Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
File:                     a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json)
Hash identifier:          QtEFbUT+nsDIaviSDUhnyg1W2byS2YlG0I2uqk0fzMQ=
Subject key identifier:   00:FC:42:FC:F6:4C:16:1D:35:8C:B0:05:70:81:13:F1:85:27:D8:9B
Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
Certificate issuer:       /CN=6b83d9281a7a508abfc495304ae99c98c042c611
Certificate serial:       0194BC7321A9099F1C439736F9CABA8CF632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
Manifest number:          13BA
Signing time:             Fri 31 Jan 2025 13:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:49 +0000
Files and hashes:         1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: 0C+33YtpmgUdY392muAfa76Q+kl3zWG+nJN5bWL7pbI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:21:a9:09:9f:1c:43:97:36:f9:ca:ba:8c:f6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611
        Validity
            Not Before: Jan 31 13:00:49 2025 GMT
            Not After : Feb  1 13:00:49 2025 GMT
        Subject: CN=00fc42fcf64c161d358cb005708113f18527d89b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:37:8d:35:02:9f:32:71:6e:1f:b6:25:c6:
                    a4:9e:94:08:95:52:0d:81:39:78:9c:a9:fc:e0:27:
                    e8:36:70:75:c0:41:c8:9f:0a:02:29:30:7f:9f:05:
                    2c:e2:c4:c5:f5:98:6e:6e:f8:d5:2e:ff:ea:04:ba:
                    96:ea:ea:df:2c:ce:e9:2d:5b:11:38:4b:e7:c9:85:
                    5d:eb:2e:f6:87:4e:4f:ff:59:73:95:61:9c:81:75:
                    7f:ca:3a:b8:cd:8b:61:2b:ef:9e:1c:c8:93:eb:87:
                    fc:b3:15:a0:12:07:00:e7:f2:20:c3:f7:1a:c7:ed:
                    25:09:6c:90:f4:71:67:ee:fc:25:a6:40:1b:29:8e:
                    7e:c5:c0:33:c5:e2:2a:af:0b:07:35:22:e6:b9:5c:
                    ad:3e:26:02:a8:74:97:b8:44:23:ca:3b:e3:19:30:
                    8f:aa:02:c2:7d:06:0e:b1:38:67:bf:b7:38:9d:96:
                    17:37:77:0f:76:a3:6d:f6:22:55:bc:74:1d:53:c7:
                    df:22:03:37:0e:a6:54:47:3d:44:af:5e:82:73:61:
                    75:a5:20:4b:7a:8c:ea:c4:37:6a:df:e5:c3:f4:eb:
                    16:20:4b:68:15:72:44:da:56:92:09:5a:00:2c:e7:
                    93:86:03:94:d8:12:e9:99:f0:b2:3b:58:1b:9a:e2:
                    ea:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FC:42:FC:F6:4C:16:1D:35:8C:B0:05:70:81:13:F1:85:27:D8:9B
            X509v3 Authority Key Identifier:
                keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7a:16:d6:1d:18:f8:97:53:20:df:3a:c0:eb:91:5b:96:c6:
         d3:b6:06:38:31:e0:8a:48:3d:07:dc:d3:78:f8:d2:dd:ca:63:
         bf:29:30:b9:6d:80:23:8f:2f:75:81:8d:1b:dd:5d:84:73:0c:
         c7:7e:5f:d6:d7:73:a4:99:a3:3a:a1:b9:3c:93:3c:ea:28:cc:
         ae:79:48:a1:5a:8b:a4:0d:31:fd:30:93:9a:2b:c1:50:ac:9b:
         03:a6:93:27:9a:23:bf:61:6c:0c:59:86:b8:6f:f1:6a:16:12:
         a2:55:be:9c:2b:1f:45:d8:19:06:70:5c:c1:4c:04:b6:64:ab:
         22:05:86:47:d9:35:01:c7:2e:6b:32:13:38:1e:30:90:17:23:
         16:ef:36:c0:4e:8f:22:6e:0b:4e:a4:76:da:e9:f2:c9:d8:9b:
         16:65:55:1b:a7:f6:a0:40:99:e0:81:ec:f6:5e:a7:29:80:e0:
         48:56:17:17:2d:70:c9:88:70:29:03:6a:4c:4e:2a:6e:05:ac:
         39:c7:c0:16:52:81:25:51:80:45:26:ed:90:39:79:3f:e9:c0:
         3f:95:9f:de:81:11:10:23:76:33:81:bd:86:16:a2:66:3a:1b:
         81:86:19:26:96:d9:24:ef:b1:1d:16:2a:46:6d:ed:17:0a:f0:
         37:28:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:23 2025 by rpki-client