Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
File:                     0z3ubd_dv6ge6rxEHFPnAvklgWU.mft (raw, json)
Hash identifier:          BWnUPas6sgzP2OmHMyPW9KoBMcy/6PoZqos6a2rsyCU=
Subject key identifier:   E9:82:59:23:AE:9D:B4:29:F7:10:8B:3A:7F:45:D8:83:D5:6F:D2:14
Authority key identifier: D3:3D:EE:6D:DF:DD:BF:A8:1E:EA:BC:44:1C:53:E7:02:F9:25:81:65
Certificate issuer:       /CN=d33dee6ddfddbfa81eeabc441c53e702f9258165
Certificate serial:       0194BC72FCA516EFCCBD35B7D4A49A170F65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
Manifest number:          11EC
Signing time:             Fri 31 Jan 2025 13:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:39 +0000
Files and hashes:         1: 0z3ubd_dv6ge6rxEHFPnAvklgWU.crl (hash: re1O+5T6kRl7PQtQLMOwd2JB6nTf1ZrboKXXqHQhci8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:fc:a5:16:ef:cc:bd:35:b7:d4:a4:9a:17:0f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33dee6ddfddbfa81eeabc441c53e702f9258165
        Validity
            Not Before: Jan 31 13:00:39 2025 GMT
            Not After : Feb  1 13:00:39 2025 GMT
        Subject: CN=e9825923ae9db429f7108b3a7f45d883d56fd214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0d:06:bc:ca:b9:9a:86:1e:f5:9f:cb:37:d8:
                    73:33:27:85:97:78:47:5e:82:85:55:5f:72:67:3c:
                    16:98:9b:bf:ee:be:cd:06:83:2f:f4:92:77:d6:c7:
                    3f:b5:0d:6e:5d:05:f0:bd:72:84:1a:d9:13:44:0a:
                    76:73:42:b5:bc:17:df:86:67:35:88:30:ac:5d:29:
                    1b:04:e8:32:6c:1f:4a:98:76:86:88:b0:04:8e:dc:
                    80:e0:74:e5:ee:2d:27:3c:6b:54:f2:47:ad:fa:77:
                    8e:77:4f:4d:3f:79:55:66:41:92:9a:77:11:b6:b6:
                    ca:5d:ae:a4:10:69:a1:2f:3c:db:96:34:df:f0:e7:
                    e0:d9:d8:16:ea:95:2c:8a:94:c1:69:e3:b5:1c:6a:
                    0c:04:22:48:3d:69:20:6b:e0:45:b1:25:07:f7:20:
                    43:fd:b9:cf:25:6b:76:d8:73:32:b4:97:87:60:16:
                    c0:85:48:ed:ed:59:ce:e8:70:3a:55:91:f6:93:d4:
                    7a:aa:18:73:6a:ba:a9:ab:3a:ac:6b:e0:37:a2:64:
                    a7:88:21:40:40:55:33:96:3f:d1:04:31:a0:cd:f2:
                    cf:19:61:43:79:85:89:62:14:c5:5d:65:71:51:e6:
                    c1:7f:14:72:20:f7:66:98:c0:9d:65:7d:c6:25:79:
                    ac:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:82:59:23:AE:9D:B4:29:F7:10:8B:3A:7F:45:D8:83:D5:6F:D2:14
            X509v3 Authority Key Identifier:
                keyid:D3:3D:EE:6D:DF:DD:BF:A8:1E:EA:BC:44:1C:53:E7:02:F9:25:81:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:42:12:5d:cc:e4:26:a6:54:03:9c:42:13:b4:93:0b:8e:be:
         77:3d:d6:e6:11:55:75:fc:d0:4d:41:57:21:99:82:2e:7e:d9:
         3d:77:e7:2b:37:52:d4:83:41:ed:a8:e2:54:61:a4:35:38:8e:
         39:8a:80:f5:4a:6d:dc:27:74:60:9e:f6:23:4b:32:19:29:76:
         1d:11:87:db:70:d8:40:d8:0a:f6:ca:94:31:57:8e:9d:50:5a:
         e2:0c:a0:b1:78:5d:a4:04:84:28:97:1a:ab:0c:b9:dd:87:6f:
         41:97:0f:03:8e:2a:3b:fb:52:71:b5:6c:67:ef:6b:ee:41:a4:
         f5:38:eb:7b:2b:62:f8:b7:cc:37:bd:54:ff:23:73:72:01:60:
         fc:b0:c6:e3:6a:2d:9b:9d:86:ed:10:f2:44:1a:2a:7d:4f:7b:
         fe:84:47:7d:fd:4c:f7:16:24:2c:3d:29:73:a1:48:e1:f6:b5:
         e3:da:84:b5:d9:d0:45:de:ad:4f:17:21:be:4c:ac:4c:4b:66:
         2d:f8:e0:40:cf:39:dd:b0:e7:d4:14:23:bb:b5:17:0e:e4:3f:
         e3:02:8f:f4:54:32:13:83:ad:92:79:2c:89:0a:4f:a3:b8:f4:
         9e:36:3c:59:4f:ab:28:94:97:41:ec:fa:be:58:db:cf:a7:e0:
         46:1e:08:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:55 2025 by rpki-client