4a:80:f6:8a:5b:2c:42:2a:a2:db:1b:7e:6a:
         21:94:a3:01:5b:9b:6d:4d:6f:21:c6:3a:b2:91:91:6e:81:d8:
         b0:d4:ca:53:4f:db:56:9f:c3:74:95:a9:d3:be:aa:b9:f0:58:
         ee:2f:7a:90:60:92:27:72:d6:18:15:a6:04:b9:66:1b:0a:ff:
         f2:af:c2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:13 2025 by rpki-client