Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
File:                     n2fgyFot61Rm6r3JCEYViph3hKI.mft (raw, json)
Hash identifier:          ckrebjEKZJljFc6Y5lLhx6L1fbhBMR8vAUAJpJ2V2Ek=
Subject key identifier:   12:4E:16:06:B5:58:3B:1F:D5:54:16:4C:0E:33:63:C1:C5:A0:79:FE
Authority key identifier: 9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
Certificate issuer:       /CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Certificate serial:       0194BD18051EAF7384EAA5ACF67E9C15C9F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
Manifest number:          11EE
Signing time:             Fri 31 Jan 2025 16:00:55 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:55 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:55 +0000
Files and hashes:         1: n2fgyFot61Rm6r3JCEYViph3hKI.crl (hash: c/7BqO+L3WEIH5Gm+GCDO0xdOlwWIgb/pAhvwatM75A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:18:05:1e:af:73:84:ea:a5:ac:f6:7e:9c:15:c9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f67e0c85a2deb5466eabdc90846158a987784a2
        Validity
            Not Before: Jan 31 16:00:55 2025 GMT
            Not After : Feb  1 16:00:55 2025 GMT
        Subject: CN=124e1606b5583b1fd554164c0e3363c1c5a079fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:40:47:87:13:b2:81:40:42:cd:42:dd:4b:38:
                    a4:81:72:94:f5:87:02:8c:e2:80:a2:8c:2b:72:4b:
                    f7:7e:54:43:33:57:aa:f2:33:f4:d2:d5:82:ca:98:
                    e0:11:b6:98:88:94:e0:67:eb:d0:0e:85:b7:57:fc:
                    9b:43:da:02:ae:62:29:bd:00:dd:a0:02:c2:28:35:
                    79:de:9a:e1:01:a2:6b:0f:92:ba:40:b1:21:6d:95:
                    d1:0a:f6:d6:3e:1d:eb:86:19:87:6c:2a:db:17:44:
                    87:2b:fe:11:db:82:3b:e9:4a:b8:d0:08:03:d5:0e:
                    d8:9a:a6:96:2c:60:64:03:65:dc:84:3c:42:6b:f1:
                    33:74:3e:21:a6:75:2f:94:e4:6e:d0:2a:b7:6c:47:
                    6a:ad:05:22:07:eb:0e:6a:75:3d:8b:36:02:34:07:
                    cd:aa:2a:61:44:c1:c0:b1:17:36:bf:35:2a:8d:90:
                    a6:9f:83:66:9a:7f:fe:d1:df:eb:87:af:27:57:14:
                    a6:ba:4d:a0:27:8e:23:b1:06:1a:0d:4f:f0:34:34:
                    1c:5d:2c:27:3b:19:84:ab:cc:28:16:d2:e1:d9:83:
                    02:9b:b0:4d:bf:41:77:32:cd:4c:9d:9c:a1:00:08:
                    43:e5:5f:ee:da:25:26:e0:f9:92:c0:ac:80:f4:86:
                    f2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4E:16:06:B5:58:3B:1F:D5:54:16:4C:0E:33:63:C1:C5:A0:79:FE
            X509v3 Authority Key Identifier:
                keyid:9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:40:3d:be:98:16:55:0e:5d:87:60:b4:7f:de:d6:1b:56:1c:
         4a:cb:ce:97:eb:04:07:15:6c:3c:d3:45:5d:e2:1f:e0:81:a0:
         8e:ed:aa:ab:03:b7:19:9a:cf:15:64:24:86:6f:99:98:2e:4c:
         ce:c5:e7:38:46:68:ad:7c:d1:c5:e3:4d:92:49:12:7d:38:8b:
         9b:7e:58:c8:72:da:29:13:5a:b3:5a:5f:de:46:1d:45:77:e1:
         91:64:aa:cb:1c:59:69:a7:bf:aa:9d:47:88:b0:09:6e:72:ff:
         b7:20:90:d7:ec:c6:e5:5a:f6:c9:3d:8d:25:61:fb:5b:ac:d5:
         95:c0:e9:d0:34:f8:76:0c:a8:d2:a7:9b:c3:96:20:76:bb:d1:
         9a:1b:c4:dd:a0:d7:16:ce:55:fa:8f:a6:c1:d3:77:5c:23:38:
         b9:f4:70:ce:58:b4:a5:88:f3:19:23:a1:6b:a8:e2:08:0a:e9:
         45:40:06:73:a0:67:ea:bd:e5:b1:63:03:28:cc:93:11:20:61:
         b7:3c:23:db:62:09:54:6a:e9:fb:bb:45:be:80:6c:9c:e8:f9:
         67:12:21:aa:da:13:e0:89:5c:55:26:d0:ea:c2:ab:b4:0d:ec:
         58:f7:fe:d1:ed:9f:a0:39:2b:fa:c4:56:c8:d6:da:e5:e8:00:
         f5:fc:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:59 2025 by rpki-client