Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
File:                     pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft (raw, json)
Hash identifier:          sLTtrF46kzUgN16ILdYm6MSo+waVtSzhuO9fh9gzhI8=
Subject key identifier:   66:0E:4F:2F:91:EF:FD:08:B7:8B:48:FE:D2:56:9B:85:42:16:5F:E9
Authority key identifier: A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
Certificate issuer:       /CN=a4c9f067007684facca9be8ce02da4676c09972a
Certificate serial:       0194BC3C3C5FCCC33C2257EE7672B62E2769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
Manifest number:          0461
Signing time:             Fri 31 Jan 2025 12:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:51 +0000
Files and hashes:         1: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl (hash: +9dmw5R0srw+UDPWV158izb9D+c8N8T6OB5XAWZBB0E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:3c:5f:cc:c3:3c:22:57:ee:76:72:b6:2e:27:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4c9f067007684facca9be8ce02da4676c09972a
        Validity
            Not Before: Jan 31 12:00:51 2025 GMT
            Not After : Feb  1 12:00:51 2025 GMT
        Subject: CN=660e4f2f91effd08b78b48fed2569b8542165fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:df:33:68:33:42:89:79:bd:c3:ab:80:e1:d7:
                    ca:2a:33:69:77:38:97:b4:ab:0c:da:2d:56:d3:66:
                    ee:a4:d1:53:34:81:ef:46:f3:f9:b9:b2:0f:c4:47:
                    9a:be:6b:76:bc:a1:2a:4e:bd:89:5f:6b:c1:2b:f6:
                    28:82:da:ea:f2:9a:a7:31:e5:52:1e:5b:26:1d:25:
                    27:19:3c:9e:8f:a8:f9:a5:cd:60:eb:b0:ca:39:b0:
                    99:1c:af:43:b7:ab:69:f2:74:a3:6d:ce:dd:15:70:
                    2d:37:41:df:f2:95:2f:13:91:1e:79:e9:47:0f:90:
                    9e:ac:a2:16:aa:20:73:75:53:4e:0d:8c:1b:ab:c5:
                    e6:67:e6:5a:d9:cd:a9:5f:af:35:df:cf:c5:ce:a3:
                    f7:48:2b:ee:7f:7c:33:cb:21:2e:d4:5d:96:8c:92:
                    a7:fa:8d:ea:aa:d1:62:18:5f:a2:a5:ea:1e:45:f6:
                    44:8f:c9:00:5c:98:4b:5b:5f:b7:9f:40:5a:48:f9:
                    57:cd:33:3f:8f:46:69:a9:f4:d6:f1:89:b5:39:0f:
                    53:39:42:3c:7d:30:2e:23:bc:66:a1:a5:fd:34:33:
                    e5:9e:38:7a:8c:a4:52:aa:a9:5c:8b:f2:6f:fc:18:
                    9d:17:95:05:fe:c6:29:02:46:da:a3:45:84:0a:9e:
                    ef:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0E:4F:2F:91:EF:FD:08:B7:8B:48:FE:D2:56:9B:85:42:16:5F:E9
            X509v3 Authority Key Identifier:
                keyid:A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:17:3e:15:72:66:2c:69:0a:c0:70:c7:e8:14:05:97:d6:a2:
         bc:92:83:14:29:b9:66:18:f1:4a:29:55:d3:9d:44:61:85:1b:
         63:a0:28:55:4a:18:c3:0e:8f:14:93:aa:6a:54:31:23:1a:4b:
         5d:95:df:23:a0:09:ae:da:a0:b5:5d:26:93:cd:d9:17:6d:bd:
         37:5a:fc:f0:2d:88:61:0e:20:ef:c9:aa:63:5d:b4:ce:74:91:
         e7:67:3a:d7:20:22:86:0d:55:2d:3a:e4:f9:8b:26:04:7d:d5:
         48:d6:1d:3b:d4:6b:f5:18:1e:65:02:a8:e5:a1:11:57:89:d5:
         ac:3d:88:72:2b:e5:b4:f7:76:d7:0a:30:4a:a6:a5:46:c3:3c:
         c8:43:64:2e:fc:c4:ad:04:c4:6d:2a:da:b5:94:95:a6:b7:d6:
         8e:c0:10:76:1d:5d:c8:e6:6b:4c:21:64:4c:24:78:d6:10:3c:
         dc:72:e3:35:1d:19:43:0a:36:71:23:d7:22:82:6b:59:07:57:
         0c:09:db:41:54:a9:bd:d5:82:55:28:a8:12:9b:12:40:8f:0a:
         78:cc:2d:a5:ef:1b:8a:8b:14:12:64:51:3c:cf:5f:9e:72:04:
         f5:3d:47:29:ad:58:57:f1:b9:d8:81:6f:d4:9c:04:2a:ac:99:
         eb:1e:8e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:16 2025 by rpki-client