Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
File:                     dI6Zox81gkAKtd-nd8YNFqyu3bM.mft (raw, json)
Hash identifier:          bR2pf6E8aWMKalFoSsDytUhHi3kPQbDcqkGLsh1e3R0=
Subject key identifier:   0A:8F:0C:8A:56:B1:1F:F2:83:4A:8A:AA:69:D4:7F:A3:CD:B6:70:0A
Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
Certificate issuer:       /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Certificate serial:       0194BBCE0A7BE82A19D9367439AC8E99200F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
Manifest number:          05F5
Signing time:             Fri 31 Jan 2025 10:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:29 +0000
Files and hashes:         1: dI6Zox81gkAKtd-nd8YNFqyu3bM.crl (hash: xFGj+aw/oaylfAQZxG+zihAVbq32F7+TU5I/vGW4Iyw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:0a:7b:e8:2a:19:d9:36:74:39:ac:8e:99:20:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
        Validity
            Not Before: Jan 31 10:00:29 2025 GMT
            Not After : Feb  1 10:00:29 2025 GMT
        Subject: CN=0a8f0c8a56b11ff2834a8aaa69d47fa3cdb6700a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2a:78:3d:7a:18:64:fa:06:2c:3a:d6:aa:e7:
                    ca:ac:76:61:f0:8b:cc:be:9e:61:82:c5:bd:03:69:
                    8a:b8:f4:68:4b:a8:10:dd:ee:94:39:53:f6:72:21:
                    58:c7:76:c8:2e:99:ab:2b:3d:85:50:db:74:b1:5a:
                    90:9f:ff:40:da:2c:6a:07:08:d2:35:dc:cb:44:91:
                    5f:6b:1a:35:f4:2f:48:71:d5:96:1a:83:d4:2c:f7:
                    6d:38:ec:be:1d:31:b7:49:4a:06:4c:93:ca:d2:f8:
                    7e:99:b7:9e:8a:49:b6:6f:54:2e:28:9a:d1:a1:db:
                    e2:43:15:cc:74:74:70:c8:f8:1e:69:0b:b3:ee:83:
                    40:60:2e:b9:bd:5a:41:b1:9a:f9:9f:1e:f4:d4:c4:
                    3c:a4:c0:3d:b2:b7:a6:f0:9c:67:cb:a8:81:42:3f:
                    91:e8:fa:cc:f4:5d:e2:3a:89:4a:7c:29:85:b5:af:
                    33:0a:3c:96:b2:c8:19:5d:45:f2:b4:f5:02:81:7e:
                    3a:47:c3:44:fa:58:85:43:6f:6b:d0:f2:5a:7b:76:
                    e0:f5:f4:13:32:61:30:2e:e7:96:96:1e:a1:a1:07:
                    cb:9d:53:a8:67:f1:a3:48:18:c0:ab:a4:b5:e3:cf:
                    36:71:f8:34:42:e7:7b:b9:92:17:84:a6:da:4e:38:
                    3b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8F:0C:8A:56:B1:1F:F2:83:4A:8A:AA:69:D4:7F:A3:CD:B6:70:0A
            X509v3 Authority Key Identifier:
                keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:bd:94:f4:a6:68:a4:3b:23:d2:59:0a:64:b5:56:54:ee:06:
         07:ff:db:fd:94:34:cd:e6:32:2f:4a:00:51:dc:9f:89:69:f4:
         b4:f1:fe:c6:da:55:27:18:5b:01:d9:33:f5:7a:05:e3:fb:e6:
         88:28:47:f0:38:32:09:64:45:7d:20:47:7b:ed:db:aa:88:67:
         e0:1d:0a:01:5d:01:e4:f3:d6:0d:94:c3:5b:70:5f:1e:94:5d:
         0e:18:c1:f4:4b:fe:4d:04:be:74:90:49:db:1d:58:7a:ed:88:
         a3:3e:ce:4f:ac:59:00:9b:a1:0e:24:72:29:9a:34:37:26:4d:
         19:20:08:55:b1:13:75:43:8c:e9:e0:b6:ba:cf:d7:86:75:cd:
         70:99:c5:29:24:c3:28:38:e4:21:56:c4:43:62:de:b9:16:f8:
         19:c2:a3:09:a3:a4:08:6b:2c:83:b8:83:1d:6f:84:b0:0e:b4:
         d1:0a:6e:1e:92:2f:e6:85:2f:80:e2:0a:40:0f:e6:e8:f3:47:
         56:cf:ac:08:c9:35:35:df:24:ad:45:b2:63:ef:89:f9:cd:0a:
         d5:63:b7:f0:eb:07:89:ea:ee:dc:2b:ca:99:e9:61:61:ab:a7:
         b5:a9:06:37:f1:0d:10:42:cb:9c:39:bf:b7:44:99:4c:1e:c9:
         f8:b0:41:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:26 2025 by rpki-client