Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
File:                     sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft (raw, json)
Hash identifier:          ycpp/FsdhwRgXlewcgp0qXSKzXPXiu9w5g6VMFqtD0c=
Subject key identifier:   E0:1F:13:28:A5:92:7B:C7:78:F2:C7:50:0B:34:13:3D:76:15:72:7E
Authority key identifier: B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
Certificate issuer:       /CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Certificate serial:       0194BBCDD676349F3A2089FFCBBFDF43F2D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
Manifest number:          0B39
Signing time:             Fri 31 Jan 2025 10:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:16 +0000
Files and hashes:         1: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl (hash: ntjZeN1RC2/AjxGaNR4e/r1Ufsenk6GsVaeWbZL2wSs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:d6:76:34:9f:3a:20:89:ff:cb:bf:df:43:f2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
        Validity
            Not Before: Jan 31 10:00:16 2025 GMT
            Not After : Feb  1 10:00:16 2025 GMT
        Subject: CN=e01f1328a5927bc778f2c7500b34133d7615727e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1a:04:c9:7b:73:1c:f2:49:5a:e3:5d:7a:ad:
                    c7:1d:6b:03:bf:6b:b2:54:76:b2:17:2b:c3:5c:64:
                    a1:81:33:22:ec:85:ba:f1:42:9a:a0:bf:c7:26:2c:
                    fc:62:4e:d1:20:a9:22:2d:1e:d8:47:98:c2:19:02:
                    7b:94:a7:b2:a0:36:7e:67:f9:63:1c:44:1b:df:36:
                    50:28:71:93:c2:d2:a1:30:ca:a5:e4:af:ca:bb:bd:
                    a1:8e:d3:c2:4b:f2:51:09:c6:0f:8a:30:42:de:25:
                    15:52:b8:96:cd:8f:2e:cf:6e:3e:4f:1c:cf:58:0d:
                    49:e4:37:27:12:3a:f1:d3:22:fe:4b:40:ba:c5:91:
                    84:49:e1:45:67:57:91:52:df:38:ac:33:90:8a:b6:
                    19:9f:4a:66:9f:66:f2:65:1b:5b:4d:96:7c:19:17:
                    fa:e9:9d:d5:24:97:c1:ff:c1:05:11:d8:bc:66:2b:
                    37:80:e4:e3:9d:82:b9:82:eb:85:a6:5d:ad:82:cd:
                    18:35:d1:ce:5f:79:03:87:d6:a7:5f:05:e3:62:37:
                    d6:78:c0:7f:57:1c:3e:26:11:43:ca:25:20:a7:92:
                    b7:45:2e:a7:ba:c7:93:08:c6:da:99:b6:02:36:12:
                    4a:59:3a:7f:5f:79:7b:09:ab:c2:f6:08:ab:0a:b6:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1F:13:28:A5:92:7B:C7:78:F2:C7:50:0B:34:13:3D:76:15:72:7E
            X509v3 Authority Key Identifier:
                keyid:B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3c:e8:f7:f8:5e:6c:94:ff:d7:7c:f5:4b:5b:03:e8:57:e1:
         5d:13:ce:3d:05:11:7b:cc:e0:d8:ea:36:a7:55:61:9c:4f:72:
         3d:3b:f5:dd:3e:14:8f:1d:ca:25:d3:ee:70:22:4b:0a:bd:3f:
         59:df:09:d4:0b:e4:b3:35:8e:10:3a:28:32:92:2c:92:f8:9c:
         90:d3:8d:34:66:a5:fb:8b:3f:eb:fe:10:21:42:03:ec:f5:5c:
         a2:fc:16:bb:ca:bf:f4:84:55:0f:ae:6a:05:5b:86:d4:6b:bb:
         39:52:65:56:75:16:74:dc:24:61:6e:46:e5:a9:3b:62:79:af:
         11:ef:bb:2b:4d:7d:a3:5d:a9:94:59:31:23:d7:d0:8c:e3:88:
         e5:1b:f9:dc:94:29:31:9a:df:d3:d1:c8:56:87:a4:0a:aa:d0:
         6c:0c:85:f3:63:91:b6:50:02:cc:6f:81:82:4c:3b:01:13:c2:
         31:2f:e4:f7:a2:f3:76:bc:40:ee:eb:30:d0:da:19:01:93:39:
         34:bd:bc:f9:dd:24:fa:f3:78:53:47:2a:9c:a6:45:8e:6b:db:
         15:e8:5e:8a:21:d7:f0:d4:c5:e0:ec:99:80:98:83:0f:a8:bd:
         b6:46:c5:e1:10:00:50:25:63:7e:e8:17:0f:0c:9a:a4:b0:05:
         03:3f:c2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:30 2025 by rpki-client