Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
File:                     B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft (raw, json)
Hash identifier:          yLcg8F5fH1JiCu2D/icFgDNf9XRYvnxMLRaXAi/Vxbo=
Subject key identifier:   36:1F:74:BF:A8:89:21:7F:EB:FF:EF:E3:C6:1D:7D:0C:F2:72:75:4B
Authority key identifier: 07:D3:A4:E6:62:F7:12:95:67:CD:18:A3:E1:9B:E7:BA:F2:81:A4:A3
Certificate issuer:       /CN=07d3a4e662f7129567cd18a3e19be7baf281a4a3
Certificate serial:       0194BD17A8221594EE0CF4134C3388CF83CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft
Manifest number:          0134
Signing time:             Fri 31 Jan 2025 16:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:31 +0000
Files and hashes:         1: B9Ok5mL3EpVnzRij4ZvnuvKBpKM.crl (hash: z1SCKn5kfLgYi6IBRrMf3hvCh0zMX8w7bgs6cQLn3Ek=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:a8:22:15:94:ee:0c:f4:13:4c:33:88:cf:83:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d3a4e662f7129567cd18a3e19be7baf281a4a3
        Validity
            Not Before: Jan 31 16:00:31 2025 GMT
            Not After : Feb  1 16:00:31 2025 GMT
        Subject: CN=361f74bfa889217febffefe3c61d7d0cf272754b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:0e:73:88:06:16:11:05:68:52:79:56:ed:
                    24:31:6e:ac:4c:c8:69:1c:f9:4b:a6:be:f3:d9:45:
                    80:6c:39:70:17:2c:f6:a4:6c:c3:83:a2:7f:7e:6d:
                    12:9a:88:21:29:c7:70:1a:c8:8d:c8:90:8e:c5:c5:
                    13:bb:30:34:e0:8b:e1:2c:be:4c:f4:7c:04:31:63:
                    34:3c:12:8b:f2:f9:f9:60:4d:76:5c:67:08:1e:8c:
                    a4:de:f7:2b:40:69:c8:ea:8b:da:31:cb:21:02:3e:
                    9e:b2:3d:0d:7b:c0:ba:a8:07:b1:08:d7:a2:8c:ef:
                    fc:d1:8a:82:c5:a7:9b:7c:34:f3:43:b9:88:c2:fe:
                    46:d4:f8:63:56:0c:fd:30:12:94:99:f1:5d:d3:38:
                    07:e9:b9:89:df:a0:e8:2e:75:55:41:93:78:8c:34:
                    a0:4c:68:e9:61:72:37:e6:79:ca:a9:dd:3a:de:ea:
                    30:73:f6:bf:cf:a1:2a:0f:11:06:b1:59:e9:84:5b:
                    d6:bd:63:75:0b:b0:cb:4d:9e:a0:f9:45:8a:31:00:
                    7c:53:cc:74:1f:35:b4:2b:1a:eb:2d:62:9c:f4:c0:
                    57:e7:9e:bc:33:af:31:c9:e8:97:1f:56:6d:7f:62:
                    80:66:4a:85:55:20:3e:81:73:c4:ae:cc:50:8c:4f:
                    90:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1F:74:BF:A8:89:21:7F:EB:FF:EF:E3:C6:1D:7D:0C:F2:72:75:4B
            X509v3 Authority Key Identifier:
                keyid:07:D3:A4:E6:62:F7:12:95:67:CD:18:A3:E1:9B:E7:BA:F2:81:A4:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40d57a-44d3-41d5-8b41-69705b37698e/1/B9Ok5mL3EpVnzRij4ZvnuvKBpKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:f3:d5:28:4e:fc:c5:24:27:2a:6e:dd:4f:ae:6d:d0:c8:
         38:2b:6e:92:e1:86:04:51:be:f7:97:7d:85:77:3d:3f:bf:6e:
         e8:a6:89:5c:e1:11:63:4a:88:d5:de:51:32:3d:d3:1a:bc:30:
         3a:91:14:4a:94:24:64:d9:bc:34:a0:ee:62:c6:5e:a5:95:8e:
         ac:0f:d7:04:90:13:0a:6e:a3:58:f3:b0:58:97:22:c7:b0:9d:
         01:ba:dd:2c:0f:46:c8:79:e7:14:27:19:c7:a5:65:69:a1:57:
         35:73:a9:02:42:e5:6a:05:ec:75:ab:80:c7:92:1b:81:95:db:
         33:c7:45:2b:d5:42:4f:ab:99:cf:60:d2:14:9e:93:8a:73:d6:
         a0:65:11:b6:6c:25:b9:e3:a0:7e:fd:d7:1d:90:0c:d9:f9:18:
         f3:23:c9:f1:21:fe:ed:42:6f:f7:39:db:37:8b:f3:21:b1:f8:
         f5:82:9b:a1:ce:24:c7:01:7e:c4:9e:22:3a:4b:72:24:26:4c:
         ea:4e:d9:5a:d5:b5:6b:ac:89:13:4b:57:0a:32:14:99:1e:86:
         51:65:76:2f:6f:4d:53:4b:80:b5:9b:3e:c5:8d:4b:ec:47:24:
         7b:ba:95:ae:a2:5f:4a:f7:3a:6b:7e:d6:cd:0a:4d:e9:ff:e1:
         38:da:c7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:15 2025 by rpki-client