Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
File:                     ELZc9vpeH8roz4TJcB44vftjqrM.mft (raw, json)
Hash identifier:          s4DpX/9OYYLN01DBGTL7DkSlYJIhYiRPGpBh2rFzkA0=
Subject key identifier:   FC:9F:D9:CC:D0:A2:B7:B5:84:55:EC:CD:2F:0B:4C:50:6E:B3:5B:F5
Authority key identifier: 10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
Certificate issuer:       /CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Certificate serial:       0194BD181796D8DAC4CE87FA9E7FBE78C318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
Manifest number:          0CD7
Signing time:             Fri 31 Jan 2025 16:01:00 +0000
Manifest this update:     Fri 31 Jan 2025 16:01:00 +0000
Manifest next update:     Sat 01 Feb 2025 16:01:00 +0000
Files and hashes:         1: ELZc9vpeH8roz4TJcB44vftjqrM.crl (hash: FZ4mT11lQPpCAht0FSY8RCrDgWj16RAb+m56+blSAA0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:18:17:96:d8:da:c4:ce:87:fa:9e:7f:be:78:c3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
        Validity
            Not Before: Jan 31 16:01:00 2025 GMT
            Not After : Feb  1 16:01:00 2025 GMT
        Subject: CN=fc9fd9ccd0a2b7b58455eccd2f0b4c506eb35bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:e5:87:d1:09:5f:a4:63:2e:23:e3:28:cc:
                    9e:44:87:39:7b:87:49:fa:d1:c6:ad:61:f1:6f:ef:
                    f4:18:56:1d:29:c8:87:96:32:a5:01:33:8d:70:ed:
                    3b:ee:c2:15:df:ee:24:a5:87:df:c4:ba:52:f7:fa:
                    69:59:4f:66:22:70:05:c3:5d:c0:6a:a1:7e:90:86:
                    c0:51:5f:fb:11:1a:35:c1:f5:19:89:2c:89:17:53:
                    f0:94:d5:b7:92:b2:d1:4c:0a:d9:ee:36:e8:5d:c8:
                    ee:d0:33:aa:2c:06:09:45:47:36:cf:06:f1:ba:27:
                    67:6b:ad:3c:d5:9f:b0:30:ac:f9:1e:55:f7:de:08:
                    01:1e:f3:42:ea:78:66:75:4c:1d:e1:2c:49:36:1c:
                    58:33:c9:63:15:2f:d5:66:dc:7e:b4:12:ab:b0:1e:
                    5b:26:70:86:2b:91:71:9b:ed:a4:bc:89:07:a8:75:
                    0d:0e:7f:f7:31:16:60:d9:71:2d:dd:13:5f:95:15:
                    f7:4c:ad:af:90:ce:30:51:81:ed:98:c0:95:b8:87:
                    48:8a:34:33:ba:32:0b:e2:64:d9:1d:49:4a:19:4b:
                    ce:0f:56:47:9d:f7:6a:87:5b:b9:bc:32:3d:c7:63:
                    f3:00:7a:3c:01:c7:a9:bc:37:3a:43:5d:84:7e:c2:
                    1e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9F:D9:CC:D0:A2:B7:B5:84:55:EC:CD:2F:0B:4C:50:6E:B3:5B:F5
            X509v3 Authority Key Identifier:
                keyid:10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:60:cf:52:a1:0d:9a:1c:ad:b3:97:55:46:b1:a0:f8:08:ae:
         e2:4c:c6:cc:a8:d6:5f:7a:68:0d:6e:32:53:24:f2:95:54:a1:
         e2:b7:5d:37:8c:2e:00:ff:e8:7e:93:79:ad:06:5c:71:3c:6e:
         8c:6f:b0:18:36:97:2a:ed:b3:5f:05:9f:16:78:1e:5f:09:72:
         98:2b:99:d6:22:cf:ea:1a:f7:82:e6:31:e7:ed:bf:f6:eb:88:
         a4:f7:f6:bb:2f:4f:21:54:c1:e4:28:00:89:d4:28:b2:eb:90:
         e3:18:8e:39:53:bb:61:4d:d2:79:41:e1:39:d6:1b:4b:ce:1f:
         05:f2:f5:e9:5a:9b:51:17:07:96:80:60:ff:64:0b:bb:8b:ff:
         18:7f:f8:23:b3:0c:96:5c:21:4a:a8:b4:58:3f:b9:77:60:1e:
         ab:3d:e1:61:81:ce:a6:bd:8b:f9:a3:6b:6c:02:59:f2:95:08:
         43:a6:74:70:dd:25:c4:96:18:22:3a:2a:e8:45:69:d0:96:4a:
         0a:70:2a:e3:08:c9:70:a1:72:68:19:6b:5d:47:44:72:43:21:
         56:f5:3d:19:3a:6a:9b:03:4c:ec:84:62:2a:06:8d:f0:48:61:
         79:37:0b:ec:40:91:da:bc:fb:c8:7e:0b:3b:46:b2:37:9f:12:
         40:22:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:17 2025 by rpki-client