Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
File:                     DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json)
Hash identifier:          e8xdSEB/KixBn76qRwwPGYM3WcUweABq6VPzbSDls3M=
Subject key identifier:   FE:F2:E9:00:21:03:60:88:D3:E4:41:38:A6:76:8C:25:C6:64:3A:1B
Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
Certificate issuer:       /CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Certificate serial:       0194BCE0BCD1D396ABBBCB7515D9C90151E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
Manifest number:          0444
Signing time:             Fri 31 Jan 2025 15:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:32 +0000
Files and hashes:         1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: e3vo+hjDvY41mqhZB5NTdweCOFs4wWROTMyOpt0SPHw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:bc:d1:d3:96:ab:bb:cb:75:15:d9:c9:01:51:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e
        Validity
            Not Before: Jan 31 15:00:32 2025 GMT
            Not After : Feb  1 15:00:32 2025 GMT
        Subject: CN=fef2e90021036088d3e44138a6768c25c6643a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0f:2a:78:ca:55:ec:3f:e6:29:b8:dc:78:17:
                    65:14:b7:e4:c7:e3:e6:8d:04:d5:83:25:62:bc:fc:
                    87:9f:9a:29:25:19:15:b7:6e:a6:0e:f1:55:ae:67:
                    7c:b2:30:6a:77:41:f1:ec:94:9f:84:72:bd:dc:4b:
                    7f:2a:bb:c2:45:01:5e:e8:37:94:b2:5e:51:e8:69:
                    f6:39:c1:af:75:c4:be:ae:5f:f2:c5:6b:81:cd:7a:
                    02:6e:a0:1d:51:b4:37:20:39:7d:e9:be:4f:d8:3c:
                    fd:79:68:f3:0a:d8:20:35:34:1f:e5:25:68:f0:40:
                    54:18:39:6e:5f:4b:d2:ef:e7:64:7a:66:6f:1f:a1:
                    6d:70:be:5b:c3:37:f0:15:e1:96:23:86:c9:e9:7e:
                    6b:13:fa:5d:26:5e:56:16:87:b7:38:05:40:08:ed:
                    c0:f1:4e:04:46:e3:c9:5d:3b:7e:ca:f3:31:4c:aa:
                    8c:e9:8c:3b:8c:ef:fc:9a:c2:82:35:52:30:95:dc:
                    df:95:81:99:52:6c:25:98:45:05:44:7f:0a:80:01:
                    35:4c:df:79:06:eb:06:9f:01:ca:42:fb:82:ad:19:
                    b5:23:25:41:c5:92:44:33:4b:66:32:b7:c4:72:1e:
                    18:23:75:a8:2c:5c:ff:bc:7c:65:bb:ea:bc:d8:35:
                    be:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F2:E9:00:21:03:60:88:D3:E4:41:38:A6:76:8C:25:C6:64:3A:1B
            X509v3 Authority Key Identifier:
                keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:0c:4c:ab:60:07:32:49:fc:e0:4f:21:d5:10:39:9a:a7:
         39:74:eb:ae:71:cc:71:17:c0:ca:c0:99:cd:a5:44:a8:66:de:
         52:8d:84:b2:36:5c:d6:92:94:c0:b7:f7:de:12:02:27:52:7f:
         39:84:8e:1d:b6:af:a6:f1:e5:f0:f8:e9:9a:6c:53:78:78:bc:
         68:f4:12:4e:06:0d:74:89:b4:e7:88:1f:2d:f4:3d:b8:ba:bd:
         50:54:0b:81:6a:5e:4f:c9:97:2c:7a:33:13:73:08:38:e6:c0:
         be:a4:c5:55:dd:3d:aa:d3:2d:ad:f6:7d:e8:26:e2:0d:1d:7e:
         70:61:af:ff:8a:28:9b:3f:a9:49:15:58:3a:a4:1f:fc:5b:be:
         6c:20:1b:2e:15:55:86:60:25:79:28:e8:f9:71:af:83:bf:0e:
         bd:7e:51:77:d8:01:20:ff:a5:48:17:5a:80:70:a7:7d:78:52:
         2b:ea:04:e1:5a:0d:12:0e:11:78:d9:36:c5:11:10:c8:4d:75:
         4c:e8:a9:d5:5b:11:d2:2a:a5:22:45:ed:77:88:f7:8d:e1:f4:
         4e:22:93:9e:9e:2c:79:55:d4:31:2c:05:4c:dd:9e:01:a6:f7:
         8a:d2:40:7b:e2:35:19:92:28:f1:2f:b0:83:5e:e1:d1:21:f4:
         8e:dd:89:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:03 2025 by rpki-client