Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File:                     35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier:          //5oUujZTVacgAz24ckgu2rld2dinCc4jTSaDhCULVk=
Subject key identifier:   69:1B:8C:AE:89:95:96:64:7A:C2:FB:32:C8:0D:77:3B:D7:B4:9F:35
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer:       /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial:       0194BCA97DB31A869F2F737F34830906FE26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number:          0B34
Signing time:             Fri 31 Jan 2025 14:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:11 +0000
Files and hashes:         1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: 0YayochqZ5S5RXPenCWIDvCQz6NJpsLnjvXuQh2PShQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:7d:b3:1a:86:9f:2f:73:7f:34:83:09:06:fe:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
        Validity
            Not Before: Jan 31 14:00:11 2025 GMT
            Not After : Feb  1 14:00:11 2025 GMT
        Subject: CN=691b8cae899596647ac2fb32c80d773bd7b49f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:63:68:9a:23:f1:87:04:b2:52:0b:ff:75:
                    9c:88:bf:33:d8:85:ee:81:5e:38:44:de:37:eb:ef:
                    ab:12:5b:78:70:8d:f7:63:b7:2b:4d:c0:ca:2d:9e:
                    bf:eb:7b:92:52:a4:9a:c4:4f:1b:6c:96:91:14:93:
                    c8:aa:50:67:da:48:39:2c:18:c6:97:a4:4a:70:c4:
                    6a:0c:2b:42:53:80:36:eb:d8:ef:9f:68:8c:83:e7:
                    e1:15:c2:05:a3:4a:b7:21:ca:11:c4:39:e2:1e:c9:
                    1b:d5:e5:d1:6f:f7:86:81:fd:e4:b6:cc:dd:b0:16:
                    84:88:2e:26:1e:a5:b7:6a:5d:23:9a:39:45:73:e2:
                    6a:fb:85:16:43:17:3a:a8:e8:3b:46:62:61:a0:a4:
                    c6:3a:25:37:1f:02:f9:c1:f6:f5:20:69:d0:24:23:
                    b0:cf:b1:8b:4f:43:26:0d:97:76:2d:2d:fb:33:0e:
                    8a:c3:fe:87:3e:6a:20:6a:5c:6c:1a:9c:2a:d8:61:
                    c2:b8:23:df:16:a5:29:bb:ce:95:46:e3:ea:2a:4d:
                    99:ab:34:40:6e:7e:24:e1:f0:1f:f3:95:28:cf:e6:
                    79:09:c3:49:f8:04:ae:24:54:fd:25:26:26:a6:af:
                    d0:88:b8:71:85:3c:7f:ce:16:13:39:9d:19:51:42:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1B:8C:AE:89:95:96:64:7A:C2:FB:32:C8:0D:77:3B:D7:B4:9F:35
            X509v3 Authority Key Identifier:
                keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:14:8f:10:e8:5e:06:db:3f:8e:2f:53:7d:f6:31:7e:bb:83:
         9d:11:e4:13:2f:ef:bd:a5:33:15:41:ea:a4:ec:5d:50:0a:84:
         d4:1e:71:86:e8:de:b8:b7:35:8b:aa:dc:9d:b1:d8:ee:70:d3:
         bc:b5:9c:91:6d:e8:4b:a5:6f:4c:11:ca:4c:b2:a3:c9:3a:f4:
         fc:d9:a6:f3:fa:fe:f7:00:2a:6d:cf:33:f0:92:68:15:2a:41:
         a5:fd:f0:41:48:52:e2:fc:e3:a3:cf:0b:04:7c:9a:7e:52:4a:
         8e:88:b2:ee:9c:63:f0:16:f9:c8:a1:6e:ba:9d:f3:c5:ac:9c:
         30:87:07:5d:a9:60:47:62:92:58:a6:c6:8b:f9:06:ea:33:76:
         c0:86:2b:f0:86:c0:b6:60:77:e4:d1:1f:1c:2d:74:1b:16:67:
         8c:73:35:4a:ae:a5:81:cf:05:4d:2b:c6:5d:0a:85:43:fd:8a:
         18:09:d7:80:03:d9:62:06:5f:7d:54:f2:5d:09:c9:0b:e8:a4:
         a3:72:a0:46:5a:6b:d6:eb:dc:04:d0:3d:33:d1:e6:f4:db:86:
         77:62:79:27:f8:6d:d8:31:8e:e8:85:e0:d6:fd:63:2b:54:5f:
         7f:d1:f4:69:ac:9c:7c:39:6c:c5:3e:cd:72:53:94:e2:54:a9:
         44:48:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:13 2025 by rpki-client