Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
File:                     Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft (raw, json)
Hash identifier:          juJxhqtP4v2TJmrSBpjk3w6JwurJPba3+5gT9t17YAQ=
Subject key identifier:   D0:0B:12:EB:70:7B:5A:8E:D4:A8:36:26:39:0D:7B:01:FD:4A:5D:F2
Authority key identifier: 2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D
Certificate issuer:       /CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
Certificate serial:       0194BC3C1CDE6F60872A9090E8D5D5AF75BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
Manifest number:          0541
Signing time:             Fri 31 Jan 2025 12:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:43 +0000
Files and hashes:         1: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl (hash: xI7OulTnPSMrGO/BLZ2zbwdySs54Ta9Tj/tCGEL9mNM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:1c:de:6f:60:87:2a:90:90:e8:d5:d5:af:75:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
        Validity
            Not Before: Jan 31 12:00:43 2025 GMT
            Not After : Feb  1 12:00:43 2025 GMT
        Subject: CN=d00b12eb707b5a8ed4a83626390d7b01fd4a5df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0c:24:dc:c9:cc:17:f5:16:ee:19:47:0b:16:
                    d8:a0:3b:0f:d3:32:68:2b:00:fa:76:e8:76:0f:00:
                    5f:de:27:c1:08:ff:5d:f4:67:5a:d5:67:da:95:c9:
                    a0:e9:85:e5:22:d8:b8:a9:b2:19:b9:91:24:62:9f:
                    27:f0:5b:ac:28:85:3e:ea:35:07:c1:61:41:7e:99:
                    ab:0a:78:49:41:55:c0:54:3c:df:80:b0:70:a6:e5:
                    94:4d:0c:2e:5b:7c:68:4a:b7:32:5d:96:2f:3b:47:
                    f0:21:30:e7:2b:cd:c4:2a:ba:a5:db:e7:57:c5:20:
                    60:03:a6:04:d1:c9:20:ca:b6:fb:38:bc:19:17:5d:
                    ff:b9:0f:b0:bd:16:ad:e7:fd:4c:02:71:c0:5d:ba:
                    ac:13:cc:73:c6:a6:71:18:1d:c0:1d:57:a1:a7:41:
                    65:85:db:a8:e6:c8:be:e4:f1:62:be:03:74:37:5c:
                    ec:fa:9d:d9:e1:64:3e:ac:ee:46:09:d9:58:83:92:
                    89:8a:a5:69:20:21:fd:21:b4:45:7f:cd:7a:7f:f9:
                    d6:0a:34:69:d6:2d:18:95:26:a8:ad:2e:bb:c4:bc:
                    66:89:dc:8b:ee:fa:17:b1:45:b2:b7:bb:6a:7b:26:
                    84:1e:a3:ac:dc:99:90:3d:0c:ee:1b:f1:e8:97:3f:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0B:12:EB:70:7B:5A:8E:D4:A8:36:26:39:0D:7B:01:FD:4A:5D:F2
            X509v3 Authority Key Identifier:
                keyid:2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f1:fc:38:60:b0:89:b2:c7:1c:93:d6:71:71:a9:fd:f8:cf:
         8f:a4:44:2b:72:60:68:dc:44:7f:4a:d5:e7:aa:bd:db:2c:25:
         8d:d2:9c:a0:b0:28:c8:ee:ab:c6:a4:c5:04:9a:da:50:59:af:
         fe:4f:5e:bd:26:93:3c:58:69:d0:5a:d7:b3:66:54:04:05:aa:
         43:58:ff:54:77:2d:8d:09:91:39:d5:87:95:2a:e5:6d:78:d9:
         59:c3:e1:e8:11:b7:d1:fd:d9:e6:18:86:ba:67:39:db:36:26:
         ed:dd:5f:62:12:ad:13:07:2f:be:c8:ee:5c:92:7c:91:d3:58:
         9f:da:f5:5a:e3:03:46:5c:b0:12:b0:c4:d3:b1:02:0a:e8:ca:
         37:08:5c:41:9a:0d:7a:3c:36:32:cf:ca:6d:82:44:87:28:bb:
         76:79:13:79:d2:03:1a:9f:86:80:66:7c:3d:42:62:74:06:7c:
         85:64:00:c1:fe:74:22:df:71:1b:12:56:e8:1a:f1:bd:db:c9:
         e8:d9:64:61:cb:36:de:52:5a:82:58:7b:95:c4:58:17:2c:b9:
         e3:1e:ce:4a:76:f6:0c:df:43:29:e5:9d:e4:7e:07:3c:4a:9b:
         bd:48:7f:a5:9a:9c:ac:bb:18:a8:d3:ee:7f:a9:2c:73:b7:73:
         e1:8d:1b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:33 2025 by rpki-client