Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
File:                     9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft (raw, json)
Hash identifier:          KVdPifg2xDhtnNGhJy5NrrfDJDuXFmcSfG+3VxLE4zI=
Subject key identifier:   CD:E4:0E:0A:C8:8E:23:86:89:90:36:6C:92:37:88:7D:19:DD:85:D0
Authority key identifier: F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE
Certificate issuer:       /CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
Certificate serial:       0194BC3BE8D2C422CF9E7D2833B8673D0ACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft
Manifest number:          13B6
Signing time:             Fri 31 Jan 2025 12:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:30 +0000
Files and hashes:         1: 9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl (hash: xwuVFi2Qkmh67NiHJFkjch2pZFUlU+crs3WfNKrjIcU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:e8:d2:c4:22:cf:9e:7d:28:33:b8:67:3d:0a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f656fa18b119c3a49cbbcc56a60457439a4492ce
        Validity
            Not Before: Jan 31 12:00:30 2025 GMT
            Not After : Feb  1 12:00:30 2025 GMT
        Subject: CN=cde40e0ac88e23868990366c9237887d19dd85d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ef:ff:39:23:7b:d5:2c:5d:83:b5:f4:3c:97:
                    f6:50:5c:06:63:8c:54:c7:21:52:4d:78:85:6f:86:
                    ad:b4:a4:c8:94:f1:0c:b7:4d:89:f1:37:4f:8e:ea:
                    2c:03:00:45:b4:67:d8:a0:91:5e:9c:0e:e2:22:33:
                    88:36:d0:ec:24:e7:c1:da:7b:2b:a2:db:08:33:3c:
                    30:eb:c9:74:3e:80:4e:9c:b0:fb:54:4c:33:58:9c:
                    9b:6e:4b:02:a9:75:94:61:b1:98:be:8a:4e:e3:17:
                    21:46:8c:87:b4:61:3a:d9:69:a2:6c:e8:fd:4a:41:
                    36:22:68:fd:0f:40:be:a6:d8:95:9b:e3:09:fc:40:
                    20:b5:b5:6c:93:b2:7a:98:a4:f2:dc:d9:b7:0a:c9:
                    e9:26:7c:96:22:5b:08:4b:2d:02:e2:63:76:de:86:
                    3d:23:1b:f9:89:b1:1d:6c:7f:ff:9c:69:73:2d:92:
                    38:8c:ae:97:26:2d:1f:fb:1e:c9:82:5d:aa:31:16:
                    03:48:ac:c2:90:6a:42:18:f3:f3:02:c6:4e:30:28:
                    7b:7d:71:56:4b:c7:cc:26:30:6e:1e:dc:24:d3:90:
                    07:31:9c:9a:16:a7:6b:e7:28:e8:00:ee:c6:1b:e9:
                    01:79:2f:0f:7c:7d:e6:f2:b5:81:dd:e7:b6:01:f3:
                    6e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E4:0E:0A:C8:8E:23:86:89:90:36:6C:92:37:88:7D:19:DD:85:D0
            X509v3 Authority Key Identifier:
                keyid:F6:56:FA:18:B1:19:C3:A4:9C:BB:CC:56:A6:04:57:43:9A:44:92:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lb6GLEZw6Scu8xWpgRXQ5pEks4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f2d3a2-b14a-411a-8629-c920f1646c9c/1/9lb6GLEZw6Scu8xWpgRXQ5pEks4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2c:73:50:38:cd:ef:ab:44:5f:83:64:1f:ba:44:a3:72:9c:
         8a:39:08:0d:02:46:32:a2:bf:c4:91:68:e7:41:0b:2f:b0:99:
         3d:10:e8:41:83:b2:dc:f2:20:f1:46:22:a9:cb:2f:ba:75:47:
         0e:01:8e:12:48:50:1f:e3:44:7f:49:b7:8f:1c:fc:e6:dd:a0:
         4f:0d:bd:be:23:4f:af:c9:17:6a:6f:03:ed:07:85:a0:af:ad:
         43:4d:60:e2:10:a6:16:3c:31:e4:01:cb:27:60:4e:be:cf:3c:
         62:35:44:d3:01:6c:b5:32:53:fa:3d:b9:6f:49:3e:68:c2:c5:
         c4:2a:c8:22:9d:9d:73:2b:5f:6f:c3:93:41:cb:43:f9:a3:92:
         b7:b3:7b:2f:8f:6d:20:37:55:d5:84:dd:1f:cd:c1:5e:da:1c:
         3a:d8:b3:06:77:be:6f:af:e0:de:63:51:69:f4:b6:b0:b2:88:
         64:e6:b9:10:66:1a:d1:5a:b6:75:d7:1b:fa:4f:4a:cd:41:ba:
         33:ed:85:af:ef:bd:6b:28:f4:3a:2d:c2:ec:d3:50:25:d9:4d:
         3c:0b:f3:91:57:61:29:e8:bf:35:cf:e8:58:17:87:74:9e:82:
         68:ba:94:aa:62:29:4e:80:dc:59:6a:6a:af:96:55:37:16:d2:
         b6:f5:01:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:04:55 2025 by rpki-client