Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
File:                     aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft (raw, json)
Hash identifier:          7k2wJ+G6qrkORHYRXTsaewAqPLAJLyb95V9YtHUdwk0=
Subject key identifier:   70:48:91:2C:F7:11:E6:30:74:36:30:1D:84:91:3C:D4:E0:27:32:B4
Authority key identifier: 69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3
Certificate issuer:       /CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
Certificate serial:       0194BBCEE116F65750E85D9BFF3DBFCCC631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
Manifest number:          107A
Signing time:             Fri 31 Jan 2025 10:01:24 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:24 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:24 +0000
Files and hashes:         1: aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl (hash: 8Kgf3clSZbsw3GRJs6VCUN3BJl5v2JXbs7HKnFE4OJ4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:e1:16:f6:57:50:e8:5d:9b:ff:3d:bf:cc:c6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
        Validity
            Not Before: Jan 31 10:01:24 2025 GMT
            Not After : Feb  1 10:01:24 2025 GMT
        Subject: CN=7048912cf711e6307436301d84913cd4e02732b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:af:a6:fb:33:51:06:e6:34:61:e0:10:fc:
                    01:43:fb:f1:00:a3:be:78:3b:fc:5a:a6:3b:c7:74:
                    4a:6e:7b:3f:de:b3:e4:30:4b:f8:1c:82:6a:63:da:
                    df:b2:b9:43:fd:c9:80:f6:74:cd:10:63:77:e4:f0:
                    1e:7c:ce:4e:41:d0:33:7e:18:b8:bf:36:05:4b:b3:
                    f4:d8:a5:00:f4:95:27:78:11:0a:7e:12:fe:04:05:
                    b2:5e:b2:fe:97:a6:ce:86:0a:0f:40:12:91:20:eb:
                    8f:58:4a:c7:79:8b:8b:58:a0:d9:7e:ec:df:8c:bb:
                    74:44:c2:6c:19:c6:71:b3:87:b3:0e:e3:f2:86:9c:
                    42:e1:03:8a:5a:fa:96:4d:d0:12:f4:99:88:f5:21:
                    9a:09:5e:90:26:4d:f8:83:3b:2a:f7:19:6a:2a:80:
                    2d:5d:dd:88:8c:05:71:ed:3d:83:7b:87:32:7e:f9:
                    b7:ee:ea:64:0c:25:c9:d8:61:0d:35:c6:39:bc:6f:
                    e6:0d:cd:9a:6f:ec:ab:73:c8:3a:67:2e:b0:67:19:
                    18:8d:3b:64:a6:69:7d:74:cc:06:13:12:c5:dc:b8:
                    38:5a:ed:74:62:91:dd:8e:be:33:3e:e5:21:4d:d9:
                    57:eb:49:ed:13:fe:03:28:b0:7a:48:6b:0c:ff:b4:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:48:91:2C:F7:11:E6:30:74:36:30:1D:84:91:3C:D4:E0:27:32:B4
            X509v3 Authority Key Identifier:
                keyid:69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:38:de:87:97:93:88:ec:af:78:d5:c1:08:6e:fb:ff:4d:b9:
         66:58:66:5f:11:92:ea:9e:e1:8d:f6:36:a8:5b:43:cc:fa:de:
         79:48:bd:fe:cf:79:66:5e:52:b0:0d:d3:21:40:80:f3:a6:72:
         23:35:5e:06:9b:0a:59:37:b4:91:c3:47:83:fa:78:46:1f:54:
         2d:30:a5:72:41:0d:c3:dc:47:7b:30:e9:9b:1a:d8:d2:d3:00:
         f3:d2:ae:c2:75:64:6b:cd:03:d7:fb:d9:2f:d6:f0:59:c1:06:
         7e:bf:51:d1:e6:23:e3:b1:b2:4e:39:8d:d8:7d:ab:a6:08:cb:
         13:e7:35:13:66:b2:9a:ad:bc:d1:55:fb:d1:ef:62:fd:aa:31:
         73:4f:18:41:fb:62:ad:46:da:e7:f1:ca:0d:91:da:ab:36:04:
         c7:a6:25:70:59:08:c0:3c:a9:07:9c:eb:b0:10:bd:dc:a3:12:
         05:ac:b7:2d:23:f2:4b:62:57:73:df:9b:48:23:e2:8c:e9:39:
         55:ce:74:ce:8b:4e:a4:3b:9d:a2:e9:e2:46:0e:5e:e3:a4:ec:
         04:31:69:a0:e9:88:80:36:71:51:93:64:da:38:7a:d6:13:b1:
         ec:e7:82:15:b3:08:4f:19:32:65:bf:79:32:69:a2:f9:41:43:
         b0:59:6f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:17 2025 by rpki-client