Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
File:                     L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft (raw, json)
Hash identifier:          zgn6H9jajbhjpXL0iS/eSGpMwgv0dR1oI1aW5Wjmpgk=
Subject key identifier:   DC:EE:92:52:0F:F8:A6:B7:B7:97:AA:0D:F7:D1:77:F1:BE:53:BD:A6
Authority key identifier: 2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A
Certificate issuer:       /CN=2f64716b186be1145822e1c70764fab61fb13c6a
Certificate serial:       0194BBCE86D123BC9CADAA06665AE30368A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft
Manifest number:          0673
Signing time:             Fri 31 Jan 2025 10:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:01 +0000
Files and hashes:         1: L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl (hash: zS1R6hPMsvCCG+Y3lTMa5pGXrO9fblFoNWag6pIUg0I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:86:d1:23:bc:9c:ad:aa:06:66:5a:e3:03:68:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f64716b186be1145822e1c70764fab61fb13c6a
        Validity
            Not Before: Jan 31 10:01:01 2025 GMT
            Not After : Feb  1 10:01:01 2025 GMT
        Subject: CN=dcee92520ff8a6b7b797aa0df7d177f1be53bda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:7a:a7:64:10:d4:79:e7:0a:f6:ea:c7:6c:
                    c0:68:1e:82:f3:cc:08:6f:ec:95:86:76:83:c4:4c:
                    1d:fd:56:a5:83:eb:20:cb:af:a1:1b:ef:05:94:d5:
                    87:09:e8:c8:77:3d:a4:20:06:7a:de:a8:63:b6:d0:
                    cf:5a:7e:30:eb:8c:11:d4:95:52:74:9f:28:ff:e3:
                    59:a6:30:2c:bb:11:4f:5c:84:c4:38:b6:7d:e2:d8:
                    21:d5:bb:0e:3f:9f:73:8c:76:09:c4:dd:e6:2f:c8:
                    ac:d5:54:50:1b:b4:87:9e:a6:50:fc:c0:b7:af:47:
                    eb:d6:b7:72:ec:bd:f4:0b:e9:c7:91:75:b0:dc:1f:
                    20:13:56:d2:c9:9b:11:c1:1f:64:e8:6e:5c:01:48:
                    1b:2f:9b:df:92:12:98:f7:55:8d:25:08:65:83:29:
                    f5:de:47:01:cf:79:2e:6a:f5:a1:d5:51:2c:13:7b:
                    83:55:95:a2:01:c2:99:96:57:e0:9d:57:47:83:54:
                    3e:db:6c:a2:d4:30:8c:81:32:60:4a:57:b7:0d:d8:
                    d1:5c:d7:c3:4c:97:7d:93:5b:db:92:73:fd:1a:62:
                    a4:98:3b:a2:9b:e1:2b:5c:3f:b1:19:8a:12:34:82:
                    f2:11:04:4f:ce:fa:57:f3:ec:eb:eb:f2:bb:bd:55:
                    47:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EE:92:52:0F:F8:A6:B7:B7:97:AA:0D:F7:D1:77:F1:BE:53:BD:A6
            X509v3 Authority Key Identifier:
                keyid:2F:64:71:6B:18:6B:E1:14:58:22:E1:C7:07:64:FA:B6:1F:B1:3C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2Rxaxhr4RRYIuHHB2T6th-xPGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/eb0c10-ab2e-4c1a-816e-5490d7087ed2/1/L2Rxaxhr4RRYIuHHB2T6th-xPGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0b:04:be:64:ac:00:ca:63:62:03:cf:a3:f6:52:c5:84:61:
         0e:2d:31:b8:76:a9:5c:1c:9c:76:93:c2:50:9d:32:3d:81:e5:
         fa:74:fe:87:c1:9f:0b:ac:45:87:a9:25:f3:4f:5f:f3:a4:bf:
         7d:7a:38:d2:b5:c6:be:d8:3a:ae:a4:19:93:6e:08:7e:e0:55:
         a8:08:aa:87:d6:68:f0:11:2a:77:39:24:1a:ee:73:0f:b7:0a:
         45:cb:38:ad:b2:81:6e:4c:7a:58:6f:80:71:db:19:6c:13:00:
         4d:b5:bd:87:08:33:f3:7c:72:b0:5d:b7:16:1b:1d:94:ef:d7:
         58:73:5d:87:e8:85:79:6c:ae:a8:09:37:80:e0:92:22:21:4b:
         c9:da:77:50:72:f7:5d:89:8e:48:43:a3:bd:89:35:08:15:c9:
         4f:68:37:dd:cc:6b:74:95:75:fe:41:ca:fe:4d:23:f3:9e:09:
         6e:6d:16:91:f8:b2:b1:36:ab:63:c4:88:b1:34:29:7c:b3:a5:
         2b:57:be:99:10:be:06:a2:0f:f5:b0:6a:15:74:45:63:a9:6a:
         d2:86:4a:4a:f4:da:8b:0c:d1:fd:0a:8c:d3:22:8b:83:90:9f:
         d9:d0:9e:da:30:52:49:85:8d:91:de:b5:d2:b5:5e:3a:09:e4:
         1a:c6:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:38 2025 by rpki-client