Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
File:                     Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json)
Hash identifier:          a0AcmhgOUEPQ88J2m92D13ozTg+2hQtm1WgsBcToCYQ=
Subject key identifier:   D1:27:B6:2D:B0:A2:D9:8A:68:70:19:D4:34:22:79:AB:96:E7:F8:B6
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Certificate issuer:       /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial:       0194BD857688C39DF008CA359E5F84150056
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
Manifest number:          0134
Signing time:             Fri 31 Jan 2025 18:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:27 +0000
Files and hashes:         1: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: 6UlPjtjiedOnsGktANI5rfA0Be6otnqpF/EMHpCPH+M=)
                          2: Ln2JbGXgQ88O79Pg1zLA68Pqxy0.roa (hash: Mstyw2j7AKFxamlwfGacDBtId3D916+hLBKPld0IQWI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:76:88:c3:9d:f0:08:ca:35:9e:5f:84:15:00:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
        Validity
            Not Before: Jan 31 18:00:27 2025 GMT
            Not After : Feb  1 18:00:27 2025 GMT
        Subject: CN=d127b62db0a2d98a687019d4342279ab96e7f8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:73:04:b4:79:df:61:6f:dd:9e:fa:3d:40:56:
                    2d:f1:12:58:30:08:f0:73:6e:ec:bc:fa:11:37:44:
                    1e:86:6d:b1:8c:dc:2e:03:b9:4e:6f:e3:6e:2f:9e:
                    65:a7:03:71:a1:66:4b:8a:f7:4d:08:18:70:45:30:
                    7f:1a:11:65:26:1e:a0:d6:bf:a2:a5:d2:ec:a7:22:
                    ee:92:3c:d3:db:fb:d1:b7:9e:e1:44:d4:30:57:64:
                    35:62:67:1b:7c:21:e0:c0:40:5b:ad:6e:b2:0f:31:
                    be:83:9f:97:47:21:85:f6:1e:28:56:2d:cc:50:fe:
                    13:11:69:cd:81:49:77:c2:2c:ea:56:11:ed:18:73:
                    1e:10:79:2a:43:16:6c:c9:20:3d:58:1c:8a:f3:a9:
                    cd:1a:ea:1f:12:15:cc:38:d4:42:77:e0:40:63:ea:
                    01:b3:2c:f6:b2:83:11:75:9d:6f:ff:86:40:28:16:
                    3e:01:5a:55:41:05:32:8c:85:62:d8:cf:e9:49:e0:
                    4d:55:d9:e2:75:9b:75:38:6e:7b:08:cc:2b:5b:a1:
                    a9:9c:fe:9b:20:c5:e3:63:dc:6a:1d:ed:16:2c:2e:
                    1c:cb:97:3a:d7:ef:c2:91:2b:7a:2e:47:87:1a:d9:
                    d9:59:79:cd:fe:f9:13:a1:28:66:73:8e:08:d5:5b:
                    27:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:27:B6:2D:B0:A2:D9:8A:68:70:19:D4:34:22:79:AB:96:E7:F8:B6
            X509v3 Authority Key Identifier:
                keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ca:f4:8f:fe:f7:da:15:5d:c2:45:8d:8a:e2:68:1d:14:c4:
         34:a8:51:d3:5a:46:0a:b1:92:e1:c4:93:10:1a:d8:e5:94:56:
         34:42:7d:d4:46:ea:81:ef:4a:5d:13:58:3e:a4:a2:ef:45:f9:
         3e:53:1b:da:d2:11:33:24:84:9b:b1:3d:78:77:5d:67:ac:f2:
         6f:a6:09:5b:b2:a9:0c:1a:6c:52:66:ba:f2:6a:cd:4a:80:46:
         67:e2:06:f6:cc:8f:07:8f:1f:d6:a4:c7:e0:f0:19:bb:7a:b8:
         4c:8f:ce:44:11:94:b5:d2:d4:4c:a0:d3:28:33:bb:e7:78:a8:
         c3:f0:11:91:45:26:f4:03:ef:e6:e4:f3:c2:ab:68:2f:33:19:
         4f:0d:84:b3:c4:0a:d3:24:74:ca:bc:5c:b0:d4:72:a7:8d:47:
         01:19:8d:16:de:80:39:a1:32:39:e7:c0:11:2a:d7:da:5e:c3:
         20:eb:b3:28:ce:6f:c7:9f:c3:33:97:2a:82:0b:56:e7:f8:b3:
         8a:ce:00:08:e0:8e:b3:1a:00:12:81:8e:4f:6d:26:a0:6c:31:
         97:11:d5:23:10:e1:98:32:62:b9:16:0d:23:19:39:0c:38:7a:
         28:7e:c1:af:51:ff:9a:ae:f0:3c:55:aa:5f:2c:86:78:93:a4:
         05:a2:e7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:35 2025 by rpki-client