Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
File:                     btAxXocokhqZ_GNGtM6PELXbhnw.mft (raw, json)
Hash identifier:          b4oXPrVeBgtT4Xbjkwkk8LAoiS0wbF/AA2F6BIcfl54=
Subject key identifier:   58:84:28:36:AA:CD:E2:4C:BA:15:4C:A4:68:4E:76:55:7C:18:D1:2E
Authority key identifier: 6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C
Certificate issuer:       /CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
Certificate serial:       0194BBCE85C2598D43F58517A1102C8BBD47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
Manifest number:          0A6A
Signing time:             Fri 31 Jan 2025 10:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:01 +0000
Files and hashes:         1: btAxXocokhqZ_GNGtM6PELXbhnw.crl (hash: qilI0LbsiAJNb1hI896qrr/lma08mFf15++ELnD3Vx8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:85:c2:59:8d:43:f5:85:17:a1:10:2c:8b:bd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
        Validity
            Not Before: Jan 31 10:01:01 2025 GMT
            Not After : Feb  1 10:01:01 2025 GMT
        Subject: CN=58842836aacde24cba154ca4684e76557c18d12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0a:46:82:dd:9c:09:ad:03:1a:27:76:5a:48:
                    a6:08:54:b1:d0:3b:8b:e6:bf:5c:bf:55:ae:51:dd:
                    d0:67:d6:39:57:15:97:f7:ec:e5:1a:9a:f2:1f:3f:
                    f1:a1:96:aa:7a:d0:09:9f:32:c9:35:36:f9:dc:a1:
                    21:ca:43:96:62:20:91:25:1f:04:af:1b:98:5d:75:
                    7e:8f:cc:90:c8:e9:90:81:2f:9d:95:61:bd:20:f4:
                    b6:04:61:4f:ba:9e:22:1c:3a:b0:0d:5e:8a:da:08:
                    06:f6:29:de:f1:41:1b:b3:f1:db:62:cb:0e:bc:ce:
                    6c:d2:6a:82:85:e0:df:b7:b6:de:d2:ec:46:4a:a1:
                    b8:4c:ec:2e:b5:b9:c7:9b:37:93:81:20:d9:1c:b2:
                    26:2d:38:2d:4d:c8:b5:67:51:15:62:c0:be:62:00:
                    fe:23:0d:f2:bd:d4:1d:20:46:8f:2c:b8:f0:92:a7:
                    3e:b9:4f:8a:1f:b6:29:d2:68:66:d3:e6:3a:94:58:
                    44:21:28:bb:10:3d:7f:41:11:92:3b:12:f1:d4:b2:
                    26:fb:95:f4:7b:e4:f1:dd:be:78:cc:3a:c3:09:65:
                    0e:0e:9a:82:35:fc:32:3e:4c:d7:5e:9c:20:ed:4c:
                    8e:b1:5d:2f:ed:48:da:0a:e3:44:84:ef:48:a9:a4:
                    4b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:84:28:36:AA:CD:E2:4C:BA:15:4C:A4:68:4E:76:55:7C:18:D1:2E
            X509v3 Authority Key Identifier:
                keyid:6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5a:8c:3d:57:0a:06:69:95:13:c3:b6:a1:db:58:45:54:d5:
         8b:44:ce:6e:79:59:62:42:28:16:71:65:97:53:59:2c:04:29:
         bf:be:61:6c:ca:5b:1a:72:d2:ad:d8:db:2b:b8:c6:d6:fa:c7:
         e3:b9:5c:88:79:79:87:53:e5:d8:f9:3c:f2:4d:93:c2:7c:8a:
         ee:d8:d5:33:31:58:0b:0e:0a:0a:c4:fe:0b:fd:b2:98:90:b4:
         67:1f:80:00:5c:36:3b:9f:85:7d:b8:13:04:59:99:bd:94:b5:
         41:99:22:a9:aa:cf:18:df:4f:f6:3b:ac:c1:6b:07:aa:80:84:
         0f:be:6c:56:f8:7c:55:de:f6:80:b5:44:54:28:4d:9b:4f:01:
         d4:be:4b:62:58:77:30:85:50:c6:91:fc:a5:42:e2:1d:f5:e7:
         fc:14:71:51:a7:61:76:d2:48:ef:84:3f:37:f3:8f:c1:2a:8d:
         11:9d:ae:86:12:7e:30:47:9f:a6:66:99:bc:6a:25:16:28:4b:
         4f:ed:d8:98:ca:f8:f9:c7:ba:fc:a5:60:cb:2a:cc:ec:59:70:
         fb:60:b9:b9:4d:42:a1:c1:78:46:71:cb:55:66:08:df:99:0e:
         ff:56:86:c3:26:c9:4c:74:df:3b:3f:7d:97:b7:c3:63:25:f5:
         ac:7b:4d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:36 2025 by rpki-client