Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File:                     2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier:          Talb6uA6cUS9qH8eI8T2oc8XoDACNx8H9AuSvR9/Bs0=
Subject key identifier:   A9:BC:5B:56:52:AF:10:2D:74:F5:DE:F4:62:1A:A0:8F:71:9D:67:77
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer:       /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial:       0194BBCE1F756C08CBF7C7EAD15FF602BEF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number:          121A
Signing time:             Fri 31 Jan 2025 10:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:35 +0000
Files and hashes:         1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: 7ExqaktonIA2wP/1DIkTawcvrE5mEE2L6jqmBrhnbUk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:1f:75:6c:08:cb:f7:c7:ea:d1:5f:f6:02:be:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
        Validity
            Not Before: Jan 31 10:00:35 2025 GMT
            Not After : Feb  1 10:00:35 2025 GMT
        Subject: CN=a9bc5b5652af102d74f5def4621aa08f719d6777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7b:ac:c0:35:8f:37:6b:6a:47:30:65:da:e5:
                    03:f6:18:56:21:e7:08:76:0e:b5:a6:f5:bc:70:d2:
                    a0:99:25:d4:71:cd:21:ab:32:01:44:95:dc:e2:43:
                    83:21:45:2c:68:9f:45:fe:e4:47:9b:ca:bf:3a:f0:
                    d2:62:c8:04:65:22:aa:c1:7a:0b:d7:36:98:98:56:
                    ae:44:93:60:5e:85:42:c8:c0:eb:66:f2:cf:7f:47:
                    77:b8:07:20:fa:2f:0f:25:31:5f:24:36:6c:f1:29:
                    10:e0:e9:00:86:d2:1b:6e:61:48:81:b9:01:1a:9a:
                    8a:8f:21:45:9a:af:d1:96:0f:16:a3:24:10:1d:aa:
                    cd:62:0b:0f:2a:54:17:e6:01:ec:96:e2:9f:5b:f1:
                    e3:17:25:d4:b0:71:1e:a8:9a:54:d9:87:9f:6c:b4:
                    8d:9b:7c:97:da:59:66:de:ce:8b:db:64:0d:09:8b:
                    ce:75:31:21:8f:d9:f4:2b:3f:58:17:fd:a3:79:74:
                    89:eb:b9:d6:a1:a0:cb:3c:ce:3b:e1:83:e6:91:e3:
                    49:a2:57:5b:34:83:4a:f5:e1:b2:ad:6d:9b:46:99:
                    ff:12:aa:36:e6:76:3d:e4:1d:0d:c4:d2:20:09:6c:
                    07:85:5f:0c:fe:ca:f6:1f:5e:39:69:38:dc:20:b9:
                    50:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BC:5B:56:52:AF:10:2D:74:F5:DE:F4:62:1A:A0:8F:71:9D:67:77
            X509v3 Authority Key Identifier:
                keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:26:d6:10:d0:d8:cc:db:87:df:d0:44:07:11:a7:66:8f:44:
         97:7c:61:16:e0:ba:b3:ae:47:77:52:48:4d:72:cf:b5:d1:25:
         af:08:df:c3:73:c5:eb:79:e4:d1:5f:16:82:d5:29:a4:25:d6:
         5d:9b:63:35:4d:a6:1d:c4:0b:ba:5f:e8:99:8b:2c:f2:9a:6e:
         ea:7a:cd:8d:a4:fa:ec:05:d6:66:6c:29:6c:56:fe:04:17:e7:
         f8:17:37:da:41:47:cc:4c:3a:49:64:d3:78:03:48:b3:98:80:
         52:6a:c9:42:86:02:d9:a3:c6:0b:1f:e4:2b:17:3a:fd:1e:23:
         ef:45:e0:1f:59:a3:15:d0:70:1c:7e:2a:c1:4e:3f:65:c1:ac:
         08:75:19:c9:c5:8f:b8:ff:45:09:3e:2b:a9:85:3c:1d:0e:85:
         64:ee:2a:1a:7a:1f:52:16:e7:cd:2d:d8:24:4e:f4:02:16:5e:
         a5:b1:ce:7f:06:4b:aa:77:83:d5:60:5e:fd:0d:85:f4:6e:53:
         f2:81:86:cf:9d:8f:a0:dc:4c:bd:37:2d:7c:f6:e7:3d:0d:3d:
         0b:5f:63:0d:57:b8:01:0d:07:cc:bd:39:f9:6a:d9:b4:af:c0:
         1a:3e:f2:7b:ad:b1:6e:7d:d6:95:2f:81:8e:15:47:db:59:17:
         25:dd:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:25 2025 by rpki-client