Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
File:                     L97GcLeAw7-UAe8cEVodh_6PfHo.mft (raw, json)
Hash identifier:          8BhiVlgRcyfsZiwG3d1peiaz/YlIrfmPu0fPS2Dg+DM=
Subject key identifier:   D8:C0:DB:3C:E3:F1:03:F7:A2:76:E8:3D:16:FC:79:FD:75:FA:CF:20
Authority key identifier: 2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A
Certificate issuer:       /CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
Certificate serial:       0194BC3C6CB114DF9E4D6421AF13364B4D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft
Manifest number:          0B0A
Signing time:             Fri 31 Jan 2025 12:01:03 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:03 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:03 +0000
Files and hashes:         1: L97GcLeAw7-UAe8cEVodh_6PfHo.crl (hash: 9nz/V79pn+FCwo9p0D+3WbyXHUdt2gnTlUKJucXBPio=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:6c:b1:14:df:9e:4d:64:21:af:13:36:4b:4d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fdec670b780c3bf9401ef1c115a1d87fe8f7c7a
        Validity
            Not Before: Jan 31 12:01:03 2025 GMT
            Not After : Feb  1 12:01:03 2025 GMT
        Subject: CN=d8c0db3ce3f103f7a276e83d16fc79fd75facf20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8e:a7:f0:4b:cd:c7:0f:31:d0:ae:e9:d4:f2:
                    3a:f3:7f:f1:7a:83:55:87:af:9b:77:1b:fc:49:0c:
                    2d:99:ee:ab:87:96:c6:13:9f:58:3e:bd:f2:94:82:
                    fa:76:88:d7:45:c9:6e:3b:d8:14:ea:d8:2e:8b:03:
                    ca:21:c3:a0:35:cb:47:e0:fc:19:ee:41:77:70:08:
                    26:9b:90:49:78:47:47:19:f7:39:1e:38:31:ed:8f:
                    ba:09:0b:73:5a:a1:ab:82:45:d0:40:37:f5:9d:d9:
                    e8:e8:3f:a9:2d:ab:a1:15:0e:b7:8c:6e:21:f3:41:
                    9e:70:25:af:52:56:00:f1:cb:c5:07:78:5b:cd:36:
                    cd:ea:e6:9f:ff:a0:14:d6:88:14:75:f3:2b:3c:2e:
                    22:61:2a:20:26:dd:e6:19:7d:29:48:40:a3:56:cb:
                    8a:9b:31:79:99:bf:e7:65:56:33:8f:aa:5b:e4:cc:
                    c5:1b:55:39:20:48:9d:ae:9f:79:53:6c:50:56:79:
                    55:ac:13:c1:a5:5b:74:f6:58:18:bb:75:1a:9e:06:
                    b7:27:3e:cb:fe:34:2c:cb:81:52:72:a4:3e:b4:ef:
                    ec:af:a6:98:9f:2e:6c:76:41:f0:0c:44:07:53:7f:
                    47:af:ac:a1:09:36:71:a8:16:2d:f4:e2:eb:55:d9:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C0:DB:3C:E3:F1:03:F7:A2:76:E8:3D:16:FC:79:FD:75:FA:CF:20
            X509v3 Authority Key Identifier:
                keyid:2F:DE:C6:70:B7:80:C3:BF:94:01:EF:1C:11:5A:1D:87:FE:8F:7C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L97GcLeAw7-UAe8cEVodh_6PfHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e19c5-0082-4844-b6bd-ab1d8e9844af/1/L97GcLeAw7-UAe8cEVodh_6PfHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8d:4d:4d:9c:c8:73:d1:de:4e:61:b9:ee:d1:c9:e8:ca:24:
         06:c0:29:c0:ae:e2:d2:ff:ba:11:38:f6:67:d8:6b:91:4b:9a:
         f8:5e:48:24:96:0a:5d:c6:25:77:70:11:20:5f:d9:ae:22:69:
         66:84:f8:f4:20:5f:74:e8:a8:20:7b:4f:62:81:9a:13:e5:5b:
         62:c6:e6:03:18:1b:61:ed:2f:c3:0b:bd:f0:41:e6:3e:1a:f1:
         7b:64:1e:dd:9c:16:f8:7c:78:fe:11:78:ba:bb:f8:6b:7d:b7:
         7f:4d:a9:28:c6:4f:68:10:c5:9f:1e:8b:b6:62:b8:db:a2:72:
         3b:ab:71:ec:46:fd:fa:91:72:0f:39:41:ea:8c:ce:f3:9f:61:
         bb:92:dc:c8:a5:96:d8:42:80:07:64:89:64:dd:6e:02:98:0a:
         bc:41:5b:2b:fa:ac:4f:34:6b:9c:82:63:a7:5a:f6:f6:25:ca:
         97:81:20:f3:10:b8:17:66:03:93:86:64:64:4f:74:35:87:9f:
         61:4e:35:70:95:8f:dc:1a:2d:b1:9b:50:c2:9f:d0:d6:63:66:
         28:4f:b9:27:f2:d2:a2:5f:4d:e5:88:33:d5:32:57:12:b8:02:
         5b:16:13:41:54:61:0f:59:a1:97:e6:3d:b7:ba:0a:2c:02:7d:
         72:0f:a0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:30 2025 by rpki-client